Privacy Policy

1. Introduction

tomx.co ("we," "our," or "us") operates the Fairy Tales: Baby Stories mobile application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.

By using the App, you consent to the data practices described in this policy.

2. Information We Collect

2.1 Profile Information

When you create a child profile, we collect:

• Child's name (chosen by parent/guardian)
• Child's age (in months)
• Selected avatar image
• Profile preferences (favorite stories, genres)

2.2 Usage Data

We automatically collect:

• Stories created and listened to
• Listening history and duration
• Favorite stories and genres
• App interaction data (features used, navigation patterns)
• Session duration and frequency

2.3 Device Information

We collect:

• Device type and model
• Operating system version
• Unique device identifiers (anonymous)
• App version
• Language preferences
• Time zone

2.4 Technical Data

• IP address (for service delivery)
• Crash reports and error logs
• Performance metrics
• Network connection type

2.5 Information We Do NOT Collect

• Email addresses (unless voluntarily provided for support)
• Phone numbers
• Physical addresses
• Payment information (handled by Apple)
• Photos or camera access
• Contacts or calendar data
• Location data

3. How We Use Your Information

3.1 Service Provision

• Create and manage child profiles
• Generate personalized AI stories based on preferences
• Provide age-appropriate content recommendations
• Deliver text-to-speech narration
• Save listening history and favorites

3.2 Service Improvement

• Analyze usage patterns to improve features
• Identify and fix technical issues
• Develop new features based on user behavior
• Optimize app performance

3.3 Communication

• Send important service updates
• Respond to support requests
• Notify about new features or content

3.4 Legal Compliance

• Comply with applicable laws and regulations
• Enforce our Terms of Service
• Protect our rights and prevent fraud

4. Data Storage and Security

4.1 Data Storage

• User data is stored on Supabase (secure cloud database)
• Data is encrypted in transit using SSL/TLS
• Data is encrypted at rest on our servers
• Servers are located in secure data centers

4.2 Data Retention

• Active account data: Retained while account is active
• Deleted account data: Permanently deleted within 30 days
• Backup data: May persist in backups for up to 90 days
• Analytics data: Anonymized and retained for service improvement

4.3 Security Measures

We implement:

• Industry-standard encryption
• Secure authentication protocols
• Regular security audits
• Access controls and monitoring
• Secure development practices

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

5. Data Sharing and Disclosure

5.1 Third-Party Service Providers

We share data with:

Supabase (Database & Authentication)

• Purpose: Data storage and user authentication
• Data shared: All user data and profiles
• Privacy: https://supabase.com/privacy

Replicate AI (Story Generation)

• Purpose: AI-powered story creation
• Data shared: Story parameters and preferences
• Privacy: https://replicate.com/privacy

Text-to-Speech Services

• Purpose: Voice narration generation
• Data shared: Story text content
• Privacy: Varies by provider

Analytics Services

• Purpose: App performance and usage analytics
• Data shared: Anonymized usage data
• Privacy: Varies by provider

5.2 We Do NOT:

• Sell your personal information to third parties
• Share data for advertising purposes
• Use data for marketing to children
• Share data with social media platforms

5.3 Legal Requirements

We may disclose information if required to:

• Comply with legal obligations
• Respond to lawful requests from authorities
• Protect our rights and safety
• Prevent fraud or illegal activity

6. Children's Privacy (COPPA Compliance)

6.1 Parental Consent

• The App is designed for children but requires parental setup
• Parents/guardians provide all information on behalf of children
• We do not knowingly collect data directly from children under 13

6.2 Parental Rights

Parents/guardians can:

• Review child profile information
• Request deletion of child data
• Refuse further collection of child information
• Delete the entire account and all associated data

6.3 Data Minimization

We only collect information necessary to:

• Provide personalized story recommendations
• Save user preferences and favorites
• Improve service quality

7. Your Rights and Choices

7.1 Access and Control

You can:

• View all profile information in Settings
• Edit profile details at any time
• Delete individual profiles
• Delete your entire account

7.2 Data Deletion

To delete your data:

1. Open the App
2. Go to Settings
3. Tap "Delete Account"
4. Confirm deletion

This will permanently delete:

• All child profiles
• All created stories
• Listening history
• Favorites and preferences
• Account data

7.3 Data Portability

Contact us at info@tomx.co to request:

• A copy of your data
• Data export in machine-readable format

7.4 Opt-Out Options

• Analytics: Cannot be disabled (essential for service)
• Notifications: Can be disabled in device settings

8. International Data Transfers

• Our servers may be located in different countries
• Data may be transferred to and processed in countries outside your residence
• We ensure appropriate safeguards are in place for international transfers

9. Cookies and Tracking

9.1 What We Use

• Session tokens for authentication
• Local storage for app preferences
• Anonymous device identifiers

9.2 What We Don't Use

• Third-party advertising cookies
• Cross-app tracking
• Social media tracking pixels

10. Changes to This Privacy Policy

• We may update this Privacy Policy periodically
• Changes will be posted in the App with an updated "Last Updated" date
• Continued use after changes constitutes acceptance
• Material changes will be notified through the App

11. Contact Us

For privacy-related questions or requests:

Email: info@tomx.co
Company: tomx.co
Response Time: Within 7 business days

11.1 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at info@tomx.co.

11.2 Complaints

If you believe we have not addressed your privacy concerns, you have the right to lodge a complaint with your local data protection authority.

12. Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process data based on:

• Consent: Profile creation and story generation
• Contract: Providing the service you requested
• Legitimate Interest: Service improvement and security
• Legal Obligation: Compliance with applicable laws

13. California Privacy Rights (CCPA)

California residents have the right to:

• Know what personal information is collected
• Know if personal information is sold or disclosed
• Opt-out of the sale of personal information (we don't sell data)
• Request deletion of personal information
• Non-discrimination for exercising privacy rights

14. Data Breach Notification

In the event of a data breach:

• We will notify affected users within 72 hours
• Notification will include nature of breach and steps taken
• We will report to relevant authorities as required by law

15. Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

By using Fairy Tales: Baby Stories, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.

For the most current version of this Privacy Policy, please check the App or visit our website.