Evie's Magical Tale Privacy Policy

Last updated: July 5, 2026

1. Who we are

Evie's Magical Tale is an interactive storytelling service for families. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use our web app, connected devices, subscriptions, family sharing features, and support channels.

If a local law gives you additional privacy rights, we will honor those rights where they apply.

2. Information we collect

• Account information, such as email address, display name, avatar, authentication identifiers, language, family group status, and subscription status.
• Child and interaction information, such as device binding records, story sessions, prompts, generated responses, topic plans, safety flags, usage duration, and derived learning or growth insights when history is enabled.
• Device and technical information, such as device identifiers, firmware or browser details, approximate region, diagnostics, logs, cookies or similar storage, and usage events needed to operate and secure the service.
• Payment and subscription information processed by payment providers. We do not store full payment card numbers.
• Support information, such as messages, attachments, contact details, and other information you choose to send when requesting help or giving feedback.

3. How we use information

We use information to provide storytelling features, bind and manage devices, maintain family sharing, process subscriptions, personalize age-appropriate experiences, support parents and guardians, improve reliability, detect abuse, comply with law, and protect children and other users.

Anonymous or aggregated analytics may be used to improve product quality where you allow analytics or where applicable law permits this use.

4. Children and parental controls

The service is intended for use by children only with a parent, guardian, school, or other authorized adult. Adults are responsible for setting up accounts, devices, permissions, and family sharing.

Where laws such as COPPA, GDPR, UK GDPR, or similar child privacy rules apply, we seek verifiable parental consent when required, limit collection from children, and provide parents with ways to review, correct, export, or delete eligible child information.

We do not knowingly sell children's personal information or use children's personal information for behaviorally targeted advertising.

5. Sharing and service providers

We share information with service providers that help us run the app, including hosting, authentication, payments, analytics, customer support, security, device services, and AI infrastructure. These providers may process information only for agreed service purposes.

Family group members may see shared devices, records, dashboard data, topics, and alerts according to app settings. You should join or invite only trusted family members.

We may disclose information if required by law, to protect rights and safety, during a business transfer, or with your direction or consent.

6. Legal bases and regional rights

For users in the EEA, UK, and similar jurisdictions, our legal bases may include contract performance, consent, legitimate interests, legal obligations, and protection of vital interests where safety is at stake.

Depending on your location, you may have rights to access, correct, delete, restrict, object, withdraw consent, receive a portable copy of information, appeal certain decisions, or complain to a data protection authority. We will not discriminate against you for exercising privacy rights.

For California and other US state privacy laws, we provide applicable rights to know, access, correct, delete, opt out of sale or sharing where relevant, limit certain sensitive data uses where relevant, and appeal eligible privacy request decisions.

7. International transfers

We may process information in countries other than where you live. When required, we use appropriate safeguards such as contractual protections, data processing agreements, and transfer mechanisms recognized by applicable law.

For countries with developing privacy frameworks, we apply this policy as a baseline and honor stronger local rights where they apply.

8. Retention and deletion

We keep information only as long as needed for the purposes described in this policy, including account operation, safety, legal compliance, billing, dispute resolution, and backup integrity.

You can clear interaction history in settings. Some records, such as billing, security, abuse-prevention, or legal records, may be retained where required or permitted by law.

9. Security

We use administrative, technical, and organizational safeguards designed to protect information. No online service is completely secure, so families should use strong passwords, trusted devices, and careful family sharing.

10. Changes

We may update this policy from time to time. Material changes will be announced in the app or by email where appropriate. Continued use after the effective date means the updated policy applies.