Privacy Policy

Version 2026-07-20 · Effective 2026-07-20

This Privacy Policy explains how Tellasaurus ("Tellasaurus," "we," "us") collects, uses, and shares personal information when you use the Tellasaurus websites and applications (the "Service"). Because Tellasaurus is designed for children to use inside a parent-held account, this policy works together with our Children's Privacy Notice, which describes our practices for information collected from children under 13 in the detail required by the U.S. Children's Online Privacy Protection Act (COPPA).

1. Information we collect

Account information (from the adult account holder): name, email address, password credentials, and your recorded acceptance of our Terms (version and timestamp).

Kid profiles (entered by the parent): a first name or nickname and the settings you choose (such as reading level and art style). We recommend using a nickname. We do not ask children for — and instruct our AI assistant never to request — a child's full name, address, school, contact details, or photos of themselves.

Content created in the Service: the chat messages you and your child type while brainstorming, the characters, places, stories, maps, and narration audio generated from them, and photos you choose to upload to turn into characters. Tellasaurus does not collect voice recordings.

Billing information: purchases and subscription status. Payments are processed by Stripe; we receive transaction records but never your full card number.

Technical information: log data, session cookies needed to keep you signed in, and basic usage records. We do not use third-party advertising trackers.

2. How we use information

To operate the Service: generating stories and artwork from your family's ideas, keeping your world persistent, and playing narration.
To process payments, grant credits, and maintain your subscription.
To keep the Service safe: enforcing our content standards, rate limits, and Terms.
To communicate with the account holder about the Service.
To debug, secure, and improve the Service.

We do not sell personal information, and we do not use children's personal information for marketing or behavioral advertising.

3. AI providers and other processors

Generation is powered by third-party AI providers acting as our processors. Chat and story text are processed by Anthropic (Claude models); illustrations are generated by Google (Gemini image models); read-aloud narration is synthesized by ElevenLabs. The content needed for each generation (for example, a chat transcript or a scene description) is transmitted to the relevant provider to produce the result. Under our agreements with these providers, API content is not used to train their models.

Other processors include our hosting providers, our database and file-storage providers (generated images and audio are stored in cloud object storage), Stripe for payments, and our background-job infrastructure. Each processes personal information only to provide its service to us.

4. Sharing you control

Stories are private to your account by default. If you create a share link, anyone with that link can view that story (and its narration); you can disable a share link at any time. There are no public feeds and no comments.

5. Retention and deletion

We retain account data and created content for as long as your account exists, so your child's world persists. You may delete individual characters, stories, and kid profiles at any time, and you may delete the entire account in settings, which deletes the personal information associated with it except records we must keep for legal, billing, or security reasons.

Parents may also contact us at support@tellasaurus.com to review or delete their child's information — see the Children's Privacy Notice.

6. Security

We use industry-standard safeguards — encrypted connections, hashed passwords, scoped access controls, and isolation of production data — to protect personal information. No system is perfectly secure; if a breach affecting your information occurs, we will notify you as required by law.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can exercise most of these directly in the app (account settings), or by contacting support@tellasaurus.com. We will not discriminate against you for exercising your rights.

If you live in a region that grants additional privacy rights — such as the EEA, the United Kingdom, or a U.S. state with a comprehensive privacy law — you may exercise those rights as your local law provides by contacting us at support@tellasaurus.com. We honor valid requests regardless of where you live.

8. Children's privacy

Children use Tellasaurus through profiles inside a parent-held account. The adult account holder attests at signup that they are 18 or older and are the parent or legal guardian of the children who will use the account, and consents to the collection practices described here and in the Children's Privacy Notice — our COPPA direct notice, which details what we collect from children, how we use it, and parents' rights to review and delete it.

Parental consent is obtained through the account structure itself: only an adult can create an account, that adult attests at signup that they are the parent or legal guardian of the children who will use it, and every child profile is created — and can be deleted — by that adult.

9. Changes to this policy

We may update this policy from time to time. Material changes will be notified to account holders, and changes that materially affect children's information will require renewed parental consent where the law demands it.

10. Contact

Privacy questions and requests: support@tellasaurus.com.