Privacy Policy

1. Who we are

Readli is operated by [To confirm: legal name and address of the operator]. Readli lets a parent or legal guardian create personalized picture books for their children aged 6 to 11. This policy explains what we collect, why, who we share it with, and the choices you have. It applies together with our Terms of Service.

2. Information we collect

• About you: your name and email address, or your Google profile name and email if you sign in with Google; your subscription plan; and records of when you accepted these policies, including your IP address at that time. Card details are handled by Stripe; we never see or store your full card number.
• About your child: the first name or nickname, age, gender (optional) and reading level you enter in a child profile.
• Story answers: the interests, character, genre and themes you choose, and any “personal context” you type in for a story.
• Books and reading: the books made for your family, your approvals and rejections, your child's ratings, and reading sessions (which book, and for how long).
• Technical data: a sign-in cookie that keeps you signed in, and standard server logs. We don't use advertising or third-party tracking cookies.

3. How we use it

We use this information only to create and deliver your books, let you review them before your child sees them, run your account and subscription, keep Readli safe (including screening requests for unsuitable content), and fix problems. We don't sell personal information, and we don't use children's information for advertising or to build profiles about them.

4. How AI creates your books

To write a story, we send your story answers, including any personal context you type in, and your child's reading level to AI services. Your child's name is not sent to them. The story they return is used to create the illustrations. [To confirm: confirm each AI provider's terms: that they don't train on our data, how long they keep it, and that they permit processing children's information]

5. Services that receive data

We share information only with the companies that help us run Readli:

• Amazon Web Services hosts Readli and our database, stores book images, sends our emails, and runs the AI models that write stories (Anthropic's Claude), draw illustrations (Stability AI) and screen content (Amazon Bedrock Guardrails).
• fal.ai draws illustrations when your account uses the FLUX.2 or Seedream image models.
• Stripe processes subscription payments.
• Google handles sign-in if you choose “Continue with Google”.
• Cloudflare checks that sign-ups come from a person (Turnstile).

We may also share information if the law requires it, to protect children or others from harm, or as part of a sale or merger of our business, in which case this policy continues to apply.

6. The Marketplace

Books that children rate highly may be published to the Readli Marketplace for other families. Before a book is published, we remove your child's name and other personal details from it. Published books are not linked to your account or your child for other families.

7. Children's privacy (COPPA)

• Children can't create accounts. We collect a child's information only from their parent or guardian, and only after you give consent when you create your account or accept updated terms.
• We collect only what is needed to make and show books, and we don't make it public: books are only published after personal details are removed.
• You can review your child's information, have it deleted, or refuse further collection at any time. You can edit or delete a child profile yourself; for anything else, contact us and we will respond within [To confirm: response time].
• [To confirm: whether the consent method at sign-up meets COPPA's “verifiable parental consent” standard, or whether an additional step (such as a card check) is required]

8. How long we keep information

We keep your account and your children's information while your account is open. When you ask us to delete your account, we delete it and your children's profiles, books and images, except de-personalized books already in the Marketplace and records we must keep by law (such as payment and consent records). [To confirm: retention periods for backups, logs and consent records]

9. Security

We use encrypted connections, access controls, and private storage for images. No system is perfectly secure; if a breach affects your information, we'll notify you as the law requires.

10. Your privacy rights

Depending on your state, you may have the right to know, access, correct or delete your personal information, and to not be discriminated against for using these rights. To use them, contact us. [To confirm: state-law disclosures (for example California CCPA/CPRA) if thresholds apply]

11. Changes to this policy

If we make changes that matter, we'll ask you to review and accept the updated policy before you can keep using the parent area.

12. Contact

Privacy questions and requests, including requests to review or delete your child's information: privacy@r3adli.com. [To confirm: postal address]