Privacy Policy

1. Who We Are

InnerTales is a personalised children's storytelling platform that uses AI to create stories tailored to each child's name, age, language, and interests. InnerTales is developed and operated by InnerTales Technologies Pvt. Ltd. ("we," "us," or "our"), a company registered in India.

Privacy contact: support@innertales.app
Mailing address: GA-637, Utkal Hospital Road, Kailash Vihar, Sailashree Vihar, Chandrasekharpur, Bhubaneswar, Odisha 751021

2. Our Commitment to Children's Privacy

InnerTales serves children from early childhood through early adolescence. We apply the highest privacy standard — child-level protections — to every registered child profile, regardless of age.

3. Account Structure

InnerTales uses a family account model:

• A parent or legal guardian registers and owns the InnerTales account.
• The parent creates child profiles (each with a name and age group) under the family account.
• Children use the app through their profile — they do not have independent credentials and cannot independently consent to data collection.
• All consents, data rights, and communications belong to the parent.

4. What Data We Collect and Why

We collect only the minimum information needed to provide a safe, personalised reading experience for your child. This falls into three broad categories:

Parent account information — basic details you provide when creating an account, such as your name, email address, and chosen sign-in method. This is used solely to manage your account and communicate with you about it.

Child profile information — a first name or nickname and an approximate age group, provided by you. This lets us match stories to your child's reading level and personalise the experience. We do not collect your child's last name, photograph, school, location, or any contact information.

Reading activity — basic progress data such as which stories your child has read and how far they have got. This powers the reading journey, badges, and the parent progress view. It is never shared with advertisers or used to build a behavioural profile.

We also collect limited technical information — such as app version and device type — to keep the app running smoothly. This is aggregated and not linked to individual children.

We do not collect: the child's last name, photograph, precise location, device contacts, or any biometric data.

5. Social Sign-In

Parents may sign in using Google, Apple, or Facebook. When used:

• We receive and store only a unique account identifier (e.g., Google subject ID) — not the parent's full profile, contacts, or posts.
• We do not post content on the parent's behalf or read social account data.
• No child data is shared with social platforms.
• The social platform's own privacy policy governs their processing of the sign-in event.

6. Who We Share Data With

We do not sell personal data. We only share information with trusted third parties where it is strictly necessary to run the service — for example, to host our infrastructure, generate story content, process subscription payments, or respond to support requests. No child data is shared with advertising networks or social platforms.

We may also disclose information where required by law or a valid legal order. All third-party service providers we work with are bound by data processing agreements and may not use your data for their own purposes.

Business Transfers

If InnerTales Technologies Pvt. Ltd. is involved in a merger, acquisition, sale of assets, or bankruptcy proceeding, personal data held by us may be transferred to the successor entity. We will notify you by email and post a notice on our website at least 30 days before your data is transferred to and becomes subject to a different privacy policy. You will have the option to delete your account before any such transfer takes effect.

7. COPPA Compliance (United States)

InnerTales is directed at children. We comply with the Children's Online Privacy Protection Act (COPPA, 15 U.S.C. §§ 6501–6506) and the FTC's COPPA Rule (16 C.F.R. Part 312).

• We obtain verifiable parental consent before creating a child profile and before collecting any personal information linked to that child.
• We do not condition participation on providing more personal information than is necessary to use InnerTales.
• We do not allow children to directly communicate with strangers or publicly post content.
• We do not use children's personal information for targeted advertising.
• Parents may at any time review, correct, or delete their child's data (see Section 12).
• If we discover we have collected personal information from a child without verifiable parental consent, we will delete it immediately.

COPPA inquiries: support@innertales.app

8. GDPR / UK-GDPR Compliance

For users in the EEA and the United Kingdom, we process personal data only where we have a lawful basis to do so — primarily your consent (for child profile data) and contractual necessity (for managing your account and subscription). We do not rely on legitimate interest for any processing that involves child profile data.

Where data is transferred outside the EEA or UK, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

EU/UK users have the right to lodge a complaint with their national supervisory authority. UK users may contact the Information Commissioner's Office (ICO).

9. CCPA and US State Privacy Rights

This section applies to residents of California and other US states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Texas, and Nevada).

California Consumer Privacy Act (CCPA / CPRA)

California residents have the following rights regarding personal information we hold about them:

• Right to Know — request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell about you.
• Right to Delete — request deletion of personal information we have collected about you, subject to certain exceptions.
• Right to Correct — request correction of inaccurate personal information we hold about you.
• Right to Opt-Out of Sale / Sharing — we do not sell or share personal information for cross-context behavioural advertising. No opt-out is required.
• Right to Limit Use of Sensitive Personal Information — we do not use sensitive personal information beyond what is necessary to provide our services.
• Right to Non-Discrimination — we will not discriminate against you for exercising any of the above rights.

Because InnerTales collects personal information about children under 13, we comply with both COPPA and the CCPA's heightened requirements for children's data. We do not sell or share the personal information of any child profile.

Other US State Rights

Residents of Colorado, Connecticut, Virginia, Texas, Nevada, and other states with privacy laws have similar rights to access, correct, delete, and opt out of certain processing of personal data. To exercise any of these rights, contact us at support@innertales.app with the subject line "US Privacy Rights Request — InnerTales".

We will respond to verified requests within 45 days (extendable by a further 45 days where necessary, with prior notice).

10. Subscriptions and Payments

InnerTales subscriptions are processed through Apple App Store and Google Play. We do not receive or store your card details — payment is handled entirely by Apple or Google. We retain purchase records only for as long as required by applicable law.

11. Data Retention

We keep your data only for as long as necessary. Account and child profile data is retained until you choose to delete it. Diagnostic and technical data is retained for a short period and then automatically purged. Financial transaction records are kept for as long as required by applicable tax law.

When you request account deletion, all personal data — including all child profiles and reading history — is purged within 15 days of the request, except where retention is required by law.

12. Your Rights as a Parent

As the parent or guardian account holder, you have the right to:

• Access — request a copy of all data we hold about your account and your child's profile
• Correction — update your child's name, age group, or preferences at any time in-app
• Deletion — permanently delete a child profile or the entire family account
• Withdrawal of consent — revoke data collection consent; this stops further processing but does not affect data already lawfully collected
• Disable personalisation — turn off name-in-stories personalisation at any time in Profile Settings
• Data portability (EU/UK) — receive a machine-readable export of your data
• Object — object to any processing not strictly necessary for the service
• Lodge a complaint — with your national data protection authority

How to exercise your rights

Option 1 — In-app (instant): Open InnerTales → Settings → Account → Delete Account to permanently remove your account and all data, or Settings → Profiles → [Child Profile] → Delete Profile to remove one child profile.

Option 2 — Delete account web form: If you no longer have access to the app, visit innertales.app/delete-account.html and submit your request. We will process it within 30 days.

Option 3 — Email: support@innertales.app — Subject: "Delete Account — InnerTales". Include your registered email. We respond within 30 days (EU/UK: 1 calendar month).

13. Security

We take the security of your family's data seriously. InnerTales uses industry-standard technical and organisational measures to protect personal data against unauthorised access, loss, or misuse. Access to personal data is restricted to authorised personnel who need it to operate and improve the service.

In the event of a data breach affecting your or your child's rights, we will notify you promptly and meet all applicable breach notification obligations.

14. Changes to This Policy

We will notify parents by email and in-app notice at least 30 days before any material change. Changes requiring fresh consent will not take effect until that consent is given. Continuing to use InnerTales after a non-material change takes effect constitutes acceptance.

15. Contact Us