Privacy Policy

1. What We Collect

When you use My Tiny Tales, we collect:

• Photos you upload (see Section 3 for deletion timescales) • Your child's first name, approximate age, and chosen adventure theme • Standard usage data (browser type, page views) via Google Analytics — only if you have given explicit cookie consent • Payment details are handled entirely by Stripe; we never receive or store card numbers.

2. How We Use Your Data

Your photo is used solely to create a personalised AI character for your storybook. The child's name and age are used to customise the story text. We do not use this information for advertising, profiling, or any secondary purpose.

3. Photo Handling

Uploaded photos are automatically stripped of all metadata (including GPS location) before processing. We do not store your photos on our own servers — they are sent securely to fal.ai purely as a live reference for generating your book's illustrations, and are never used to train AI models. fal.ai automatically and permanently deletes the reference image within 48 hours of upload. We do not view or share your photos. See our Children's Data page for full details.

4. Children's Privacy

My Tiny Tales is designed to be used by parents and guardians on behalf of their children, consistent with the U.S. Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information directly from children under 13 — a parent or guardian provides the child's photo and first name. If you believe a child has provided us information without parental consent, please contact us and we will delete it promptly.

5. AI Provider Data Retention

We use the following AI services:

• fal.ai (image generation) — images are processed in isolated pipelines and are not used for model training. Reference photos are set to auto-delete from fal.ai within 48 hours of upload. • Anthropic Claude (story text) — story prompts are processed in real time. Anthropic does not store API inputs for training by default for API customers.

Neither provider uses your data to train models.

6. Data Sharing

We use the following sub-processors:

• Stripe — payment processing (PCI-DSS compliant; never sees photo or story data) • fal.ai — AI image generation • Anthropic — story text generation • Vercel — hosting and edge delivery • Google Analytics — aggregate usage analytics (only with your consent)

We do not sell or rent your personal information, and we do not share it for cross-context behavioral advertising.

7. Cookies

We use cookies in the following categories:

• Necessary — session cookies required to keep the creation flow working. Cannot be disabled. • Analytics — Google Analytics (GA4) to understand how visitors use the site. Only set after you give explicit consent. • Marketing — not currently used.

You can change your cookie preferences at any time via the Cookie Settings link in the footer.

8. Cookie Consent Expiry

We store your cookie preference for 6 months, after which we will ask again.

9. Your Privacy Rights

Depending on where you live — including under the California Consumer Privacy Act (CCPA/CPRA) — you may have the right to know what personal information we collect and how it is used, to access a copy of it, to request its deletion, to correct inaccurate information, and to opt out of the 'sale' or 'sharing' of personal information. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We will never discriminate against you for exercising these rights.

To exercise any of these rights, email hello@mytinytales.studio with 'Privacy Request' in the subject line. We will verify and respond within 45 days.

10. Contact

My Tiny Tales · hello@mytinytales.studio

For any privacy question or request, email us with 'Privacy Request' in the subject line.

This policy was last updated August 2026.