Last Updated: September 2026
Applies to: CuddleTales iOS app and Android app, operated by InnerTales Technologies Pvt. Ltd.
CuddleTales is made by InnerTales Private Limited. CuddleTales is designed for young children to use together with a parent or guardian, who is always the account holder. This policy explains what information the app collects, how it's used, and the choices parents have.
1. Who This App Is For
CuddleTales is intended for children under a parent or guardian's supervision. A parent creates and controls the account; a child plays under a linked child profile inside that account. We do not knowingly collect personal information directly from children without a parent first creating and consenting to the account, consistent with the Children's Online Privacy Protection Act (COPPA).
2. Information We Collect
| What | From whom | Why |
|---|
| Email address |
Parent, at account signup |
Create and secure the parent account, send account-related communication |
| Child's first name and age band |
Parent, when creating a child profile |
Personalise stories, songs, and activities to the child's age and name |
| Account / user ID |
Generated by our systems |
Sign the child's activity to the correct account securely |
| Usage activity |
Generated as the child plays (stories / songs / activities completed, achievements, keepsakes earned) |
Track progress, show the parent a summary, unlock in-app rewards |
| Purchase records |
Apple or Google, when a parent subscribes |
Activate and manage the subscription |
3. Information We Do Not Collect
The app requests microphone, camera, and motion permissions to power specific play activities (for example, blowing or humming into the microphone, or finding a colour with the camera). In every case, this data is processed entirely on the child's device and is never recorded, stored, or sent to us:
- Microphone — only the sound level is read on-device to detect a blow or hum; audio is never recorded or uploaded.
- Camera — used only to let the child point at an object during a play activity; no photo or video ever leaves the device.
- Motion — read on-device only, to notice movement like a dance or jump.
We also do not collect precise or coarse location, contacts, photo library contents, health data, financial information, the child's last name, or any biometric data.
4. No Advertising Tracking
CuddleTales contains no third-party advertising SDKs and no advertising tracking.
On Android, we use two Google Firebase tools to keep the app working well — crash reporting (Crashlytics) and general usage statistics (Analytics), both described below — and neither is used for advertising.
We do not use the Advertising Identifier (IDFA on iPhone and iPad, or the Advertising ID on Android), do not sell personal data, and do not participate in cross-app or cross-site tracking of any kind.
5. Who We Share Information With
- Our own servers — store the account, child profile, and progress information described above.
- Cloudflare (media storage) — hosts the images and audio used in the app; no personal information is sent to it.
- Apple / Google (Sign-In, In-App Purchase) — if a parent signs in with Apple or Google, or subscribes (through the App Store on iPhone and iPad, or Google Play on Android), Apple or Google processes that sign-in or purchase per their own privacy policy.
- Google Firebase Analytics — on Android, collects general app-usage statistics so we can see how the app is used and improve it: for example, app opens, which parts of the app are used, session length, app version, device model, operating-system version, and approximate country. It uses a random app-instance ID. It is set up for a children's app: it never collects the Advertising ID or Android ID, never allows ad personalisation, and is never used for advertising. It does not receive the child's name, the parent's email, or the content of anything your child creates.
- Google Firebase Crashlytics — on Android, if the app crashes, a crash report is sent so we can fix the problem: what went wrong in the app's code, the device model and operating-system version, the app version, and a random installation ID. It never includes the child's name, what they played, or the parent's email, and it is not used for advertising or tracking.
- Google Firebase Cloud Messaging — on Android, delivers the app's notifications (for example, a new story) if the parent allows notifications. It receives a device notification token, not the child's name or activity.
- AI content generation providers — used only on our servers to help write and produce stories, songs, and activities in advance. Your child's personal information and activity are never sent to these providers.
We do not sell personal information, and we do not share it with advertisers.
6. Parental Rights and Controls
- A parent must create and hold the account. A Parent Space area is protected by a simple grown-up check so a child cannot access account or purchase settings.
- Parents can review, update, or delete their account and all associated child data at any time from within the app, or by contacting us at the email below. Deleting the account permanently removes the parent's and child's data from our systems.
- Parents may withdraw consent for their child's data at any time by deleting the account.
7. Data Retention
We retain account and profile information for as long as the account is active, so the child's progress and keepsakes are preserved between sessions. If the account is deleted, all associated data — including the child's profile, activity history, and keepsakes — is removed from our production systems.
8. Changes to This Policy
If we make material changes to this policy, we will update the "Last Updated" date above and, for significant changes, notify the parent account holder in the app or by email before the change takes effect.