Privacy Policy

Introduction

Protecting your privacy and the privacy of children is one of our top priorities. This Privacy Policy explains how your personal information is collected, used, and protected when you use our personalized storybook platform.

Information We Collect

We collect the following types of information to provide our service:

• Account information: email address, name, and password when you sign up.
• Photos uploaded by you (child's photo, toy photo) for character creation — used solely for story generation.
• Story preferences: age range, themes, language, art style, and story prompts.
• Payment information for credit purchases (processed securely by our payment provider — we do not store card details).

How We Use Your Information

We use your information to:

• Generate personalized storybooks using your uploaded photos and preferences.
• Create and maintain your account and library of stories.
• Process credit purchases and manage your subscription.
• Communicate with you about your account, updates, and support requests.
• Ensure the security and proper functioning of our platform.

Children's Privacy

Our app is designed for use by parents and guardians to create stories for their children. We do not knowingly collect personal information directly from children under 13. Photos uploaded are used solely to create story characters and are not processed for any other purpose. Parents can request deletion of their child's data at any time by contacting us.

Data Sharing

We do not sell your personal information to third parties. We may share your information only for the following purposes:

• Google (Gemini API and Vertex AI), the AI provider that generates story text, illustrations and narration (see “AI Processing” below).
• Cloud storage services for securely hosting your generated stories and images.
• Payment services for handling credit purchases securely.
• Authorized authorities when required by law.

AI Processing

PixiTale generates story text, illustrations and narration using Google’s AI services: the Gemini API and Vertex AI. Google is the only AI provider we send your content to. These requests are made from our servers, never directly from the app, and they carry only what a story needs:

• The story idea you type and the settings you choose (language, age range, theme, art style and length).
• The names and descriptions of the characters and items in the story, which may include your child's first name.
• Photos you upload for a character or item, so they can be described and drawn in the story's art style.
• The generated story text, to produce the narration.
• We do not send Google your email address, account or device identifiers, payment information, or the voice recordings you make in the app.
• Google processes this data only to generate the content we request and does not use it to train its AI models.

Signup bonus abuse prevention

When an account requests promotional signup credits, PixiTale processes a resettable random identifier for that app or browser installation and a pseudonymous signal derived from the request network address. We use these signals only to prevent repeated promotional-credit abuse. We do not use them for advertising, cross-app tracking, or sale to third parties. Raw identifiers and network addresses are not stored in the risk system. Pseudonymous risk records are retained for up to 180 days, including after account deletion, and are then deleted.

Data Security

We implement security measures to protect your personal information. Your data is transmitted over encrypted connections (HTTPS) and stored on secure servers.

Your Rights

You have the right to access, correct, or delete your personal information at any time. You can manage your profile and delete your account from the Settings page. For any additional data requests, please contact us at support@pixitale.app.

Notice under Turkish Data Protection Law (KVKK)

This section is the notice PixiTale gives as data controller under Turkey’s Personal Data Protection Law No. 6698 (“KVKK”). Which data we process, why, and who we share it with is described in the sections above.

• Data controller: Serhat Keskin (PixiTale), Işınlar Mahallesi, Çınar Sokak, Çelik Apartmanı No: 92/2, 06170 Yenimahalle/Ankara, Türkiye. For anything concerning your personal data, contact us at support@pixitale.app.
• How we collect it: electronically, from the information you enter or upload when you sign up and use the app.
• Legal grounds (KVKK Art. 5): entering into and performing our contract with you, to open your account, create stories and process purchases; complying with our legal obligations; our legitimate interest in keeping the service secure and preventing abuse; and your explicit consent for anything outside these.
• Transfers abroad (KVKK Art. 9): content sent for story creation is processed on Google’s servers, and the companies we use for storage and payments may also have servers outside Turkey. These transfers are made in line with the conditions of Article 9 of the KVKK.
• Retention: we keep your data while your account is open. When you delete your account, your content is hidden and erased at the end of the 90-day restore period. Records the law requires us to keep (such as purchase records) are kept until that period ends.
• Your rights (KVKK Art. 11): to learn whether your personal data is processed; to request information about it if so; to learn the purpose of processing and whether it is used for that purpose; to know the third parties in Turkey or abroad it is transferred to; to have incomplete or inaccurate data corrected; to have it erased or destroyed under Article 7 of the KVKK; to have corrections and erasures notified to the third parties it was transferred to; to object to an outcome against you that results solely from automated analysis; and to claim compensation for damage caused by unlawful processing.
• How to apply: to use these rights, write to support@pixitale.app from the email address registered to your account. Under Article 13 of the KVKK your request is concluded free of charge within 30 days at the latest. If you are not satisfied with our answer, you can file a complaint with the Turkish Personal Data Protection Board.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of material changes — such as new categories of data we collect, new purposes for using your data, or new categories of recipients — by email and through an in-app notice at least 30 days before they take effect, and where the law requires your consent we will ask for it before the change applies to you. Minor changes, such as clarifications and corrections, take effect when published. The “Last updated” date at the top of this policy always shows the current version. If you do not accept an updated policy, you may delete your account before the effective date; continued use of the service after that date constitutes acceptance.