Private by default

Privacy Policy

Last updated: October 21, 2026

This notice explains how TaleLumi handles information when a parent or guardian creates personalized stories. TaleLumi is designed for adult-managed family use. Children do not receive login accounts.

Information parents provide

We process parent account details, child profile details a parent chooses to add, story preferences, custom characters, interests, topics to avoid, and account settings. Parents should provide only the information needed to personalize a story.

Stories, narration, and activity

TaleLumi stores generated stories and related settings so families can return to them. When narration is requested, story text and the selected narration settings are processed through protected server routes. Private audio is accessed through time-limited links.

We may collect limited technical information such as page visits, feature use, device type, errors, and performance measurements to operate and improve the service. We do not intentionally include child profile text in public marketing analytics.

Stories you share

A story stays private unless you share it. If you create a link to a story, anyone who has that link can read the story, see its cover, and listen to narration you have already made, without signing in. That includes anything the story itself says, such as your child's name. Nothing else from your account is shown: not your name or email address, your child's profile, or your other stories.

Shared pages are hidden from search engines. You can stop sharing from the story at any time, and the link stops working straight away. Deleting the story or your account removes the link too. We count how many times a shared link is opened, so we know whether sharing is useful.

Service providers and security

TaleLumi relies on service providers for hosting, authentication, database storage, email delivery, and AI generation. Provider credentials remain on the server and are not sent to parent-facing browsers. Access controls and ownership checks are used to separate family records.

No online service can guarantee absolute security. Parents should use a unique password, protect access to their account, and sign out on shared devices.

Emails we send

We use the email address on your account to send messages about the account itself: sign-in and password emails, changes to your plan or your free trial, and notices we are required to send. Any of these that is not needed for security or billing carries an unsubscribe link.

Evening reminders are separate, and we send them only if you ask for them, from the end of a story or in Account Settings. At most one comes after each visit. We record when you turned them on and the wording you agreed to, and you can stop them at any time from the link in any reminder or from Account Settings.

We do not send newsletters or advertising, and we do not sell or share your email address for anyone else's marketing. Emails are delivered through Resend, our email provider, which receives your address and the message only to deliver it.

Payment information

If you subscribe to a paid plan, payments are handled by Stripe, which acts as our payment processor. Card numbers are entered on Stripe's own checkout page and never reach TaleLumi. We do not see, receive, or store your card details at any point.

Stripe receives the email address and name on your account so it can identify the customer and send receipts. From Stripe we store only a customer reference, which plan you are on, whether the subscription is active, and the date the current paid period ends. That is what tells the app to lift the free plan's daily limits for you.

Stripe processes this information as an independent controller under its own privacy policy, and may retain transaction records to meet financial and anti-fraud obligations even after you delete your TaleLumi account. Billing records we are required to keep for tax purposes are retained separately from your family's stories and child profiles.

Parent choices and deletion

Parents can update or delete child profiles and stories from the app. Account deletion can be requested from account settings. Deletion may take a limited period to complete where records must first be removed from active systems, and some records may be retained when required for security, fraud prevention, or legal obligations.

Policy updates

We may update this notice as TaleLumi changes. The date above identifies the latest version. Legal requirements vary by region, so this notice should be reviewed by qualified counsel before the service expands into new jurisdictions.