Privacy Policy

1. About this policy and who we are

NuluTales is operated by Elevelop Studio LLC, a company registered in Georgia with its registered office at Nutsubidze street, N 60, apartment N3, Tbilisi, Georgia ("NuluTales," "we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect information when you use our website at nulutales.com, our mobile applications, and related services (together, the "Service"). If you have questions about this policy, you can reach us any time at support@nulutales.com.

2. Who the Service is for

Accounts and payments are intended for adults - parents or legal guardians. Children may enjoy the stories NuluTales creates, but the account, the information provided, and any purchases are controlled by the adult who created the account. We do not knowingly allow children to create accounts on their own or to use NuluTales without an adult's involvement.

3. Information we collect

3.1 Account information

When you create an account, we collect your full name, email address, authentication credentials (handled securely through our authentication provider), a device identifier and approximate country/region (used to prevent the same device from claiming more than one free trial), and your language and reading preferences. If you subscribe to a paid plan, we also hold your subscription status, plan, and renewal information (see 3.4).

3.2 Child profile information

To personalize stories, you may add one or more child profiles. Depending on what you choose to enter, this can include: the child's first name or nickname; date of birth (used to tailor content to their age and to show their age in the app); interests and favorite themes; appearance details such as skin tone, eye color, hair color, and gender; accessibility characteristics you choose to note, such as glasses, a hearing aid, wheelchair use, or braces; personality traits; and free-text notes you write to help personalize a story. You may also add details about friends, siblings, or other characters you'd like included in a story, such as their name, relationship, appearance, and personality.

All of this is optional beyond what's needed to generate a story, and you control what you enter. Please avoid adding information that isn't necessary for the story experience - for example, a home address, school name, phone number, medical record, or government ID number.

3.3 Story creation and content

When you create a story, we process the prompts and preferences you choose (such as setting, theme, and moral), the resulting story text, the illustrated cover, the narrated audio, and any story variations, series, or episodes you generate. We save this content to your library so you can access it later, along with usage metadata such as when a story was created.

3.4 Payment and subscription information

If you purchase a subscription, how we receive your payment information depends on where you bought it:

• On iOS: your purchase is processed by Apple through the App Store, and subscription management is handled with the help of RevenueCat, our subscription infrastructure provider. We receive your subscription plan, status, renewal date, and transaction identifiers - never your full payment card details.
• On the web, and on Android (our Android app does not sell subscriptions directly - see our Terms of Service): your purchase is processed by Paddle.com Market Ltd, our reseller and Merchant of Record. Paddle collects your payment details, billing address, and email directly; we receive your subscription plan, status, and transaction identifiers from Paddle, but never your full card details.

3.5 Technical and usage information

We automatically collect your device type and operating system, app version, a device identifier (used to prevent the same device from claiming multiple free trials or otherwise abusing promotions), crash logs and performance diagnostics, analytics about how you use the app (through Firebase Analytics), and an approximate country or region derived from your IP address, used for fraud prevention and security.

3.6 Support and communications

If you contact us, we keep the content of your message and any information you choose to share so we can respond and keep a record of the interaction.

4. How we use information

• Create, secure, and manage your account
• Generate personalized stories, cover art, and narration from the profiles and prompts you provide
• Save your stories and preferences to your library and provide downloads where available
• Apply your subscription plan's limits (story count, child profiles, series length) accurately
• Detect and prevent fraud, free-trial abuse, and misuse of the Service
• Maintain the safety and age-appropriateness of generated content
• Improve app performance, reliability, and stability
• Understand which features are useful, in aggregate
• Provide customer support and respond to your requests
• Send account, service, and transactional emails (like verification codes and receipts)
• Comply with legal, tax, and app store requirements

We do not use a child's personal information to build advertising profiles or for behavioral advertising.

5. How NuluTales uses AI to generate stories, covers, and narration

NuluTales uses third-party artificial intelligence providers to turn the details you provide into a finished story. Specifically:

• OpenAI processes the story details you provide (such as your child's name, age, interests, personality traits, appearance, and any free-text notes) to write the story text.
• Runware and Nebius process a description derived from your child's profile and the story to generate the illustrated cover image.
• DeepInfra processes the finished story text to generate the spoken narration audio.

Each provider receives only what's needed to generate the requested story, cover, or narration, and processes it under its own data-processing and security terms. We don't authorize these providers to use the information you submit through NuluTales to build or improve their own general-purpose AI models beyond what's needed to provide the service to us; because a provider's own terms can change over time, we encourage you to review each provider's published privacy practices if you'd like more detail.

Because this involves your child's personal information, we ask for your explicit, affirmative agreement - as the parent or legal guardian - before any of this happens. We collect that consent through a mandatory checkbox when you create your NuluTales account, before you can create your first story. If you don't agree, simply don't check the box: you won't be able to create an account or use NuluTales's story-generation features. You can withdraw this consent at any time by deleting your account (Section 15) or contacting support@nulutales.com, though this means you'll no longer be able to use the Service's core features.

Generated stories, covers, and narration are created automatically and are intended for family entertainment and bedtime routines. They are not medical, psychological, educational, or professional advice, and we can't guarantee every output will be error-free or exactly as expected - see our Terms of Service for more on this.

6. Legal bases for processing (EEA/UK users)

Depending on your location, we rely on one or more of the following legal bases:

• Consent: for the AI-sharing consent described in Section 5, and for optional communications.
• Contract: when processing is necessary to provide the app, your account, story generation, or subscription features.
• Legitimate interests: to improve the Service, prevent abuse, maintain security, and understand basic product performance.
• Legal obligation: when required to comply with law, tax, or platform obligations.

7. Children's privacy

NuluTales is built for families, but it's designed to be used by parents and legal guardians, not directly by children on their own.

• We do not knowingly allow children to create their own accounts; all data about a child is entered and controlled by an adult.
• We do not use a child's personal information for behavioral advertising, and we do not knowingly sell or share children's personal information for cross-context behavioral advertising.
• Where the U.S. Children's Online Privacy Protection Act (COPPA), EU/UK rules on information society services for children, or similar laws apply, the consent described in Section 5 is intended to serve as verifiable parental consent for the collection of a child's information necessary to provide the Service.
• If we learn a child has provided us with personal information directly, without a parent or guardian's involvement, we will take reasonable steps to delete that information.

Parents and guardians can review, correct, or request deletion of a child's profile information at any time from within the app, or by contacting support@nulutales.com.

8. How we share information

We do not sell personal information, and we do not share children's personal information for cross-context behavioral advertising. We share information only as follows:

8.1 Service providers who help us operate NuluTales

• Firebase / Google Cloud - hosting, database, authentication, crash reporting, and analytics.
• OpenAI, Runware, Nebius, and DeepInfra - AI generation of story text, cover images, and narration audio (see Section 5).
• Apple and RevenueCat - iOS purchase processing and subscription management.
• Paddle.com Market Ltd - web and Android subscription billing, tax, and order-related customer support, as our Merchant of Record.
• Our email delivery provider - sending account verification codes, receipts, and service emails.
• Customer support tools we use to manage and respond to your messages.

These providers may only use information to provide services to us, under their own confidentiality and security obligations.

8.2 Legal, safety, and business reasons

We may disclose information if required by law or a valid legal process, to enforce our Terms of Service, to investigate or prevent fraud, abuse, or security incidents, to protect the rights, safety, or property of NuluTales, our users, or the public, or in connection with a merger, acquisition, financing, or sale of some or all of our assets - in which case we'll require the recipient to honor the commitments made in this policy.

9. Analytics and advertising

We use Firebase Analytics to understand how the app and website are used, so we can improve reliability and performance. If we run advertising campaigns to promote NuluTales, we may use campaign attribution data (for example, which ad or link led to an app download) - but we do not use children's personal information for targeted or behavioral advertising, and we do not build advertising profiles based on a child's data.

10. Cookies and similar technologies

Our website (nulutales.com) uses a small number of strictly necessary cookies and similar technologies to keep the site working correctly. We do not currently use non-essential cookies for advertising or cross-site tracking; if that changes, we'll update this policy and, where required, ask for your consent first. You can control cookies through your browser settings.

11. Data retention

We keep personal information only for as long as reasonably necessary:

• Account and child profile data, and saved stories: for as long as your account is active, until you delete the specific content or your account.
• Diagnostics and analytics: for a limited period consistent with keeping the Service reliable.
• Payment and subscription records: for as long as required by tax, accounting, and platform rules (typically several years).
• Support messages: for as long as needed to resolve your request, and a reasonable period afterward.

Some information may remain for a limited time in backups, security logs, or fraud-prevention records after you delete your account or specific content, and we may retain what we're legally required to keep even after a deletion request. When you request account deletion from within the app, we process the request - and permanently delete your account, child profiles, stories, covers, and narrations - within a reasonably short period (typically a few days), and we email you to confirm once it's done.

12. Data security

We use reasonable administrative, technical, and organizational measures to help protect information, such as access controls, encryption in transit, and security monitoring. However, no system is completely secure, and we cannot guarantee absolute security. Please use a strong, unique password, keep your device secure, and contact us immediately at support@nulutales.com if you suspect unauthorized access to your account.

13. International data transfers

We're based in Georgia, and our service providers are located in other countries, including the United States and the European Union. Data protection laws may differ by location. Wherever your information is processed, we take reasonable steps - including relying on our providers' own compliance mechanisms and, where applicable, standard contractual clauses or similar safeguards - to ensure it receives an appropriate level of protection.

14. Your rights and choices, and account deletion

Depending on where you live (for example, under the GDPR in the EEA/UK, the CCPA/CPRA and other laws in the United States, or similar laws in Canada, Australia, and elsewhere), you may have rights to access, correct, delete, or obtain a copy of your personal information; to object to or restrict certain processing; to withdraw consent, including the AI-sharing consent described in Section 5; and to lodge a complaint with your local data protection authority. We do not sell or share personal information as defined under the CCPA/CPRA.

You can request deletion of your account or a child's profile at any time from within the app's account settings (Settings → Delete account), or by contacting support@nulutales.com. In the app, this requires a double confirmation and immediately signs you out; deletion is then completed within a reasonably short period (typically a few days), and we email you once it's done. Deleting your account also ends your access to story-generation features. If you have an active paid subscription through Paddle (web or Android), we cancel its automatic renewal for you as part of processing the deletion request - you won't be charged again, though we can't refund time already paid for. If you have an active subscription through the Apple App Store, Apple requires you to cancel it yourself from your Apple ID subscription settings; we can't cancel an Apple subscription on your behalf, and deleting your NuluTales account does not stop Apple from billing you (see our Terms of Service, Section 9). We may ask you to verify your identity before completing a request, and we may need to retain some information as described in Section 11.

15. Third-party links and platforms

NuluTales may link to, or operate within, third-party platforms - the Apple App Store, Google Play, or our payment providers, for example. Those platforms have their own privacy practices, which we don't control; please review them separately.

16. Changes to this Privacy Policy

We may update this Privacy Policy as NuluTales evolves. If we make a material change - for example, adding a new AI provider or materially changing how we use a child's information - we will update the "Last updated" date and, where required by law or by Apple's or Google's rules, notify you in the app or by email and, if needed, ask you to reconfirm your consent.

17. Contact us

If you have questions about this Privacy Policy or how we handle your information, contact Elevelop Studio LLC at support@nulutales.com, or by mail at Nutsubidze street, N 60, apartment N3, Tbilisi, Georgia. You can also find this policy and our Terms of Service at nulutales.com.