DozyTales (“we,” “us,” or “our”) operates the website dozytales.com and the DozyTales mobile application (collectively, the “Service”). DozyTales is an AI-powered bedtime stories app for children aged 2–10.
Your family’s privacy is extremely important to us. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We are committed to complying with the Children’s Online Privacy Protection Act (COPPA) and all applicable data-protection laws.
1. Information We Collect
Information you provide directly
- Waitlist sign-up: your email address when you join our pre-launch waitlist.
- Early adopter payment: when you purchase an early adopter spot, Stripe processes your payment information (credit/debit card details). We do not store your full card number on our servers.
- Account information: when the app launches, you may create an account with your name, email address, and a password.
- Child profiles: to personalize stories, a parent or guardian may provide their child’s first name, age, interests, and optional appearance details (e.g., hair color, eye color). This information is collected from the parent or guardian only — never directly from the child.
Information generated through usage
- Story history: records of stories generated, including themes chosen and story content.
- Audio preferences: voice selection and audio-mode settings.
- Device and usage data: basic analytics such as device type, operating system, app version, and feature usage patterns. We use this to improve the Service.
Information we do NOT collect
- Precise geolocation data
- Contacts, photos, or files from your device
- Any information directly from children — all data is entered by a parent or guardian
2. How We Use Your Information
We use the information we collect for the following purposes:
- Personalized story generation: child profile data (name, age, interests, appearance) is used to create stories and illustrations tailored to your child.
- Service delivery: managing your account, processing payments, saving story history, and remembering your preferences.
- Communication: sending waitlist updates, launch announcements, purchase receipts, and essential service notifications. You can unsubscribe from marketing emails at any time.
- Improving the Service: analyzing usage patterns (in aggregate) to fix bugs, enhance features, and develop new content.
- Safety and compliance: ensuring content remains age-appropriate, preventing abuse, and complying with legal requirements.
We do not sell, rent, or trade your personal information to third parties. We do not display advertising in the Service.
3. Children’s Privacy & COPPA Compliance
DozyTales is designed for families with children aged 2–10. We take our obligations under the Children’s Online Privacy Protection Act (COPPA) seriously.
- Parental consent: we require that a parent or legal guardian create and manage the account. Child profile information is entered only by the parent or guardian, not the child.
- Minimal data collection: we collect only the information necessary to personalize stories (first name, age, interests, and optional appearance details). We do not collect more information from children than is reasonably necessary.
- No direct child interaction: the app is designed to be set up and supervised by a parent or guardian. Children do not create accounts, enter personal information, or interact with other users.
- No behavioral advertising: we do not serve ads to children, and we do not use children’s data for targeted advertising or any marketing purpose.
- Parental rights: parents can review, update, or delete their child’s profile information at any time through their account settings or by contacting us at hello@dozytales.com.
- Data deletion: if a parent requests deletion of their child’s data, we will promptly remove all associated child profile information and story history from our systems.
4. Third-Party Services
We work with a limited number of trusted third-party service providers to operate the Service. These providers only receive the minimum information necessary to perform their function:
- Stripe — processes payments securely. Stripe receives your payment details (card number, billing address) directly; we do not store this information. Stripe’s privacy policy is available at stripe.com/privacy.
- ConvertKit (Kit) — manages our email waitlist and marketing communications. ConvertKit receives your email address when you join the waitlist. Their privacy policy is available at kit.com/privacy.
- Vercel — hosts our website and provides privacy-friendly analytics (page views, visitor counts, performance metrics). Vercel does not use cookies for analytics and does not collect personally identifiable information. Their privacy policy is available at vercel.com/legal/privacy-policy.
- AI Service Providers — we use third-party AI APIs to generate story text and illustrations. These providers receive the minimum context needed to create a story (e.g., a child’s first name, age, and story theme). We contractually require these providers not to retain or use this data for their own purposes, including model training.
We do not share personal information with any other third parties except as required by law (e.g., in response to a valid legal process).
5. Data Security
We implement appropriate technical and organizational measures to protect your information, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Secure authentication and access controls for our systems.
- Regular security reviews and updates of our infrastructure.
- Limiting employee and contractor access to personal data on a need-to-know basis.
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately.
6. Data Retention
We retain your information only for as long as necessary to provide the Service and fulfill the purposes described in this policy. Specifically:
- Account data is kept for the lifetime of your account and deleted within 30 days of account deletion.
- Child profile data is deleted when you remove the profile or close your account.
- Payment records are retained as required for tax and legal compliance (typically up to 7 years).
- Waitlist emails are removed upon request or within 12 months of the Service launching if you do not create an account.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you and your child.
- Correction: ask us to update or correct inaccurate information.
- Deletion: request that we delete your personal information and your child’s data from our systems.
- Data portability: request your data in a commonly used, machine-readable format.
- Withdraw consent: withdraw your consent for data processing at any time. This will not affect the lawfulness of processing conducted before withdrawal.
- Opt out of emails: unsubscribe from marketing communications using the link in any email, or by contacting us directly.
To exercise any of these rights, please email us at hello@dozytales.com. We will respond to your request within 30 days.
8. Cookies & Tracking Technologies
Our website may use essential cookies required for the Service to function (e.g., session management). We do not use third-party tracking cookies for advertising.
We use Vercel Analytics and Vercel Speed Insights to understand aggregate usage patterns (page views, visitor counts, referrers, countries) and monitor real-user performance. These tools are privacy-friendly: they do not use cookies, do not collect personal information, and comply with GDPR, CCPA, and PECR without requiring a cookie consent banner. No data is shared with advertisers. We do not track children across websites or apps.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the “Last updated” date at the top of this page and, if appropriate, through an email notification or an in-app notice. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices — including anything related to your child’s information — please contact us: