← Back to SpellTales

Privacy Policy for SpellTales

Last Updated: January 8, 2026

Introduction

SpellTales ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our mobile application.

Information We Collect

Account Information

• Email address (for account creation and authentication)
• Password (encrypted and stored securely via AWS Cognito)
• Child profile names and ages (stored locally and in our secure database)

Story Data

• Characters, keywords, and story preferences you select
• AI-generated stories (saved to your account)
• Learning words you add for educational purposes

Usage Information

• App usage patterns and feature interactions
• Error logs and crash reports (for app improvement)
• Device type and operating system version

Biometric Data

• Face ID/Touch ID authentication data (stored locally on your device only, never transmitted)

How We Use Your Information

We use your information to:

• Create and manage your account
• Generate personalized AI stories for your children
• Save and retrieve your story history
• Provide age-appropriate content filtering
• Process subscription payments
• Improve app functionality and user experience
• Send important service updates

Data Storage and Security

• Authentication: Managed by AWS Cognito with industry-standard encryption
• Story Storage: Stored in AWS DynamoDB with encryption at rest
• Local Storage: Profile data and preferences stored securely on your device
• Biometric Data: Never leaves your device; handled by iOS secure enclave

Children's Privacy (COPPA Compliance)

SpellTales is designed for children aged 2-17 under parental supervision. We:

• Do not knowingly collect personal information directly from children
• Require parental account creation and management
• Do not share children's data with third parties
• Allow parents to review and delete all child-related data
• Use AI content filters to ensure age-appropriate stories

Data Sharing

We do NOT:

• Sell your personal information
• Share your data with advertisers
• Use your stories for AI training
• Share data with third parties except as required by law

We DO share data with:

• AWS (our cloud infrastructure provider) - for app functionality
• Apple (for in-app purchases and subscriptions)

Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and all associated data
• Export your story data
• Opt out of non-essential communications

Data Location

Your data is stored in the United Kingdom (AWS EU-West-2 London region). We use AWS infrastructure located in the UK to ensure data sovereignty and compliance with UK and EU data protection regulations.

Contact Us

For privacy concerns or data requests: spelltales@katehollow.co.uk