Privacy Policy
Effective from [date]
Draft version. This document is waiting for a lawyer’s review and may still change.
We care about the privacy of families, and especially of children. We collect only the data the app needs to work. We do not ask for photos of your child, and we do not show ads.
1. Data controller
The controller of your personal data is [Company name], [registered office address], tax identification number (NIP) [NIP number], email: [contact email address]. For any matters concerning personal data, you can write to [data protection email address].
2. What data we process
Parent account data: email address or Apple or Google sign-in identifier.
Child profile: first name, age, choice of hero (girl or boy) and preferred topics. We do not collect the child’s surname, photos or address.
Story ideas entered by the parent, created stories and reading statistics (days, time and most-read categories).
Book order data: full name, delivery address, phone number and dedication text.
Payments are handled by the App Store, Google Play or a payment operator. We do not store payment card details.
3. Purposes and legal bases of processing
Providing the services and processing orders – Article 6(1)(b) GDPR (performance of a contract).
Accounting and tax obligations – Article 6(1)(c) GDPR (legal obligation).
Security, protection against abuse and improvement of the app – Article 6(1)(f) GDPR (legitimate interest).
Reminders and notifications, if the parent agrees to them – Article 6(1)(a) GDPR (consent).
4. Children’s data
Children do not create accounts. Information about the child is provided and controlled by the parent.
We do not profile children for marketing purposes and we do not show them ads.
5. Story creation by artificial intelligence
To create a custom story, we pass to the artificial intelligence service provider ([provider name]) only what is necessary: the child’s first name, the chosen topic and the parent’s idea.
The provider acts as a processor under a data processing agreement and may not use this data for its own purposes.
6. Recipients of data
Data may be shared with entities that help us provide our services: the hosting provider, the artificial intelligence service provider, the printing company, the courier company, the payment operator, and Apple and Google.
If data is transferred outside the European Economic Area, we protect it with standard contractual clauses approved by the European Commission.
7. How long we keep data
We keep account data, child profile data and stories until the account is deleted.
We keep billing data for the period required by tax law (usually 5 years).
8. Your rights
You have the right to access, rectify and erase your data, to restrict its processing and to data portability, as well as the right to object and to withdraw your consent at any time.
You also have the right to lodge a complaint with the [supervisory authority].
9. Deleting your account
You can delete your account, together with your child’s profile and stories, in the app or by writing to [data protection email address]. We delete data within 30 days, except for data that we are required by law to keep.
10. Changes to this policy
We will inform you in the app of any significant changes to this Privacy Policy.