Privacy Policy

Last updated: August 17, 2026

TinyTale creates personalized children's picture books. This policy explains what we collect, why, and what happens to it. The short version: we collect only what we need to make your book, we don't sell it to anyone, and photos you upload are deleted automatically.

Who TinyTale is for

TinyTale is used by parents and guardians — not by children. When you tell us about your child, you're providing that information as their parent or guardian and consenting to us using it for the single purpose of creating your book.

What we collect

• Story details — your child's first name, age, and the story choices you make. Used to write and illustrate the book.
• An optional photo — if you upload one, it's used only to guide and automatically check the character's illustrated appearance. See "Photos" below.
• Order details — your email and shipping address, used to fulfill your order and send you updates about it. If you enter your email at checkout but don't finish your order, we may send you a single reminder about it — every such email has a one-click unsubscribe link.
• An optional book-ready email — if you ask us while your book is being made, we use it for one completion message and reuse it to save you typing at checkout. It is separate from marketing consent, can be turned off before delivery, and is encrypted in our database.
• Usage analytics — privacy-light metrics about how the site is used (pages visited, steps completed), including Cloudflare's performance beacon. No advertising trackers, no third-party cookies, no cross-site tracking.
• Ad click attribution — if you arrive from one of our ads, the ad's link carries a click ID and we keep it in a single first-party cookie (tt_clid, 90 days) so we can report back to the ad platform which ads actually led to a story or an order. It identifies the ad click, not you, and is never used to track you across other sites.

Photos

An uploaded photo is used only to create and automatically check your child's illustrated character. It is deleted automatically when your order completes, and a scheduled cleanup deletes any remaining photo within 30 days regardless. We never use photos for anything else — no training, no marketing, and no sharing beyond the AI photo-analysis, illustration, and automated quality-check steps below.

Sample stories

We sometimes reuse the AI-generated story text and artwork we create (never your inputs) to publish anonymized sample stories on our site. Before anything is published, the child's name is replaced, dedications and personal messages are removed, and a person reviews the sample. Books made with an uploaded photo are never reused this way — no illustration based on your child's photo ever appears outside your own book. You can opt your book out entirely by emailing us.

Shared book links

Sharing your finished book is entirely opt-in: nothing is shareable until you tap Share. A shared link is unguessable and unlisted — we tell search engines not to index it — and you can turn it off at any time, after which the link stops working.

Who we share data with

We share the minimum needed with the services that make your book real:

• AI story and illustration providers — receive the minimum story details needed to generate your book. An illustration provider receives the optional photo solely to draw the personalized character.
• AI photo-analysis and quality-check providers — may receive the optional photo first to describe visible appearance details, and later together with a generated illustration solely to check whether the character's appearance stayed consistent.
• Stripe (payments) — receives your payment details. We never see or store your card number.
• Lulu (printing) — receives the book files, your name, and shipping address, to print and ship the book.
• Cloudflare Email Service (email) — receives your email address only to deliver the transactional message you requested or an order update.

We do not sell personal information, and we do not share it for advertising.

How long we keep things

• Photos: deleted on order completion, and always within 30 days.
• Story and order records: kept so you can check your order and we can support you.
• Pre-checkout book-ready email requests and their private resume links: deleted within 30 days; resume links expire sooner.
• You can ask us to delete your data at any time (see Contact).

Your choices

Email us and we'll show you what we have, correct it, or delete it. If you're in a region with specific privacy rights (like the GDPR or CCPA), those rights apply to everything above — access, correction, deletion, and portability.

Contact

support@tinytale.ai — or reply to any order email.