This policy explains what Java Mantra Corp (“Talepuff”, “we”) collects when you use the Talepuff cube, the Talepuff app and talepuff.com, why, and what you can do about it. The plain-words summary for parents is at /privacy and is part of this policy.
1. Who this is for
Talepuff is bought and set up by a parent or guardian (“you”). It is used by children. We know that, and we treat every request made through a cube as a child’s data.
2. What we collect
- Account: your email address and a password we store only as a hash.
- Child profile: a first name or nickname, an age, a time zone and a chosen storyteller. We never ask for a surname, a photo, a birthday or a location.
- Requests: the words a child says after pressing the button, produced by transcribing up to eight seconds of audio. The audio itself is discarded after transcription and is never stored.
- Stories: the text, title and narration we generate in response, kept as your family’s library.
- Device data: the cube’s serial, firmware version and when it was last online.
- Payment: handled by our payment provider; we receive the plan status and the last four digits of a card, never the number.
- Website: if you join the waitlist, your email address. We use privacy-respecting analytics without cookies.
3. Children’s privacy (COPPA)
Before the first story can be told, we obtain a parent’s verifiable consent in the app, tied to the parent’s account and payment method. We collect from a child only what a story needs: the request, a first name and an age. We do not show advertising, we do not build profiles for marketing, and we do not sell or rent children’s data to anyone. A parent can review what was collected, withdraw consent and delete it at any time in the app. Requests about children’s data: hello@talepuff.com.
4. How we use it
- To transcribe a request and write and narrate a story for that request and age.
- To keep your family’s library and replay stories.
- To run safety checks on requests and stories.
- To run your account, your plan and support.
5. Who we share it with
Requests and story text are processed by an AI service provider under terms that forbid using them to train models. Narration audio is stored with a cloud storage provider. Payments are processed by our payment provider. Each is bound by contract to use the data only to provide the service to us. We share data with nobody else, except where the law requires.
6. How long we keep it
- Request audio: not kept.
- Request words: 30 days.
- Stories: for the life of your account; stories not played for 12 months may be removed, except favourites and the latest episode of a series.
- Account and child profiles: until you delete them.
- After an account is closed: 90 days, then deletion.
- Billing records: as long as tax law requires.
7. Your choices
In the app you can see each child’s requests and stories, change or remove a child, withdraw consent, and close the account. Deletion reaches our backups within 30 days. You can also email us to exercise any right you have under the laws of your state or country, including access, correction and deletion.
8. Security
All traffic between the cube, the app and our servers is encrypted. The cube holds only a token for its own account, never an API key or a password. Passwords are hashed. Our staff do not read requests unless you ask us to investigate a problem.
9. Changes
We will email account holders before any change that affects children’s data, and we will never make a change that reduces a child’s protection retroactively.
10. Contact
Java Mantra Corp, hello@talepuff.com.