How is my child's data protected?

Protecting your child's data is our highest priority. Here's how we approach it:

What we collect

• Child's first name, age group, interests, and bedtime
• Parent/guardian email address only (no child email collected)
• Story content generated for your child

What we don't collect

• No photos, location data, or device identifiers from children
• No precise age (we use age groups: toddler, early reader, middle reader)
• We never use child data to build advertising profiles

Standards we follow

• UK GDPR — lawful basis, data minimisation, right to erasure
• UK Children's Code (Age Appropriate Design Code) — privacy by default for under-18s

Data storage

Data is stored on servers in the EU. We use encrypted connections (TLS) for all data in transit. Database at rest is encrypted.

Your rights

You can access, correct, export, or delete all data at any time from Settings. See our Privacy Policy for full details.