Curiowitty was built by a parent, and privacy — especially children's privacy — is the foundation of the product. This policy explains what we collect, why, and the choices you have.
The short version
- Your child's photo is used once to create their cartoon hero, then deleted. We never store it and never use it to train AI models.
- We don't sell or share personal data with advertisers. No third-party ad trackers.
- You can delete a hero, a story or your whole account at any time — deletion removes the generated files too.
1. Data we collect
- Account data: email address, password (stored as a salted hash), optional name, preferred language and country.
- Hero data you provide: your child's first name, age, gender and optional personality notes. We deliberately never ask for a child's surname, birth date or contact details.
- The uploaded photo: processed in memory to derive the cartoon character, then deleted. It is not written to permanent storage and not used for model training.
- Generated content: the cartoon hero images, stories, narration audio and PDFs we create for you are stored so you can access them.
- Payment data: handled by our payment provider (Paddle) as merchant of record. We never see or store your card details.
- Technical data: basic logs (IP, timestamps, errors) for security and reliability. A session cookie keeps you signed in — we use no advertising or cross-site tracking cookies.
2. Children's privacy
Curiowitty is a service for parents and guardians; children do not create accounts and we do not knowingly collect data directly from children. All child-related information is provided by the parent/guardian, used only to personalize stories, and removable by the parent at any time. If you believe a child's data was provided without guardian consent, contact us and we will delete it promptly.
3. How we use data
- To provide the Service: generate heroes and stories, narrate, translate and deliver them.
- To operate the account: sign-in, email verification, important service emails (e.g. "your story is ready").
- To keep the Service safe: abuse prevention, content-safety enforcement, debugging.
- We do not use your content for advertising and do not train AI models on your photos or your children's data.
4. Sharing
We share data only with the infrastructure providers needed to run the Service (hosting, email delivery, payment processing by Paddle), each bound to process it solely on our instructions. We never sell personal data.
5. Retention and deletion
- Uploaded photos: deleted immediately after the hero is generated.
- Heroes, stories and generated media: kept until you delete them or your account.
- Account data: kept while your account exists; deleted upon account deletion except where law requires brief retention (e.g. invoices).
6. Your rights
Depending on your location (including under GDPR), you may have rights to access, correct, export or delete your personal data, and to object to or restrict processing. You can exercise most of these directly in the app (delete hero / story / account) or by emailing info@curiowitty.com. You may also lodge a complaint with your local data-protection authority.
7. Security
Data is encrypted in transit (HTTPS), passwords are hashed, generated files are served through access-controlled storage, and our generation systems apply layered content-safety filters.
8. Changes
We'll post any changes here and update the date above; material changes will be announced by email or in-app.
9. Contact
Privacy questions or requests: info@curiowitty.com