Privacy Policy

Who we are

Baobao Tales is operated by [Company Name] Pte. Ltd., a company in Singapore ("we", "us"). This policy explains what personal data we collect when you use the Baobao Tales apps and website, why we collect it, who processes it for us, and the choices you have.

Baobao Tales is a service for adults. Parents and guardians use it to create picture books for their children; children do not have accounts and we do not communicate with them.

Questions about this policy go to support@baobaotales.com.

What we collect

Account data: your email address (or the private relay address Apple gives us if you hide your email), the sign-in method you used, your language preferences, and your credit balance.

Information about your child, provided by you: the child's first name or nickname, an age range, and whether the hero is a boy, a girl, or unspecified. You may also upload one photo of your child so the illustrations resemble them. The photo is optional and requires your explicit consent as the child's parent or guardian.

Your story choices: language, theme, setting, art style, narrator voice, length, and any plot idea you type.

The content we generate for you: story text, illustrations, narration audio, and the PDF of each book.

Purchase records: the product bought, price, currency, time, and the transaction identifier from the App Store, Google Play, or Stripe. We never see or store card numbers.

Technical data needed to run and protect the service: IP address, browser or device type, timestamps, and error logs.

How we use it

To make your books: writing the story, drawing the illustrations, recording the narration, and binding the PDF.

To run your account: signing you in, keeping your library, granting and spending credits, and emailing you sign-in codes.

To process purchases and refunds, and to keep the accounting records the law requires.

To answer support requests and to review content you report.

To keep the service safe: screening story ideas before generation, preventing abuse, and fixing errors.

We do not sell personal data, show advertising, or build profiles of children.

AI processing and your child's photo

Stories and illustrations are generated by artificial intelligence. To do this we send your story choices and your child's first name, age range, and hero type to the specialist AI services we use: a text service writes the story and screens story ideas, an illustration service draws the pictures, and a narration service records the reading. We do not list these services by name here; you can ask us at support@baobaotales.com which services process your data.

If you upload a photo, it is sent to two of these services, only for that one book: the text service, to write a short description of your child's features and afterwards to check how closely the finished drawing resembles them (that likeness check can run more than once), and the illustration service, to draw a "character sheet": a storybook drawing of your child. The photo is deleted from our storage as soon as that drawing exists, normally within a few minutes, and is not used for anything else. Only the drawing, never the photo, is used for the pages of the book.

Our agreements with these services limit them to processing the data in order to provide the service to us. They are not permitted to use your data to advertise to you.

AI output can contain mistakes. Please read a book before sharing it with your child, and use "Report a problem" on any page that looks wrong; we review reports within one business day.

Who processes data for us

Supabase: database, sign-in, and file storage, hosted in Singapore.

Vercel: hosting of the website and API, served from Singapore.

Trigger.dev: runs the background jobs that make each book.

Specialist AI services for text (story writing and screening; the description and likeness check of an uploaded photo), illustration (including the character sheet drawn from a photo) and narration, as described above, located in the United States and the United Kingdom; names available on request.

Stripe: payments on the website. Apple App Store and Google Play, with RevenueCat: purchases inside the apps.

Resend: delivery of sign-in codes and support emails.

Some of these providers process data in the United States. Where data leaves Singapore we rely on contractual safeguards that meet the transfer requirements of the Personal Data Protection Act.

Children

You must be at least 18 to hold an account. By entering a child's details or photo you confirm that you are the child's parent or legal guardian and consent to their use as described here.

We collect only what is needed to personalise the book: a first name, an age range, a hero type, and the optional photo described above. We never ask for a child's full name, birth date, school, or contact details, and we never contact children.

How long we keep data

Uploaded photos: deleted as soon as the character sheet exists, and in any case when a book fails or is deleted. A photo uploaded in the create screen but not used for a book is deleted within 24 hours.

Books and account data: until you delete the book or your account.

Purchase records: kept in anonymised form (no email, no name) for as long as tax and accounting law requires, which is five years in Singapore.

Payment and store event logs: 30 days. Error logs: 30 days.

Backups are overwritten within 30 days of a deletion.

Your rights and choices

You can see and download your books at any time; a PDF export is available with any purchase.

You can correct your email and preferences in Account, and delete any book from your library.

You can delete your account, which removes your books, files, and sign-in, from Account → Delete account in the app or on the website, or at https://baobaotales.com/en/account/delete. Deletion is immediate.

You can withdraw consent for the photo by simply not uploading one; books already made are not affected because the photo has already been deleted.

To access or correct other data, or to complain, email support@baobaotales.com. We respond within 30 days. You may also contact the Personal Data Protection Commission of Singapore.

Security

Data is encrypted in transit. Books and photos are stored in private storage and are served only through short-lived signed links. Access to production systems is limited to the people who operate the service.

No system is perfectly secure. If we learn of a breach that affects you, we will tell you and the authorities as the law requires.

Law and changes to this policy

This policy is governed by the laws of Singapore, including the Personal Data Protection Act 2012.

When we change this policy we will post the new version here with a new date, and tell you in the app if the change is significant.

Contact: [Company Name] Pte. Ltd., Singapore. Email support@baobaotales.com.