TuckleInTales

Privacy Policy

Last updated 17 August 2026

TuckleInTales (“TuckleInTales”, “we”, “us”, “our”) is operated by NeganTech (ABN 12 041 060 398). This policy explains what personal information we collect, how we use and protect it, who we share it with, and the choices and rights you have. It applies to the TuckleInTales website and app at tuckleintales.app.

By creating an account or using TuckleInTales, you agree to this policy. If you do not agree, please don’t use the service. Questions? Email hello@tuckleintales.app.

1.Who this policy is for

TuckleInTales is designed to be set up and used by an adult — a parent, grandparent, guardian, or other caregiver — who reads together with a child. Only adults create accounts. We do not knowingly allow children to create their own accounts or provide information to us directly.

2.Information we collect

Account information

  • Your email address (used to sign in via a one-time code).
  • Your first name and, optionally, last name.
  • The date you accepted our Terms and this Privacy Policy.

Child profile and story details (provided by you, the adult)

  • A child's first name, age band, and optionally cultural background.
  • The details you enter to create a story: things the child loves, a gentle lesson, who is reading, and any culture to feature.
  • The stories and illustrations generated for you, and any you save to your library.

We ask you to provide only a child’s first nameand general details — please do not enter a child’s full name, address, school, or other sensitive information.

Payment information

If you subscribe, our payment processor Stripe collects and processes your card and billing details. We never see or store your full card number. We keep a Stripe customer reference and your subscription status (for example trialing, active, or cancelled) so we can manage your access.

Communications

Messages you send us via the “Contact us” or “Send feedback” forms, and your email address, so we can respond and improve the service.

Technical information

  • Standard server logs (such as IP address, browser type, and timestamps) generated by our hosting provider, used for security and reliability.
  • Essential cookies to keep you signed in. We may use aggregate, privacy-respecting analytics that do not identify you personally.

3.How we use your information

  • Provide the service — create your account, generate stories and illustrations, and let you read and save them.
  • Process payments and manage your subscription, via Stripe.
  • Respond to your messages and provide support.
  • Send you occasional news about new features and stories — only if you have separately opted in, and only until you opt out.
  • Keep the service safe, secure, and working, including basic content moderation of story inputs to keep stories child-appropriate.
  • Comply with our legal obligations, such as tax records for invoices.

We do not sell your personal information, and we do not use it for third-party advertising.

4.How stories are generated, and AI providers

Stories and pictures are generated live, on demand, using third-party AI services: Anthropic (Claude) writes the story text from the details you enter, and Google (Gemini) generates the illustration for each page.

To do this, the story details you provide are sent to these providers to produce your story and images. We do not use your or your child’s information to train any AI models ourselves. Our providers process your inputs to generate what you asked for; their handling of data is governed by their own business and API terms, which we select with privacy in mind. We keep this section accurate as those terms evolve.

5.Who we share information with

We share personal information only with service providers who help us run TuckleInTales, under contracts that require them to protect it and use it only for our purposes.

ProviderPurpose
SupabaseDatabase, sign-in, and file storage (your account, profiles, saved stories, images)
AnthropicGenerating story text
Google (Gemini)Generating illustrations
StripePayments and subscription management
ResendSending account and notification emails, and our newsletter if you have opted in
ImprovMXForwarding email sent to our hello@ address
VercelWebsite and app hosting
YouTube (Google)Hosting the explainer video on our home page — contacted only if you press play

We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer such as a merger or sale — in which case we’ll tell you.

6.International data transfers

We are based in Australia, but some of our providers store or process data outside your country, including in the United States and other regions. Where we transfer personal information overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable law — and for EU and UK users, using appropriate safeguards such as Standard Contractual Clauses where required.

7.Security

We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and using reputable processors. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your data and to respond quickly to any issue.

8.How long we keep your data

  • Account, profile, and saved stories: while your account is active.
  • If you delete your account, we delete or de-identify your associated data within a reasonable period, except where we must keep records by law — for example payment and tax records, kept for the period required by Australian law.
  • Feedback and contact messages: kept while useful for support and product improvement.

9.Your privacy rights

You can, at any time:

  • Access the personal information we hold about you.
  • Correct information that is inaccurate or out of date.
  • Delete your account and associated data, subject to legal record-keeping.
  • Download a copy of key information you provided (data portability).
  • Withdraw consent or object to certain uses, and unsubscribe from non-essential emails.

To exercise any of these, email hello@tuckleintales.app. We’ll respond within the timeframe required by law.

You can turn our newsletter on or off yourself at any time under My Family, or by using the unsubscribe link at the foot of any newsletter we send. Account emails — sign-in codes, receipts, and important service notices — are not marketing and are sent regardless, because we need them to run your account.

Australia — Privacy Act and APPs

You may access and correct your personal information, and complain to us first. If unresolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

Europe and UK — GDPR

Our legal bases are: performing our contract with you (providing the service), your consent where asked, our legitimate interests (security and improving the service), and legal obligations. You have rights of access, rectification, erasure, restriction, portability, and objection, and to withdraw consent. You may complain to your local Data Protection Authority.

Canada — PIPEDA

You may access and correct your personal information and withdraw consent, subject to legal and contractual limits. If unresolved, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.

10.Cookies

We use a small number of essential cookies to keep you signed in and to keep the service secure. These are required for the app to work. We do not use advertising or cross-site tracking cookies, and we do not sell your data.

Our home page includes a short explainer video hosted on YouTube. It is deliberately set up so that nothing is requested from YouTube or Google unless you press play — until then you are only seeing an image stored on our own site. If you do play it, YouTube may set cookies on your device, and we use their privacy-enhanced player to keep that to a minimum. You can watch the whole site without ever triggering this.

11.Data breach notification

If a data breach occurs that is likely to cause serious harm, we will notify affected users and the relevant regulators as required by law — including the Notifiable Data Breaches scheme in Australia, and GDPR breach-notification rules for EU and UK users.

12.Changes to this policy

We may update this policy from time to time. If we make material changes, we’ll update the “Last updated” date and, where appropriate, notify you by email or an in-app notice. Continued use after changes means you accept the updated policy.

13.Contact and complaints

Questions, requests, or complaints? Email hello@tuckleintales.app. We take privacy seriously and will work with you to resolve any concern.

Privacy FAQ

Straight answers to the questions families ask us most.

1.What personal information does TuckleInTales collect?
Your email and name; the child's first name and story ideas you enter; your saved stories; your subscription status via Stripe; messages you send us; and standard technical data like server logs.
2.What information do you collect about my child, and why?
Only what you choose to enter — a child's first name, age band, optional culture, and the things they love — so we can write a story that feels made for them. Please don't enter a child's full name or other sensitive details.
3.How is my or my child's information used — and is it ever used to train AI models?
It's used to run the service and generate your stories. We do not use your or your child's information to train AI models ourselves. Our AI providers process your inputs only to create the story and illustrations you asked for.
4.Do you use cookies, analytics, or tracking? Do you sell my data or use it for ads?
We use essential sign-in cookies only. We do not sell your data, run advertising, or use cross-site tracking. Any analytics we use are aggregate and don't identify you.
5.Which third parties do you share data with, and what does each do?
Supabase (database, sign-in, storage), Anthropic (story text), Google Gemini (illustrations), Stripe (payments), Resend (email), ImprovMX (email forwarding), and Vercel (hosting). See the table above.
6.When you generate a story, what exactly is sent to the AI providers?
The details you enter for that story — the age, interests, the gentle lesson, and, for a personalised story, the child's first name — are sent so the AI can write the story and generate the pictures. Nothing more.
7.Do you transfer my data overseas, and how is it protected?
Yes — some providers process data outside Australia, including in the United States. We take reasonable steps and, for EU and UK users, appropriate safeguards such as Standard Contractual Clauses to protect it.
8.How do you protect children's privacy specifically?
The account is held by an adult, children don't sign up or give us information directly, we ask only for a first name and general details, and stories are always kept wholesome and safe.
9.Do you knowingly collect data directly from children?
No. Only the adult account holder provides information to us.
10.Where is my data stored, and how is it kept secure?
With our reputable processors, mainly Supabase, protected by encryption in transit, access controls, and other reasonable technical and organisational measures.
11.Is my payment or card information stored by TuckleInTales?
No. Stripe handles your card details. We never see or store your full card number.
12.How will you notify me if there's a data breach?
If a breach is likely to cause serious harm, we will notify affected users and the relevant regulators as required by law — including the Notifiable Data Breaches scheme in Australia and GDPR breach-notification rules for EU and UK users.
13.How long do you keep my data, and my child's?
While your account is active, and only as long as needed afterwards or as required by law — for example, payment and tax records.
14.What happens to my data if I cancel my subscription?
Cancelling ends billing but keeps your account and saved stories, unless you also ask us to delete your account. The same is true when a 1-year pass ends — we keep what you saved, we don't delete it. Payment records may be retained as required by law.
15.Will you email me marketing?
Only if you ask us to. There's an optional tick-box at sign-up, and a switch under My Family you can change at any time — it's off unless you turn it on. Sign-in codes, receipts, and important service notices aren't marketing and are sent regardless. If you delete your account, we remove you from the newsletter list too.
16.How do I delete my account and everything associated with it?
Email us and we'll delete your account and associated data, subject to legal record-keeping such as tax invoices.
17.How can I access, correct, or download my information?
Email us — we'll help you access, correct, or get a copy of the information you provided.
18.What are my rights under the Australian Privacy Act?
You can access and correct your personal information and complain to us first. If it's unresolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
19.What are my rights under GDPR (European users)?
Access, rectification, erasure, restriction, portability, objection, and the right to withdraw consent — plus the right to complain to your local Data Protection Authority.
20.What are my rights under Canadian law (PIPEDA)?
Access and correction, and withdrawing consent subject to legal and contractual limits. If unresolved, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
21.How do I contact you or complain, and how will I be told if this policy changes?
Email us any time. If we make material changes to this policy, we'll update the date at the top and, where appropriate, notify you.

TuckleInTales is made by NeganTech — technology with a human element.