Last updated: 11 November 2026
TalePatch makes personalised picture books for children and their families using AI. A parent or legal guardian creates and controls the account. This policy covers the TalePatch app and talepatch.com, including information children enter while making stories.
Who we are
TalePatch is operated by Apex Forge Tech Inc., a company in British Columbia, Canada. We are responsible for the personal information described here. For privacy questions or requests about your child's information, contact our privacy contact at privacy@talepatch.com or call +1 778-917-3968.
The short version
- A parent or legal guardian must consent and be verified before TalePatch collects anything about a child.
- Your child's name and age, their story choices and ideas, and the books we make are used only to make their books. AI models write, illustrate, narrate and safety-check each book.
- Your child's information is never sold, never used for advertising, and never used to train AI models. We do not display ads in the app.
- Readers and books are stored on your device and in your account, so the same readers and books appear on every device you sign in on. Creating a book needs the internet, and so does opening it for the first time on another device.
- We keep information only as long as needed to provide TalePatch. You can delete a book, a reader or your account, or withdraw consent, at any time in Parent settings. Account deletion is also available at talepatch.com/delete-account.
Parents and children
Accounts are for adult parents and legal guardians. Children use the app with their supervision. The mobile app uses a parent PIN for parent settings, purchases and page reports. This control helps restrict access; it does not verify a person's age or relationship to a child.
Before TalePatch collects any information about a child, a parent or legal guardian reviews our parental notice in the app, consents to it, and is verified: an independent parent-verification service emails the parent a link to a quick check that they are an adult, with a choice of methods such as a photo ID, a selfie or a payment card. Until verification is complete, TalePatch collects nothing about the child, and the free library can still be read together. Consent can be withdrawn at any time in Settings → Parental consent. Accepting these documents, verifying an email address or setting a parent PIN is not, by itself, parental consent. Contact us if you believe information was collected without the required parental permission.
Children do not have public profiles, chat or a public posting feature in TalePatch. Please use nicknames and pretend story names. Do not include addresses, phone numbers, email addresses or other people's full names in story ideas. Our filters remove some detected contact details before AI story processing, but cannot detect every personal detail and do not prevent the original submission from reaching our server.
Information and purposes
| Information | Purpose and destination |
|---|---|
| Parent email, password, account ID and optional display name | Account creation, sign-in, management and recovery. Passwords are sent securely to our sign-in service and stored there as hashes. Sign-in is email and password only; we do not offer social sign-in. |
| Purchase identifiers, tokens or receipts, plan, dates and transaction records | Used to apply subscriptions and page credits, handle store notifications and prevent purchase replay. Your app store processes payment; we do not receive card or bank details. |
| Usage and allowance records | Book/page usage, reservations and records of reaching an allowance limit. These run the allowance and help us understand demand and plan limits. |
| Reader first name or nickname, age and colour | Saved on the device and to your account for the reader picker and greetings, so the same readers appear on every device you sign in on. Adding a reader is a parent-gated action. The reader's own name is not sent to AI models. Age goes with story requests so the writing suits the reader. |
| Optional story name | A parent may give a reader a story name: the name they star under when they choose to be the hero. When the child picks it, it is sent with the story like any other answer, and it is spoken in a short clip the app plays while a story is being made. A nickname works well. |
| Story choices and ideas, and generated stories | Our backend and AI models use these to write, check, illustrate and narrate books. This includes derived picture prompts, character references, page text and generated media. Private server working records support recovery after interruption. |
| Microphone input | Optional. A reader can say a story idea instead of typing it. The microphone stays off until a parent turns it on: the first time it is used, the app asks for the parent PIN, and your device then asks for microphone permission. Nothing is listened to before you allow it. The device's speech-recognition service turns the speech into text and may send the audio to the device maker's speech service to do so. TalePatch receives only the text, which is handled like any other story idea; we do not receive or keep the recording. You can refuse, or turn the permission off later in your device settings, and type or use the available choices instead. |
| Parental consent and verification | We keep a record of the notice version you consented to, how you were verified and the result, a verification transaction identifier, and a hashed copy of the account email. The parent-verification service receives the parent's email address and the child's country to run its check, and whatever the parent provides to complete it (for example an ID, a selfie or card details). TalePatch does not receive those; we receive only the result. |
| Optional page reports | We receive the account ID, book/page identifiers, reason, note, page text and available image reference and generation details so we can investigate. A report identifier and reason may appear in logs and error alerts. |
| Book share links ("Send this book") | Not currently offered. When offered, creating a share link is a parent-gated action: the link opens an unlisted preview page showing the book's cover and first page, with the child's name blanked out, and deleting the book or revoking the link removes the preview. |
| Support and privacy messages | Our email services receive your address and the information you send so we can reply and handle requests. Avoid sending children's personal details unless needed for the request. |
Diagnostics and website information
Crash and error reports go to our error-reporting service: device and app information, session information and sampled performance traces, to diagnose reliability problems. Reports can contain activity breadcrumbs, request metadata, error messages and identifiers such as a book identifier. The app and backend remove credentials, email addresses, and the names, story text and book titles they recognise before a report is sent; this is not a guarantee that all free text is removed. Backend reporting disables request-body and local-variable capture. Crash reporting and performance sampling are separate from the app's optional diagnostics preference.
Hosting and security logs can contain IP addresses, request paths, timestamps, browser/device information and account or request identifiers. Our hosting, database, website and network providers handling a request can process connection information.
Website sessions use cookies to maintain sign-in. The signed-in dashboard requests account and allowance information.
The app's optional usage/performance preference controls additional local diagnostics and, when accepted, a small set of usage events sent to our server so we can understand which features are used — for example, that the plans screen was opened, which is linked to your account, or that a library book was opened, which is counted without linking it to your account. It does not stop account, story, allowance, security or crash-report processing. We do not request location, contacts, camera access or a child's photo library in the story-making flow, and do not use advertising identifiers for advertising.
AI models and service providers
AI models write, illustrate, narrate and safety-check each book. To do that, they receive story choices and ideas, the reader's age, any story name used, and the story text and pictures being made. Your child's information is used only to make their books. It is never sold, never used for advertising, and never used to train AI models.
We also use service providers for hosting and storage, sign-in, parent verification, payment verification, error reporting and email. They process information only to provide those services to us. Which models and providers we use can change as better ones become available; the commitments in this policy apply whichever we use. Contact us for information about the providers handling your request.
Information can be processed outside Canada, including in the United States and Singapore, where local authorities may have lawful access. Applicable privacy obligations and required transfer arrangements continue to apply. We may disclose information when legally required or necessary to protect safety, and in a lawful business transfer subject to applicable privacy protections.
Retention and deletion
We keep information only as long as needed to provide TalePatch.
| Records | Retention and deletion |
|---|---|
| Readers and books in your account | Kept until you delete the book, the reader or the account. Deleting a reader deletes their books. Each device also keeps its own copy of what was opened on it until you delete it there, remove the account's stories in the app, or uninstall (subject to device backup behavior). Settings are stored locally. |
| Server pictures and narration | Kept while the book is in your account's library. When you delete a book the app asks our server to delete them at once, and a regular clean-up removes anything left behind. Media for a book that was never saved to an account, and spoken story-name clips, are deleted automatically within about a month. |
| Private story recovery records | A part-finished story is kept for about a day in case generation is interrupted, then removed. |
| Parental consent records | Kept while we rely on the consent and for 24 months after it is withdrawn or replaced, or the account is deleted, so we can show what was agreed. A scheduled job then deletes them. |
| Account, purchase, usage and report records | Retained for account functionality and removed through account deletion. App stores retain their own transaction records under their policies. |
| Logs, diagnostics, email and provider backups | Separate, limited retention and deletion processes apply. These are not all erased at once by deleting an account. Contact us to request review or deletion of information that remains. |
Your account's library is what lets a book open on another device; it is not a backup of a device, and a book you delete is deleted from the account and from our server. Account deletion removes the account's readers and books at once; media, recovery files, logs or backups follow the processes above and any necessary follow-up. We do not retain children's information for an unrelated future purpose.
Your choices and rights
- Review or obtain a copy: view readers and books in the app on any device you sign in on; contact privacy@talepatch.com for other server-held information about you or your child.
- Correct: remove a reader and add them again with the right details, or change your display name on the website; contact us for other corrections.
- Delete: to remove one reader and the books made for them, choose Remove a reader on the reader picker. To delete the account, open Parent settings on the reader picker, enter the parent PIN, then Account → Delete account; on the website use Delete your account. Contact us if you cannot sign in or want particular child information removed.
- Withdraw consent: in Settings → Parental consent. New stories stop and nothing more is collected about your child; a story already being made finishes or fails on its own; information already stored stays until you delete it or its retention period ends. Removing a reader or withdrawing consent does not by itself remove information already sent to providers; contact us and we will ask them. Some features cannot work without the information needed to provide them.
- Cancel payments separately: account deletion does not cancel an app-store subscription. Cancel through your app store to prevent renewal.
We check that requests come from someone entitled to act for the account or child. Applicable law may provide access, correction, deletion, consent-withdrawal, objection, restriction or portability rights. Contact us first with a privacy concern. You may also complain to the Office of the Information and Privacy Commissioner for British Columbia, the Office of the Privacy Commissioner of Canada, or your local supervisory authority, as applicable.
Where European or UK law applies, the basis for each use must reflect its purpose: providing the parent's account/service, consent where required for children's information, security interests where permitted, or a legal obligation. A contract with a parent does not remove separate children's-privacy requirements.
Security and changes
We use encrypted connections, protected account sessions, restricted server access and signed media links. No system or parental gate guarantees against all access or disclosure.
We update the date above when this policy changes. Material changes require appropriate notice; where new permission is legally required, it must be obtained before changed collection or use. Continued use alone does not replace required parental consent.
Contact
- Operator: Apex Forge Tech Inc.
- Telephone: +1 778-917-3968
- Privacy: privacy@talepatch.com
- Support: support@talepatch.com
- Account deletion: talepatch.com/delete-account