Endless StorytimeBack to home

Privacy Policy

Last updated: February 27, 2026

Our commitment to your family

Endless Storytime ("we," "us," "our") builds personalized storybooks for children ages 2-8. We understand that when a product involves children, privacy is not optional — it is foundational. This policy explains what information we collect, how we use it, and how we protect it.

We comply with the Children's Online Privacy Protection Act (COPPA) and do not knowingly collect personal information from children under 13 without verified parental consent.

Who uses our service

Endless Storytime is a service for parents and legal guardians. Only adults (18+) may create accounts, subscribe, and manage their family's stories. Children are the end users of the content we create, but they do not interact with our service directly or have their own accounts.

What information we collect

From parents (account holders)

  • Email address — for account creation, authentication, and story delivery.
  • Payment information — processed and stored by our payment processor. We never see or store your full card number.
  • Communication preferences — whether you opted into product updates.

About children (provided by parents)

  • First name — used to personalize stories. Encrypted at rest in our database.
  • Age or age range — used to tailor story content and reading level to developmental stage.
  • Physical appearance descriptors — skin tone, hair color, eye color, etc. Used only for illustration generation.
  • Preferences and interests — favorite things, situations they are navigating. Used to personalize story content.
  • Photos (optional) — if a parent uploads a photo, it is sent to an AI vision service exclusively for face detection and appearance feature extraction. Photos are never stored on our servers and are not retained after processing. The extracted appearance descriptions (not the photo itself) are then used for illustration generation.

How we use AI

Stories, illustrations, and audio narration are created with the assistance of artificial intelligence. Specifically:

  • Story generation — We use large language models to write personalized stories based on the child's name, age, scenario, and preferences provided by the parent.
  • Photo analysis — If a parent uploads a photo, we use AI vision models to detect faces and extract appearance features. The photo is not retained in our systems after processing.
  • Illustration generation — We use AI image generation models to create illustrations featuring the child's likeness based on text-based appearance descriptions and generated reference images.
  • Audio narration — We use text-to-speech technology to narrate each story.

Child information is sent to these AI providers only as needed to generate the story content. We do not permit these providers to use your child's information for training their models. We review our provider agreements regularly to ensure this protection.

What we do NOT do

  • We do not display any advertising to children or adults.
  • We do not sell, rent, or share personal information with third parties for marketing purposes.
  • We do not use behavioral tracking, analytics cookies, or fingerprinting on children.
  • We do not store photos of children on our servers. Photos are processed briefly for appearance extraction and are not retained in our systems.
  • We do not allow children to create accounts, post content, or communicate with other users.

Data storage and security

  • All data is stored in encrypted databases.
  • Child names are used only to personalize stories and are never shared or sold.
  • Story PDFs and audio files are stored in encrypted cloud storage and accessible only through authenticated, time-limited signed URLs.
  • All connections use TLS/HTTPS encryption in transit.
  • Access controls ensure parents can only access their own family's data.

Data retention and deletion

We retain account and story data for as long as your subscription is active. When you cancel:

  • Your story library remains accessible through the end of your billing period.
  • After your subscription ends, we retain your data for 90 days in case you resubscribe.
  • After the retention period, all child-related data is permanently deleted.

Your deletion rights

You may request deletion of your account and all associated data at any time by emailing privacy@EndlessStorytime.com. We will process deletion requests within 30 days.

Parental consent

Only parents or legal guardians may create accounts and provide information about their children. By creating an account and adding a child's profile, you represent that you are the child's parent or legal guardian and that you consent to the collection and use of their information as described in this policy.

You may withdraw consent at any time by deleting the child's profile from your account or by contacting us at privacy@EndlessStorytime.com.

Third-party services

We use the following third-party services to operate Endless Storytime:

  • Payment processor — payment processing. Subject to our payment processor's Privacy Policy.
  • Database and authentication provider — database and authentication infrastructure.
  • Cloud storage provider — cloud storage for generated story files.
  • AI language model provider — story text generation and photo appearance extraction.
  • AI image generation provider — illustration generation.
  • Audio provider — audio narration generation.

These services receive only the minimum data necessary to perform their function. None are authorized to use your data for their own purposes.

Changes to this policy

We may update this policy from time to time. If we make material changes — especially changes that affect how we handle children's information — we will notify you by email before the changes take effect.

Contact us

If you have questions about this privacy policy or want to exercise your data rights, contact us: