Privacy Policy

Last updated: February 23, 2026

1. Introduction

Bedtale ("Service"), operated by STUDENT Inc. ("Company"), is committed to protecting your privacy and especially the privacy of children who use our Service. This policy explains how we collect, use, and safeguard personal information.

2. Data We Collect

  • Account data: parent email address, display name
  • Child profile data: child's first name, age, interests (used for story personalization)
  • Usage data: feature usage, story history, session information
  • Generated content: personalized stories and illustrations
  • Payment data: billing information (processed and stored by Stripe)

3. Third-Party Services

  • Google (Firebase Auth): authentication and user management
  • Stripe: payment processing and subscription management
  • Google Cloud: hosting, data storage, and AI processing

4. Cookies

We use essential cookies for Firebase session management and authentication. These cookies are necessary for the Service to function and cannot be disabled. We do not use tracking or advertising cookies.

5. Data Retention

  • Account data: retained until you request account deletion
  • Child profile data: retained until parent requests deletion
  • Generated content: retained for 90 days after subscription cancellation, then permanently deleted
  • Usage logs: retained for up to 12 months for service improvement

6. Your Rights

Under applicable data protection laws (including GDPR and CCPA), you have the right to:

  • Access your personal data and your child's data
  • Request deletion of your data and your child's data
  • Export your data in a portable format
  • Opt out of non-essential data processing
  • Withdraw consent at any time

7. Children's Privacy (COPPA Compliance)

Bedtale is designed for use by children under parental supervision. We comply with the Children's Online Privacy Protection Act (COPPA) and take the following measures:

  • Parental consent: A parent or legal guardian must create and manage the account. We do not knowingly collect personal information from children under 13 without verifiable parental consent.
  • Minimal data collection: We only collect the minimum data necessary to personalize stories (first name, age, interests). We never collect last names, photos, or location data from children.
  • No behavioral advertising: We do not serve targeted advertising to children or use children's data for advertising purposes.
  • Parental controls: Parents can review, modify, or delete their child's profile and data at any time through account settings.
  • Data security: Children's data is encrypted and stored securely with restricted access controls.
  • Right to delete: Parents may request complete deletion of their child's data at any time by contacting support@bedtale.app.

8. Data Security

We implement industry-standard security measures to protect your data, including encryption in transit and at rest, access controls, and regular security audits. Children's data receives additional protection with restricted access and enhanced monitoring.

9. Contact

For privacy-related inquiries, including requests regarding your child's data, please contact us at support@bedtale.app.