Privacy Policy

A parent-managed service

FoxyTales is intended for use by parents and guardians, not by children directly. The account holder is an adult. We do not knowingly let children create accounts or submit their own information; a parent provides any details used to personalize a story.

What we collect

• Account: your email address (we use passwordless sign-in — magic links or Google/Apple/Facebook; we never see your social password).
• Story inputs: the names, characters, descriptions, language, and prompts you enter to personalize stories, and the stories and illustrations generated from them.
• Usage: basic technical and error data to keep the service running.
• Payment: if you subscribe, our processor (Stripe) handles your card details — we never receive or store full card numbers.

Photos are used once, then deleted

If you upload a photo to base a character portrait on, that photo is sent once to an AI vision model to describe visual features, then used to generate a stylized watercolor portrait. The original photo is never saved to our storage— only the generated portrait is kept. This is a deliberate rule to minimize handling of children's images.

Who processes your data (subprocessors)

To run the service we share data with these providers, only as needed:

• Anthropic — generates story text and describes uploaded photos (Claude).
• Fal.ai — generates illustrations.
• Supabase — database and authentication (stores your account, stories, and characters).
• Cloudflare R2 — stores generated illustrations.
• Fly.io — hosts the application.
• Stripe — payments (for subscribers).
• Sentry — error monitoring.

We do not sell your personal data, and we do not use it for advertising.

Cookies

We use only essential cookies: one to keep you signed in, and one to remember your interface language. No advertising or cross-site tracking cookies.

Your choices and deletion

You can view and delete your stories and characters at any time, and delete all your data from your account settings. To close your account or request a copy of your data, contact us at [email protected]. Depending on where you live, you may have additional rights (access, correction, erasure, portability).

Children's privacy

Because this is a children's product, we take extra care: children do not sign in or provide data directly, we minimize what is collected, and we don't use children's information for marketing. If you believe a child has provided us information directly, contact us and we will delete it. (Final COPPA / GDPR-K wording pending legal review.)

Changes and contact

We'll post updates here with a new date. Questions about privacy? Email [email protected].