Privacy Policy

Effective Date: April 8, 2026  |  Last Updated: April 8, 2026

Mama, Dada and Me Adventures ("we," "our," or "the App") is a family-oriented storytelling application designed for parents and guardians to create personalized, multilingual bedtime stories to enjoy with their children. This Privacy Policy explains how we collect, use, store, and protect your information when you use our App.

1. Who Operates This App

This App is operated by The Mama, Dada & Me Adventures Team. For privacy inquiries, please contact us at: [email protected]

2. Audience and Intended Use

This App is intended for use by parents and guardians (adults aged 18 and older). It is not designed for children to operate independently. Parents create accounts, manage family profiles, generate stories, and control all app functionality. Children participate in the reading experience alongside a parent or guardian.

This App is not listed in the Apple App Store Kids Category and is not directed at children under 13 as defined by COPPA. The App is categorized as an Education or Books application for families.

3. Information We Collect

3a. Parent/Guardian Account Information

When you sign in, we collect:

  • Authentication data: Your name and email address from your Apple ID or email registration
  • Session data: A secure session cookie to keep you signed in
  • Parental consent acknowledgment: During account creation, you confirm that you are a parent or legal guardian aged 18 or older. This acknowledgment is recorded as part of your account data

3b. Family Profile Information (Provided by Parent — All Optional)

All child-related information is entirely optional. Parents may choose to create stories without providing any identifying information about their children. If no child details are provided, stories will use generic characters (e.g., "the adventurer") instead of personalized names.

Parents may optionally provide:

  • Parent names (optional): Display names for "Dada" and "Mama" characters
  • Children's first names (optional): Used to personalize story characters. If not provided, stories use generic character names
  • Children's age groups (optional): Used to adjust story complexity and vocabulary. If not provided, a default age group is used
  • Family photos (optional): Reference photos used to generate story illustrations that resemble your family. If not provided, default illustrated characters are used
  • Character descriptions (optional): Physical descriptions (hair color, skin tone, clothing) used for consistent story illustrations

We do not collect children's last names, birth dates, email addresses, phone numbers, precise location, or any other personally identifiable information. All stories are stored only within your private account.

3c. Voice Recording Data

Premium and Ultimate subscribers may optionally record short voice samples (up to 30 seconds each) to create custom voice clones for story narration. These voice recordings are:

  • Uploaded to our secure servers and processed by ElevenLabs to create a voice clone
  • Stored only as long as the voice clone is active on your account
  • Deletable at any time by the parent through the Voice Settings page
  • Never shared with third parties beyond the voice cloning service provider

Microphone access is requested only when you initiate voice recording and is never accessed in the background.

3d. Story and Usage Data

  • Generated stories: Story text, illustrations, and audio narration created through the App
  • Reading progress: Which page you are on in each story
  • Library preferences: Favorited stories and reading history
  • Subscription status: Your current subscription tier (Free, Premium, or Ultimate)
  • Rewards and achievements: Stars earned, reading streaks, badges, and pet collection progress
  • Comprehension quiz results: Quiz scores and vocabulary spotlight interactions (stored per story, per child profile)

3e. Cookies, Local Storage, and Similar Technologies

The App uses the following browser-based storage mechanisms:

  • Session cookie (HTTP-only): A secure, encrypted JWT cookie used to maintain your authenticated session. This cookie is essential for the App to function and cannot be disabled
  • Cookie consent preference: Your cookie consent choice (accept all or essential only) is stored in your browser's localStorage
  • Theme preference: Your light/dark mode preference is stored in localStorage
  • Reading preferences: Voice selections, reading mode (Read to Me / I'll Read), and language display preferences are stored in localStorage for convenience
  • Analytics cookie (optional): If you accept analytics cookies, Umami analytics may set a cookie to distinguish unique visitors (see Section 8b below)

We do not use advertising cookies, tracking pixels, or third-party marketing cookies. You can manage your cookie preferences at any time via the cookie consent banner at the bottom of the App.

3f. Information We Do NOT Collect

  • Precise geolocation data
  • Contact lists or address books
  • Camera access (photos are uploaded voluntarily by parents from their photo library)
  • Advertising identifiers or tracking pixels
  • Behavioral analytics for advertising purposes
  • Any data directly from children

4. How We Use Your Information

  • Story personalization: Children's names and family descriptions are used to generate personalized story text and illustrations
  • Voice narration: Voice recordings are used solely to create custom narration voices for your family's stories
  • Account management: Authentication data is used to maintain your account and saved stories
  • Service improvement: Aggregated, non-identifying usage patterns (via Umami analytics) may be used to improve the App experience
  • Subscription management: To manage your subscription tier and feature access

We do not sell, rent, or share your personal information with third parties for advertising or marketing purposes.

5. Where Your Data Is Stored

Your data is stored securely using the following services:

  • Database: TiDB Cloud (MySQL-compatible), a managed cloud database with encryption at rest and in transit (TLS/SSL)
  • File storage: Amazon S3 (AWS) for story illustrations, family photos, and voice recordings, with server-side encryption
  • AI services: Story text is generated via AI language models; illustrations via AI image generation; narration via ElevenLabs text-to-speech. These services process your prompts but do not retain personal data after processing (see Section 8a for details on child data sent to AI services)
  • Authentication: Managed through Apple Sign In or email/password, with JWT session tokens stored as secure HTTP-only cookies

All data transmission between your device and our servers uses HTTPS/TLS encryption.

6. Data Retention

We retain your data for the following specific timeframes:

  • Account data (name, email, authentication): Retained for the lifetime of your active account. Deleted within 30 days of account deletion request
  • Family profile data (children's names, ages, character descriptions): Retained for the lifetime of your active account. Parents may edit or delete individual child profiles at any time via the Family Profile page. All family data is deleted within 30 days of account deletion
  • Generated stories, illustrations, and narration audio: Retained for the lifetime of your active account so you can re-read your stories. Deleted within 30 days of account deletion
  • Family photos: Stored on S3 for the lifetime of your active account. You can delete individual photos at any time from the Family Profile page. All photos are deleted within 30 days of account deletion
  • Voice recordings and voice clones: Retained as long as the associated voice clone is active on your account. You may delete individual voice clones at any time via the Voice Settings page, which removes both the local record and the voice data from ElevenLabs' servers. Upon account deletion, all voice clones are automatically deleted from ElevenLabs' servers and all local voice data is removed within 30 days
  • Reading progress, quiz results, and rewards data: Retained for the lifetime of your active account. Deleted within 30 days of account deletion
  • Subscription and payment records: Transaction records managed by Stripe and/or Apple are subject to their respective retention policies. Our internal subscription status records are deleted within 30 days of account deletion
  • Analytics data (Umami): Aggregated, anonymized analytics data does not contain personal identifiers and may be retained indefinitely for service improvement purposes
  • Server logs: Operational server logs that may contain IP addresses are retained for up to 90 days for security and debugging purposes, then automatically purged

Account deletion: You may delete your account at any time using the "Delete My Account" button on the Family Profile page, or by contacting us at [email protected]. Upon deletion, all personal data, stories, voice recordings, photos, child profiles, rewards, and reading history will be permanently removed from our systems within 30 days. Voice clones are automatically deleted from ElevenLabs' servers during account deletion. Payment records held by Stripe and/or Apple are subject to their respective deletion policies.

7. Children's Privacy (COPPA Compliance)

We take children's privacy seriously. This App is operated by parents, not by children. We comply with the Children's Online Privacy Protection Act (COPPA) as follows:

  • We do not knowingly collect personal information directly from children under 13
  • All child-related information is entirely optional. Parents may use the App without providing any child names, ages, or photos. Stories will use generic characters if no child details are provided
  • Any child-related information (first name, age) that is optionally provided comes from the parent/guardian, not from the child
  • Children's first names, when provided, are used solely for story personalization and are not shared with third parties for any purpose other than generating the story content
  • We do not use children's information for advertising, behavioral profiling, or any purpose unrelated to the story experience
  • Parents can review, modify, or delete their children's information at any time through the Family Profile page
  • Parents may refuse to permit further collection or use of their child's information by deleting the child's profile or contacting us
  • If we discover that a child under 13 has provided personal information without parental consent, we will delete it promptly
  • We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary

7a. Verifiable Parental Consent

We use an "email plus" verification method to obtain verifiable parental consent as required by COPPA:

  • Step 1 — Account creation: During signup, parents acknowledge that they are the parent or legal guardian of any children who will use the App
  • Step 2 — Email verification: A verification email is sent to the parent's email address containing a detailed disclosure of what data may be collected and how it is used. The parent must click the verification link to activate features that involve child data (story creation, photo uploads, voice cloning)
  • Pending state: Until the parent clicks the verification link, the account is in a limited state — the parent can browse the App but cannot create stories, upload photos, or use voice cloning
  • Audit trail: We record the timestamp, email address, and IP address of the consent verification for compliance purposes
  • Verification links expire after 48 hours. Parents can request a new verification email at any time from within the App

8. Third-Party Services

The App uses the following third-party services to provide functionality:

8a. AI and Content Generation Services

The following data may be sent to AI services during story generation:

  • AI Language Model (story text generation): Receives story prompts that may include the child's first name, age, selected adventure theme, reading level, and parent-provided character descriptions (hair color, skin tone, clothing). The AI model uses this data solely to generate personalized story text and does not retain it after processing
  • AI Image Generation (illustrations): Receives text-based prompts describing scenes and characters, which may include physical descriptions derived from parent-provided character details. If parents have uploaded family photos (including children's photos), these photos may be sent to the AI image generation service as visual references to create consistent character illustrations. The photos are used solely as input for the generation request and are not retained by the image service after processing. Parents may choose not to upload photos, in which case default reference images are used instead
  • ElevenLabs (voice narration and cloning): Receives story text for text-to-speech narration and, for Premium/Ultimate subscribers, voice recording samples for voice cloning. ElevenLabs processes voice data according to their privacy policy. Voice clones are stored on ElevenLabs servers until deleted by the user

Important: No child's last name, email, phone number, or contact information is ever sent to AI services. Data sent to AI services is limited to: first names, ages, physical descriptions (parent-provided), favorite things (parent-provided), and optionally family photos (if uploaded by parents) as illustration references. AI-generated content (stories, images, audio) is stored on our servers and is accessible only to the parent who created it. Parents who prefer not to share family photos can use the app's default reference images instead.

8b. Analytics

  • Umami Analytics: We use Umami, a privacy-focused, open-source web analytics tool, to understand how the App is used in aggregate. Umami collects anonymized page view and event data (e.g., which pages are visited, general usage patterns). Umami does not collect personal information, does not use advertising cookies, and does not track individual users across websites. Umami is GDPR-compliant and does not share data with third parties. You may opt out of analytics cookies via the cookie consent banner

8c. Payment Processing

  • Stripe: Processes web-based subscription payments (credit/debit card). Stripe receives your payment card details, billing address, and email for transaction processing. We do not store your full card number on our servers. Stripe's handling of your data is governed by the Stripe Privacy Policy
  • Apple App Store (StoreKit 2): Processes in-app subscription purchases on iOS devices. Payment is charged to your Apple ID account. We do not receive or store your Apple payment details. Apple's handling of your data is governed by the Apple Privacy Policy
  • RevenueCat: Manages subscription status and in-app purchase validation across platforms. RevenueCat receives transaction identifiers from Apple and Stripe but does not have access to your payment card details

8d. Infrastructure and Storage

  • Amazon Web Services (S3): Stores uploaded photos, generated images, and voice recordings with server-side encryption
  • TiDB Cloud: Hosts the application database with encryption at rest and in transit

8e. Authentication

  • Apple Sign In: Authentication provider (OAuth 2.0). We receive only your name and email

None of these services receive children's personal information beyond what is strictly necessary for story generation (first names and ages in story text prompts, and parent-provided character descriptions in image prompts).

9. Authentication and Sign-In

Primary: Sign in with Apple
Alternative: Sign in with Email and Password

We do not store your Apple password. Authentication through Apple is handled via secure OAuth 2.0 protocols, and we only receive your name and email address from Apple. For email sign-in, passwords are securely hashed using industry-standard algorithms and never stored in plain text.

During account creation, all users must confirm that they are a parent or legal guardian aged 18 or older before they can create child profiles or generate stories. This acknowledgment serves as verifiable parental consent under COPPA.

10. In-App Purchases and Subscriptions

Subscription purchases are processed through Stripe (for web payments) and Apple's App Store (for iOS in-app purchases). We do not collect or store full credit card numbers, billing addresses, or other sensitive payment information on our servers. All payment processing is managed by the respective payment processor.

Subscription status is synchronized through RevenueCat, which receives transaction data from Apple and Stripe but does not have access to your payment card details.

Subscriptions automatically renew unless canceled at least 24 hours before the end of the current billing period. You can manage and cancel your subscriptions through your Stripe customer portal (web) or Apple ID account settings (iOS).

11. Your Rights

You have the right to:

  • Access your personal data and your children's data stored in the App
  • Correct any inaccurate information through the Family Profile page
  • Delete your account and all associated data using the in-app "Delete My Account" button or by contacting us
  • Delete voice recordings at any time through the Voice Settings page
  • Delete child profiles individually through the Family Profile page
  • Withdraw consent for data processing at any time
  • Export your stories as PDF files (available with eligible subscription tiers)
  • Opt out of analytics cookies via the cookie consent banner

California residents may have additional rights under the CCPA. To exercise any of these rights, contact us at [email protected].

12. Security Measures

  • All data transmitted over HTTPS/TLS encryption
  • Database encrypted at rest and in transit
  • Session tokens stored as secure, HTTP-only cookies with JWT signing
  • File storage with server-side encryption on AWS S3
  • No plain-text storage of passwords or sensitive credentials
  • API keys and secrets stored in environment variables, never in client-side code
  • Parental consent verification at account creation before any child data can be entered

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy within the App with a new "Last Updated" date. Your continued use of the App after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about your child's data, please contact us at:

Email: [email protected]
App: Mama, Dada and Me Adventures