Privacy Policy

Last updated: July 2026

ZTales.com ("Z Tales", "we", "us") creates personalized, AI-generated bedtime stories. This policy explains what information we collect, why we collect it, and how we handle it. The short version: we collect only what the product needs, we never sell your information, and your family's stories belong to you.

Who Z Tales is for

Z Tales is designed for parents and guardians. Accounts may only be created by adults. Any information about children — such as a first name, age range, or a description used to personalize illustrations — is provided voluntarily by the parent or guardian who owns the account, and is used solely to generate their stories.

What we collect

Account information. Your email address, provided when you create an account with a password, with Google, or with an email sign-in link. If you set a password we store it hashed — never in a form we or anyone else can read. We use your address to operate your account and to send sign-in, confirmation and password-reset emails. We also send up to four short emails over your first two weeks — help getting started, and one that describes the paid plans. Every one of them carries an unsubscribe link, and unsubscribing stops them without affecting your account or the sign-in emails you need. We never sell or rent your address, and we do not send a newsletter.

Story inputs and content. The choices you make when creating a story (name, age range, lesson, story world, and any optional child description you save), plus the stories, illustrations, and narration audio generated from them. These are stored so your library works.

Payment information. Payments are processed by Stripe. We never see or store your card number. We store only your subscription status and plan so we can provide the features you paid for.

Feedback. If you send feedback through the app, we store the message and, if you are signed in, your email so we can follow up.

How stories are generated

Story text, illustrations, and narration are generated using OpenAI's services. The inputs you provide (such as a child's first name and your description) are sent to OpenAI to produce your story. We recommend using first names only and avoiding information you would not want processed by an AI service.

Since 2 August 2026 that processing happens under a signed Data Processing Addendum in which OpenAI acts as our data processor: they may use what we send only to deliver the service back to us, and only on our instructions. They do not use it to train their models. They may hold it for up to thirty days to detect abuse of their own systems, after which it is deleted.

Sharing

Stories are private by default. If you use the Share feature, that story becomes viewable by anyone who has the link. You can make it private again from your library at any time by deleting the story or contacting us.

What we never do

We do not sell your information. We do not show ads on Z Tales. We do not use your family's stories, names, or descriptions for advertising or for training our own models. Nothing a child's name or description touches is ever shared with an advertising service.

Measuring our own advertising

Z Tales sometimes buys ads on search engines to reach parents. So that we can tell which ads are worth paying for, a page you arrive on may record which ad brought you — and if you later create a story or subscribe, Google Ads is told that a conversion happened. Google may set a cookie in your browser for this. It is told that something happened, never who you are, what you typed, or anything about your child. You can opt out of Google's advertising cookies at adssettings.google.com.

Service providers

We rely on a small set of providers to run Z Tales: Vercel (hosting), Supabase (accounts and data storage), Stripe (payments), OpenAI (story, image, and audio generation), and Google Ads (measuring the ads described above). Each receives only what is necessary to do its job.

How long we keep things

Nothing here is kept indefinitely, and everything below is deleted sooner if you ask.

Your child's details — a first name, an age range, and an optional description used for the illustrations — are kept for as long as your account exists, because they are what each story is written from. Delete a child from your account and their details go immediately; delete your account and every one of them goes with it.

Stories, illustrations and narration are kept while your account exists, up to the number your plan holds — three on Free, thirty on Plus, three hundred and sixty-five on Premium. Beyond that the oldest make way for the newest, and you choose which. Deleting a story removes it permanently.

Your account email is kept while the account exists, so we can sign you in, email you about your account, and send the first-two-weeks notes described above until you unsubscribe.

Visit records and advertising click identifiers — the anonymous counts described above — are kept for up to twenty-four months and then deleted. They contain no child's information at any point.

A story made without an account is never stored on our servers at all. It lives in your own browser until you sign in to keep it, and clearing your browser removes it.

Deleting your data

You can delete any story from your library at any time, which removes it permanently. To delete your entire account and all associated data, email us and we will do it promptly — or follow the steps on our account deletion page, which also covers deleting individual stories, children or memories without closing your account.

Contact

Questions or requests: privacy@ztales.com