1. Scope and role
This policy applies when you access, log in, create a child profile, read or personalize stories, upload reference photos, use your voice, submit feedback, or purchase a storybook plan. Accounts are managed by adults (parents or legal guardians) who oversee and accompany the child's experience.
We process personal data strictly to deliver the storytelling features you request, maintain service security, provide customer support, and meet legal obligations. We never sell or license personal data to third parties for advertising or unauthorized commercial purposes.
2. Data is processed
- Account credentials: Firebase user ID, email address, display name, account avatar, membership status, and activity timestamps.
- Child profile provided by parent: first name or nickname, birth year, optional gender, and parent-uploaded reference photos used exclusively to illustrate personalized storybook characters.
- Activity data: stories read or listened to, favorites, reading progress, feedback, and necessary technical diagnostics to operate reliably and prevent abuse.
- Payment records: order code, plan type, amount, status, email, Polar checkout ID, and transaction references. talepillow.com does not receive or store full payment card details.
- Voice samples: audio recorded or uploaded by an adult with verified consent, voice labels, processing status, and synthesized narration files created for stories.
3. Purpose and grounds for processing
Data is processed to authenticate users; generate custom 3D watercolor character illustrations and personalized stories; synthesize, stream, and save narration; fulfill purchased plans; preserve user preferences; and provide customer support.
Processing is grounded in explicit user consent, fulfillment of requested services, platform safety and anti-fraud measures, and applicable legal obligations. You may withdraw consent or delete your media at any time.
4. Storage and suppliers
Firebase Authentication secures account sign-in. Cloudflare D1 stores account records, child profile metadata, order logs, reading progress, and narration metadata. Firestore delivers published story content and administrative configurations. Cloudflare R2 provides private, encrypted cloud storage for story artwork, uploaded reference photos, voice samples, and generated audio narration.
OpenAI-compatible APIs generate story narratives, descriptions, and character art prompts on an ephemeral request basis. Google Cloud Text-to-Speech synthesizes audio narration. Polar provides hosted checkout, payment processing, tax calculation, invoicing, and refunds. Data is transmitted securely over encrypted TLS connections.
5. Children and parental controls
talepillow.com is intentionally designed for parent or guardian direction. Children do not create independent accounts, upload photos, or execute financial transactions. Parents are advised to provide only minimal necessary details (such as a first name or nickname) for story personalization.
When parents choose to use our photo-to-storybook feature, the uploaded child photo is processed solely to generate the custom illustrated storybook character for that family. Photos are kept in private storage and are never published publicly or shared with third parties for marketing. Parents can permanently delete child photos, character avatars, and voice profiles at any time through their account dashboard or by emailing support.
6. Security and retention
We implement industry-standard authentication, role-based authorization, and encryption in transit and at rest. Security audits and access restrictions ensure personal data and uploaded photos remain strictly private.
Personal data and photos are retained while your account and personalized stories are active. Parents can remove uploaded photos, character avatars, and voice samples at any time. Financial transaction records are retained in compliance with statutory tax and accounting requirements.
7. Your rights
- Access and inspect personal data, child profiles, and uploaded media associated with your account.
- Request correction, update, or permanent deletion of your child profile, uploaded photos, or voice profiles.
- Withdraw consent for optional AI personalization features at any time without losing access to standard library reading.
- Request clarification on data processors, storage locations, or submit inquiries directly to our privacy officer.
8. Reference text
Contact and data requests
talepillow.com is operated by Nguyễn Xuân Thông. Any questions, feedback, complaints, or data privacy requests can be sent directly to contact@talepillow.com.
To protect family privacy and ensure data is never disclosed to unauthorized parties, we may verify account credentials or parental authority before fulfilling deletion or access requests. We acknowledge receipt promptly and respond within an appropriate timeframe under applicable regulations.