Privacy policy

1. Who we are

TaleBuzzer Ltd is the data controller for personal data collected through talebuzzer.com. We are registered in England and Wales.

Questions: privacy@talebuzzer.com

2. What data we collect

From parents: email address, password (hashed), subscription status, and notification preferences.

From child profiles: first name, age, gender, interests, and reading activity. We do not collect child email addresses or photographs.

From usage: stories generated, reading completion rates, Bee points earned, and comprehension results. Child analytics are anonymised before any reporting.

3. Why we collect it

We process your data to provide the TaleBuzzer service under the lawful basis of contract performance. Notification preferences are processed under your explicit consent, which you can withdraw at any time.

We do not process personal data for advertising, profiling, or sale to third parties.

4. Children’s data

TaleBuzzer collects child data only through a parent or guardian account. Children’s data is held only within the TaleBuzzer platform and is never passed to client-side analytics tools.

We comply with UK GDPR, COPPA, and the UK Age Appropriate Design Code.

5. Third-party services

We use: Stripe for payment processing, SendGrid for email delivery, Firebase for push notifications, and AWS for cloud infrastructure. All UK child data is stored in AWS’s UK (London) region.

6. Your rights

You have the right to access, correct, or delete your personal data at any time. Contact us at privacy@talebuzzer.com. Child profiles will be deleted within 7 days of a valid erasure request.

You may also lodge a complaint with the ICO at ico.org.uk.

7. Data retention

Account data is retained for as long as your account is active. If you close your account, all personal data is deleted within 30 days, except anonymised payment records retained for legal compliance.

8. Changes to this policy

We will notify you by email of any material changes before they take effect.