Children's Privacy Statement

Last updated: [DATE]

Storytime Buddies is designed for children to use, with their parents and, as they grow, on their own. That makes children's privacy the centre of our design, not an afterthought. This statement supplements the Privacy Policy and is written to address the US Children's Online Privacy Protection Act (COPPA), the EU and UK GDPR as they apply to children ("GDPR-K"), and the UK Age Appropriate Design Code.

Parental consent by design

A child cannot use Storytime Buddies until a parent creates an account, verifies their email, and creates a profile for that child. The only personal information held about a child (first name and age) is provided by the parent. We treat the parent's account creation and profile setup as the mechanism of verifiable parental consent for the limited processing described here.

Minimal data

We collect no contact information, no surname, no photographs, no location, and no audio from children. The optional story-idea text box (available only at the oldest reading level) is used solely to generate a story, is filtered for safety, is never published or shared, and is not retained as a separate record.

No advertising, no tracking, no profiling

There is no advertising of any kind in Storytime Buddies. We do not build profiles of children, do not track children across other sites or apps, and do not use children's data for marketing. Upgrade offers are shown only to parents in the parent dashboard, never inside the child experience.

No social features

There is no chat, no messaging, no friend system, no comments, no content sharing between users, and no external links anywhere a child can reach.

Parental control

Parents can review every story their child has made, see all reading progress, delete any story, delete a child profile and all its data, and close the account entirely, all from the parent dashboard. To request a copy of the information held about your child, or to revoke consent and have it deleted, email [PRIVACY EMAIL]; we will act within [30] days.

Disclosure

We share children's data with no one except the service providers technically required to run the product (hosting and database: [Supabase]; story generation: Anthropic, which receives no child personal data, as described in the Privacy Policy), each bound by their own commercial data protection terms. We will disclose information if required by law, and we will tell you we have done so unless legally prevented.

Questions or concerns

Email [PRIVACY EMAIL]. If you believe a child has provided us personal information outside these channels, contact us and we will delete it promptly.