Children's Data

What We Collect

To create your child's storybook we collect:

• One or two photos of your child (provided by you, deleted after generation — see below) • Your child's first name and approximate age (used only to personalise the story text) • An adventure theme you choose

We do not collect your child's surname, date of birth, school, address, or any other identifying information. We do not collect data directly from children — everything goes through you, the parent or guardian.

How Photos Are Processed

Your photos are sent from your device to our secure servers over an encrypted HTTPS connection. Before processing, we automatically strip all EXIF metadata from the image (including any GPS location data your phone may have embedded).

The photo is then sent to fal.ai — an AI image service operating under EU Standard Contractual Clauses — where your child's likeness is read directly from the photo at the moment each illustration is generated. No separate 'model' or copy of your child is trained or created; the photo is used only as a live reference for the pictures in your book.

How Long Photos Are Kept

We never store your child's photo on our own servers. It is passed to fal.ai purely as a live reference while your book's illustrations are generated, and fal.ai automatically and permanently deletes it within 48 hours of upload — most books are finished within minutes.

Because no per-child model is ever created, there is nothing trained or saved from which a likeness could be recovered later.

Who Has Access

Your child's photo is seen only by:

• Our automated processing pipeline (no human ever views individual photos) • fal.ai's secure infrastructure (subject to their Data Processing Agreement)

We do not share photos or story data with advertisers, data brokers, analytics services, or any other third party. Stripe (our payment processor) never receives photo or story data — they handle only payment information.

Photos Are Never Used to Train AI Models

Your child's photos are never used to train, fine-tune, or improve any AI model — ours or anyone else's. The photo serves only as a live reference while your book's illustrations are generated, and is not retained by us afterwards. We have confirmed this policy with fal.ai contractually.

AI Provider Data Retention

• fal.ai (image generation): reference photos are set to auto-delete from fal.ai within 48 hours of upload, and outputs are not used for model training. Full policy: fal.ai/privacy • Anthropic Claude (story text): story prompts are processed in real time and are not stored by Anthropic for training per their API data usage policy (no-training applies to all API customers by default). Full policy: anthropic.com/privacy • Stripe (payments): card and payment data is handled entirely by Stripe and never touches our servers. Full policy: stripe.com/privacy

Your Rights as a Parent

As a parent or guardian, you can:

• Review the personal information we have collected about your child • Request that we delete it • Refuse to allow any further use or collection of your child's information • Ask us to correct inaccurate information

These rights are provided under the U.S. Children's Online Privacy Protection Act (COPPA) and, depending on your state, laws such as the California Consumer Privacy Act (CCPA/CPRA).

To exercise any of these rights, email hello@mytinytales.studio with the subject line: Privacy Request. We will verify your request and respond within 45 days.

Contact & Complaints

My Tiny Tales · hello@mytinytales.studio

If you have a concern about how we handle your child's data, please contact us first so we can put it right. You may also contact the U.S. Federal Trade Commission (ftc.gov), which enforces COPPA, or your state Attorney General.

Last updated: August 2026.