Privacy Policy

ToyTales (“we”, “our”, or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use the ToyTales mobile application (the “App”).

1. Information We Collect

Account Information

When you sign in with Apple or Google, we receive your email address (or an Apple private relay email) and display name. We do not collect passwords — authentication is handled entirely by Apple or Google.

User-Generated Content

You may upload photographs of toys using the App. These photos are stored securely in Firebase Storage under your authenticated account. They are not shared with other users or made public.

AI-Generated Content

When you create coloring pages or comic books, your toy photographs are sent to third-party AI services (see Section 3) to generate content. The generated coloring pages, comic panels, and story text are stored in Firebase Storage under your account.

Usage Data

We collect anonymous, aggregate analytics events using Firebase Analytics. These events track general feature usage (e.g., how many coloring pages are created, which art styles are popular) and do not identify individual users. We do not use Apple's Identifier for Advertisers (IDFA) or any device fingerprinting techniques. We do not call Firebase's setUserID method — all analytics are fully anonymous.

2. How We Use Your Information

• To provide the service: We use your toy photographs to generate personalized coloring pages and comic books.
• To improve the App: Anonymous, aggregate analytics help us understand which features are most used and where users experience issues.
• To communicate with you: We may use your email address to respond to support requests sent to support@toytales.app.

We do not sell your data, serve advertisements, or share your personal information with third parties for marketing purposes.

3. Third-Party Services

ToyTales uses the following third-party services:

• Firebase (Google) — Authentication, data storage (Firestore and Firebase Storage), and anonymous analytics. Firebase's privacy policy applies: firebase.google.com/support/privacy.
• OpenAI API — Toy photographs are sent to OpenAI's API for text generation (story creation, toy naming) and image generation (comic panels). OpenAI does not use API submissions to train their models. OpenAI's privacy policy applies: openai.com/policies/privacy-policy.
• Google Gemini API — Toy photographs are sent to Google's Gemini API for image generation (coloring pages and comic panels). Google's API data usage policy applies: ai.google.dev/terms.

None of these services receive personally identifiable information beyond what is necessary to perform the requested generation. We do not send your email address or account information to AI services.

4. Children's Privacy

ToyTales is designed for use by parents, not directly by children. The App is listed in the Entertainment category on the App Store, not the Kids category.

• We do not knowingly collect personal information from children under 13.
• Photographs uploaded through the App are of toys, not of children.
• All AI-generated content is moderated for child-appropriate themes (ages 3–8) using multiple safety filters.
• Account creation requires authentication via Apple or Google, which requires the user to be 13 or older.

If you believe we have inadvertently collected information from a child under 13, please contact us at support@toytales.app and we will delete it promptly.

5. Data Retention and Deletion

• You can delete your account at any time via Settings > Delete Account in the App.
• Upon account deletion, all your data — including toy photos, generated coloring pages, comic books, and account information — is permanently removed from our servers.
• Firebase Analytics data is aggregate and anonymous; it cannot be traced to individual users and is not affected by account deletion.

6. Data Security

• All data is transmitted over HTTPS with TLS encryption.
• Firebase Security Rules restrict data access to authenticated users' own content — no user can access another user's data.
• API keys for third-party services are securely managed and are not embedded in the app binary.

7. Your Rights

You have the right to:

• Access your data by viewing your content within the App.
• Delete your data by deleting individual items or your entire account.
• Contact us with questions about your data at support@toytales.app.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted at this URL (toytales.space/privacy). We encourage you to review this page periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at: support@toytales.app