Privacy notice

Who we are

TaleNest is the data controller for the personal data described here. You can reach us at privacy@talenest.eu.

What we collect

Account data: your email address, optional display name, language and sign-in history.

Child profile data you enter: first name, age, gender choice, up to three favourite things and optional appearance choices. We never ask for a surname, birth date, address or school.

Books you create, your consent records and technical logs without personal content.

Photos

If you choose to upload a photo, it is used only to design your child’s storybook character and is deleted from all our storage immediately afterwards. Photos are never used for training AI models, analytics or marketing.

Why we use your data

To provide your account and books (performance of a contract), to process your child’s data for story and illustration generation (your explicit consent, which you can withdraw at any time), and to prevent abuse and keep the service secure (legitimate interest).

Who processes data for us

Google Cloud Vertex AI (EU region, Netherlands) — story text and illustrations. OpenAI (USA) — safety moderation of story text and generated illustrations. Your child’s name is replaced with a placeholder first, and images based on your child’s photo are never sent (they are checked in the EU only). Brevo (France) — sign-in and notification emails. Cloudflare Turnstile — bot protection on the sign-in form. Hetzner Online (Germany/Finland) — hosting, database and file storage. Sentry (EU data region, Germany) — technical error reports with personal data removed.

All processors are bound by data processing agreements; transfers outside the EU rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.

How long we keep data

Your data is kept while your account exists. When you withdraw consent for your child’s data, the child profiles, books and images are deleted. When you delete your account, all personal data, books and files are permanently erased within 24 hours. Encrypted database backups are kept for up to 14 days and then deleted automatically; they are used only to recover from a failure.

Your rights

You can access, export, correct and delete your data in your account at any time, withdraw consent, and object to processing. You also have the right to lodge a complaint with your data protection authority. Contact us at privacy@talenest.eu.