This policy explains what Java Mantra Corp (“Talepuff”, “we”) collects when you use the Talepuff cube, the Talepuff app and talepuff.com, why, and what you can do about it. The plain-words summary for parents is at /privacy and is part of this policy.
1. Who this is for
Talepuff is bought and set up by a parent or guardian (“you”). It is used by children. We know that, and we treat every request made through a cube as a child’s data.
2. What we collect
- Account: your email address and a password we store only as a hash.
- Child profile: a first name or nickname, an age, a time zone and a chosen storyteller. We never ask for a surname, a photo, a birthday or a location.
- Requests: the words a child says after pressing the button, produced by transcribing up to eight seconds of audio. The audio itself is discarded after transcription and is never stored.
- Stories: the text, title and narration we generate in response, kept as your family’s library.
- Device data: the cube’s serial, firmware version and when it was last online.
- Preferences: your family’s settings: music, sleep sounds, whether stories of faith are told, and which version of the terms you accepted.
- Payment: handled by our payment provider; we receive the plan status and the last four digits of a card, never the number.
- Website: if you join the waitlist, your email address. We use privacy-respecting analytics without cookies.
3. Children’s privacy (COPPA)
Before the first story can be told, we obtain a parent’s consent in the app, tied to the parent’s account. We collect from a child only what a story needs: the request, a first name and an age. We do not show advertising, we do not build profiles for marketing, and we do not sell or rent children’s data to anyone. A parent can review what was collected (stories in the app, and the words of requests emailed to the account address on request), withdraw consent, and delete everything at any time from the app. Requests about children’s data: hello@talepuff.com.
4. How we use it
- To transcribe a request and write and narrate a story for that request and age.
- To keep your family’s library and replay stories.
- To run safety checks on requests and stories.
- To run your account, your plan and support.
5. Who we share it with
Requests and story text are processed by an AI service provider under terms that forbid using them to train models. Narration audio is stored with a cloud storage provider. Payments are processed by our payment provider. Each is bound by contract to use the data only to provide the service to us. We share data with nobody else, except where the law requires.
6. How long we keep it
- Request audio: not kept.
- Request words: 30 days.
- Stories: for the life of your account; stories not played for 12 months may be removed, except favourites and the latest episode of a series.
- Account and child profiles: until you delete them.
- After an account is closed: 90 days, then deletion.
- Billing records: as long as tax law requires.
7. Your choices
In the app you can see each child’s stories, change or remove a child, withdraw consent, and close your account. Closing erases every child, story and recording; it cannot be undone, and it reaches our backups within 30 days. The words of a request are deliberately not shown on any screen: under Privacy, ask us to email them and we send the list, with the date each was said, to the address this account was opened with. You can also email us to exercise any right you have under the laws of your state or country, including access, correction and deletion.
8. Security
All traffic between the cube, the app and our servers is encrypted. The cube holds only a token for its own account, never an API key or a password. Passwords are hashed. Our staff do not read a child’s words except to investigate a problem you have raised or a refusal our safety checks made, and then only under a support case that records who looked and why.
9. Changes
We will email account holders before any change that affects children’s data, and we will never make a change that reduces a child’s protection retroactively.
10. Contact
Java Mantra Corp, hello@talepuff.com.