TuckleInTalesPrivacy Policy
Last updated 17 August 2026
TuckleInTales (“TuckleInTales”, “we”, “us”, “our”) is operated by NeganTech (ABN 12 041 060 398). This policy explains what personal information we collect, how we use and protect it, who we share it with, and the choices and rights you have. It applies to the TuckleInTales website and app at tuckleintales.app.
By creating an account or using TuckleInTales, you agree to this policy. If you do not agree, please don’t use the service. Questions? Email hello@tuckleintales.app.
1.Who this policy is for
TuckleInTales is designed to be set up and used by an adult — a parent, grandparent, guardian, or other caregiver — who reads together with a child. Only adults create accounts. We do not knowingly allow children to create their own accounts or provide information to us directly.
2.Information we collect
Account information
- Your email address (used to sign in via a one-time code).
- Your first name and, optionally, last name.
- The date you accepted our Terms and this Privacy Policy.
Child profile and story details (provided by you, the adult)
- A child's first name, age band, and optionally cultural background.
- The details you enter to create a story: things the child loves, a gentle lesson, who is reading, and any culture to feature.
- The stories and illustrations generated for you, and any you save to your library.
We ask you to provide only a child’s first nameand general details — please do not enter a child’s full name, address, school, or other sensitive information.
Payment information
If you subscribe, our payment processor Stripe collects and processes your card and billing details. We never see or store your full card number. We keep a Stripe customer reference and your subscription status (for example trialing, active, or cancelled) so we can manage your access.
Communications
Messages you send us via the “Contact us” or “Send feedback” forms, and your email address, so we can respond and improve the service.
Technical information
- Standard server logs (such as IP address, browser type, and timestamps) generated by our hosting provider, used for security and reliability.
- Essential cookies to keep you signed in. We may use aggregate, privacy-respecting analytics that do not identify you personally.
3.How we use your information
- Provide the service — create your account, generate stories and illustrations, and let you read and save them.
- Process payments and manage your subscription, via Stripe.
- Respond to your messages and provide support.
- Send you occasional news about new features and stories — only if you have separately opted in, and only until you opt out.
- Keep the service safe, secure, and working, including basic content moderation of story inputs to keep stories child-appropriate.
- Comply with our legal obligations, such as tax records for invoices.
We do not sell your personal information, and we do not use it for third-party advertising.
4.How stories are generated, and AI providers
Stories and pictures are generated live, on demand, using third-party AI services: Anthropic (Claude) writes the story text from the details you enter, and Google (Gemini) generates the illustration for each page.
To do this, the story details you provide are sent to these providers to produce your story and images. We do not use your or your child’s information to train any AI models ourselves. Our providers process your inputs to generate what you asked for; their handling of data is governed by their own business and API terms, which we select with privacy in mind. We keep this section accurate as those terms evolve.
5.Who we share information with
We share personal information only with service providers who help us run TuckleInTales, under contracts that require them to protect it and use it only for our purposes.
| Provider | Purpose |
|---|---|
| Supabase | Database, sign-in, and file storage (your account, profiles, saved stories, images) |
| Anthropic | Generating story text |
| Google (Gemini) | Generating illustrations |
| Stripe | Payments and subscription management |
| Resend | Sending account and notification emails, and our newsletter if you have opted in |
| ImprovMX | Forwarding email sent to our hello@ address |
| Vercel | Website and app hosting |
| YouTube (Google) | Hosting the explainer video on our home page — contacted only if you press play |
We may also disclose information if required by law, to protect our rights or users’ safety, or in connection with a business transfer such as a merger or sale — in which case we’ll tell you.
6.International data transfers
We are based in Australia, but some of our providers store or process data outside your country, including in the United States and other regions. Where we transfer personal information overseas, we take reasonable steps to ensure it is handled consistently with this policy and applicable law — and for EU and UK users, using appropriate safeguards such as Standard Contractual Clauses where required.
7.Security
We take reasonable technical and organisational measures to protect your information, including encryption in transit, access controls, and using reputable processors. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your data and to respond quickly to any issue.
8.How long we keep your data
- Account, profile, and saved stories: while your account is active.
- If you delete your account, we delete or de-identify your associated data within a reasonable period, except where we must keep records by law — for example payment and tax records, kept for the period required by Australian law.
- Feedback and contact messages: kept while useful for support and product improvement.
9.Your privacy rights
You can, at any time:
- Access the personal information we hold about you.
- Correct information that is inaccurate or out of date.
- Delete your account and associated data, subject to legal record-keeping.
- Download a copy of key information you provided (data portability).
- Withdraw consent or object to certain uses, and unsubscribe from non-essential emails.
To exercise any of these, email hello@tuckleintales.app. We’ll respond within the timeframe required by law.
You can turn our newsletter on or off yourself at any time under My Family, or by using the unsubscribe link at the foot of any newsletter we send. Account emails — sign-in codes, receipts, and important service notices — are not marketing and are sent regardless, because we need them to run your account.
Australia — Privacy Act and APPs
You may access and correct your personal information, and complain to us first. If unresolved, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Europe and UK — GDPR
Our legal bases are: performing our contract with you (providing the service), your consent where asked, our legitimate interests (security and improving the service), and legal obligations. You have rights of access, rectification, erasure, restriction, portability, and objection, and to withdraw consent. You may complain to your local Data Protection Authority.
Canada — PIPEDA
You may access and correct your personal information and withdraw consent, subject to legal and contractual limits. If unresolved, you can contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.
10.Cookies
We use a small number of essential cookies to keep you signed in and to keep the service secure. These are required for the app to work. We do not use advertising or cross-site tracking cookies, and we do not sell your data.
Our home page includes a short explainer video hosted on YouTube. It is deliberately set up so that nothing is requested from YouTube or Google unless you press play — until then you are only seeing an image stored on our own site. If you do play it, YouTube may set cookies on your device, and we use their privacy-enhanced player to keep that to a minimum. You can watch the whole site without ever triggering this.
11.Data breach notification
If a data breach occurs that is likely to cause serious harm, we will notify affected users and the relevant regulators as required by law — including the Notifiable Data Breaches scheme in Australia, and GDPR breach-notification rules for EU and UK users.
12.Changes to this policy
We may update this policy from time to time. If we make material changes, we’ll update the “Last updated” date and, where appropriate, notify you by email or an in-app notice. Continued use after changes means you accept the updated policy.
13.Contact and complaints
Questions, requests, or complaints? Email hello@tuckleintales.app. We take privacy seriously and will work with you to resolve any concern.
Privacy FAQ
Straight answers to the questions families ask us most.
1.What personal information does TuckleInTales collect?
2.What information do you collect about my child, and why?
3.How is my or my child's information used — and is it ever used to train AI models?
4.Do you use cookies, analytics, or tracking? Do you sell my data or use it for ads?
5.Which third parties do you share data with, and what does each do?
6.When you generate a story, what exactly is sent to the AI providers?
7.Do you transfer my data overseas, and how is it protected?
8.How do you protect children's privacy specifically?
9.Do you knowingly collect data directly from children?
10.Where is my data stored, and how is it kept secure?
11.Is my payment or card information stored by TuckleInTales?
12.How will you notify me if there's a data breach?
13.How long do you keep my data, and my child's?
14.What happens to my data if I cancel my subscription?
15.Will you email me marketing?
16.How do I delete my account and everything associated with it?
17.How can I access, correct, or download my information?
18.What are my rights under the Australian Privacy Act?
19.What are my rights under GDPR (European users)?
20.What are my rights under Canadian law (PIPEDA)?
21.How do I contact you or complain, and how will I be told if this policy changes?
TuckleInTales is made by NeganTech — technology with a human element.