Privacy Policy

We use your information to:

• Provide the Service: Manage your account, process payments, deliver content
• Improve Experience: Remember your preferences, bookmarks, and reading progress
• Communicate: Send transactional emails (purchase confirmations, access expiry reminders, password resets)
• Customer Support: Respond to your questions and troubleshoot issues
• Legal Compliance: Comply with applicable laws and prevent fraud
• Analytics: Understand usage patterns to improve our service (aggregated, non-personal data only)

We do NOT use your information to: Sell or rent to third parties, send marketing emails without your consent, or create profiles of children.

Storytime is fully compliant with the Children's Online Privacy Protection Act (COPPA):

• No Child Accounts: Children under 13 cannot create accounts. All accounts are parent-controlled.
• No Personal Information from Children: We do not knowingly collect names, email addresses, or any personal information directly from children.
• Parent-Controlled Usage: Reading progress and bookmarks are stored under the parent's account, not linked to individual children.
• Age-Appropriate Content: Stories are curated for children, but all account management is done by adults.
• Parental Rights: Parents can review, delete, or request changes to any data in their account at any time.

If we learn we have inadvertently collected information from a child under 13, we will delete it immediately. Please contact us at [email protected].

If you are in the European Union, you have the following rights under GDPR:

• Right to Access: Request a copy of all personal data we hold about you
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Opt out of certain data processing activities
• Right to Withdraw Consent: Remove consent for optional data processing (e.g., analytics cookies)

Legal Basis for Processing: We process your data based on contract performance (providing the service), legal obligations (tax, fraud prevention), and legitimate interests (improving our service).

To exercise any of these rights, contact us at [email protected].

We use the following types of cookies:

Managing Cookies: You can control cookies through your browser settings. Note that disabling essential cookies may prevent you from using certain features.

We share your data only with:

• Payment Processors: To process your purchases (they have their own privacy policies)
• Hosting Providers: To store data securely (AWS, Heroku, etc.)
• Analytics Services: To understand usage patterns (Google Analytics with IP anonymization)
• Email Services: To send transactional emails (SendGrid, Mailgun, etc.)
• Law Enforcement: If required by law or to protect rights and safety

We NEVER sell your data to third parties or advertisers.

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

While we implement industry-standard security measures, no system is 100% secure. Please use a strong, unique password and enable two-factor authentication when available.

You have the right to:

• Access Your Data: Request a copy of all personal data we hold (we'll respond within 30 days)
• Correct Your Data: Update inaccurate information in your account settings or by contacting us
• Delete Your Data: Close your account and request deletion of all data
• Export Your Data: Receive your data in JSON format for portability
• Opt Out of Marketing: Unsubscribe from promotional emails (transactional emails cannot be disabled)

To exercise these rights, contact us:

• Email: [email protected]
• Subject Line: "Privacy Request - [Your Name]"
• Response Time: We will respond within 30 days