Privacy Policy

TwinkleBot – Privacy Policy

Last updated: February 24, 2026

This Privacy Policy describes how Metabuilder LLC and its affiliates ("TwinkleBot," "we," "our," or "us") may collect, use, and disclose personal information about you. This Privacy Policy applies to information collected when you interact with the website located at https://twinklebot.app (the "Website"), our mobile applications available on iOS and Android (the "Apps"), and all related services, software, features, or products provided by TwinkleBot from time to time (together with the Website and Apps, the "Services").

Please read this Privacy Policy carefully so you understand our policies and practices regarding your information. If you do not agree with our policies and practices, your choice is not to interact with the Services. By accessing or using the Services you agree to this Privacy Policy and our Terms of Service. We encourage you to check this Privacy Policy often so that you stay informed about our practices and the choices available to you.


Contents

  1. Information We Collect
  2. How We Use Your Information
  3. Third-Party Services
  4. Sharing Information
  5. Cookies and Similar Technologies
  6. Analytics
  7. Your Choices
  8. International Transfers
  9. What Is Our Legal Basis?
  10. Your EEA Privacy Rights
  11. Your State Privacy Rights
  12. How We Protect Your Information
  13. Information Storage
  14. Children's Privacy
  15. Changes to This Privacy Policy
  16. Third-Party Links and Features
  17. Contact Us

1. Information We Collect

Depending on how you interact with the Services, we may collect information about you as described below.

A. Information You Provide

You provide us with information when you create an account, purchase story credits, create a storybook, or communicate with us. This may include:

  • Account Information. Your email address and, if you sign in using a third-party authentication service such as Google, any information that service shares with us (typically your name and email address).
  • Child Character Information. To create a personalized storybook, you provide a character name, gender selection, and a clear front-facing photograph of the child. This information is used solely to generate a personalized character and storybook illustrations.
  • Payment Information. Payment details such as credit or debit card information and billing address, which are collected and processed by our third-party payment processors (currently Stripe for web purchases and RevenueCat for mobile purchases). We do not store full payment card numbers.
  • Communication Information. Information contained in messages you send to us, such as support requests or feedback.

YOU SHOULD NOT PROVIDE US WITH ANY CONFIDENTIAL, SENSITIVE, OR BIOMETRIC INFORMATION THROUGH THE SERVICE BEYOND WHAT IS REQUIRED TO CREATE A PERSONALIZED STORYBOOK.

B. Information Collected Automatically

We automatically collect certain information when you access or use the Services, including:

  • Device Data. Device type, operating system, browser type and version, IP address, unique device identifiers, and mobile device ID.
  • Log and Usage Data. Pages visited, features used, time and date of visits, time spent on pages, story credits purchased and used, storybooks created, and other diagnostic data.
  • Information Collected Through Tracking Technologies. We may use cookies and similar technologies to collect some of the data discussed in this Privacy Policy. See the Cookies and Similar Technologies section below.

C. Information from Third-Party Sources

We may receive information about you from third-party services you use to log into or otherwise connect to our Services, such as Google. The data we receive depends on that service's policies and your privacy settings with that service.

We may aggregate or de-identify information so that it can no longer identify you, as defined under applicable laws. We may use and disclose aggregated or de-identified information for any purpose unless applicable law says otherwise.


2. How We Use Your Information

We use the information we collect for the following purposes:

  • Operate and Provide the Services. To create personalized storybooks, manage your account, process transactions, and deliver the core functionality of the Services.
  • Process Payments. To process purchases of story credits and any future products through our payment processors.
  • Generate Personalized Content. To use the character name, gender, and photograph you provide to generate a personalized character and AI-generated storybook content (illustrations and text).
  • Monitor and Improve the Services. To analyze the effectiveness of the Services, identify issues, and improve features and performance.
  • Communicate with You. To send transactional communications such as purchase confirmations, account notifications, technical notices, security alerts, and support responses.
  • Facilitate a Corporate Transaction. To use information during negotiations or in connection with a merger, acquisition, sale of assets, or similar transaction.
  • Foster Safety and Security. To detect and prevent fraud, abuse, and other harmful activities, and to protect the security of the Services and our users.
  • Comply with Legal Obligations. To comply with applicable laws, legal processes, and lawful requests from authorities.

Important — No AI Training on Your Data. We do not use child photographs, character information, or any user-submitted content to train or improve artificial intelligence or machine learning models. User-submitted content is used solely to generate the specific storybook you request.


3. Third-Party Services

The Services may contain links to or integrate with third-party sites, technology, or services ("Third-Party Services") that are not owned or controlled by us. If you use a Third-Party Service in connection with the Services, you are subject to that third party's terms and conditions. We do not endorse or assume any responsibility for any Third-Party Services.

We currently use the following Third-Party Services:

ProviderPurposeData Shared
SupabaseAuthentication & databaseEmail, account data
Google (OAuth)AuthenticationEmail, name (per your Google settings)
StripePayments (web)Billing info, transactions
RevenueCatPayments (mobile)Purchase data, device ID
Google AnalyticsAnalyticsUsage events, device data, IP (anonymized)
SentryError tracking & monitoringIP, device data, error logs, stack traces
Third-Party AI Model ProvidersAI content generationCharacter name, gender, photo (for storybook generation only)

We may add or remove Third-Party Services from time to time.


4. Sharing Information

We may share information collected from or about you in the following circumstances:

  • Service Providers. We share your information with Third-Party Service providers who perform functions on our behalf, such as payment processing, analytics, error monitoring, and AI content generation. These providers are contractually obligated to use your information only as necessary to provide services to us.
  • AI Content Generation. When you create a storybook, the character name, gender, and photograph you provide are transmitted to our third-party AI model provider solely to generate your personalized storybook content. We do not permit these providers to retain or use this data for any purpose other than generating your requested content.
  • Comply with Laws and Protect Our Rights. We may share information as we believe necessary to comply with applicable law, respond to legal process, protect our rights and safety, or protect the rights and safety of our users or others.
  • Business Transfers. We may transfer your information in connection with a merger, acquisition, sale of assets, financing, or bankruptcy.
  • With Your Consent. We may share your information with third parties when you direct us to do so or provide consent.

We do not sell your personal information to third parties.


5. Cookies and Similar Technologies

Like most online services, we use cookies and similar technologies to collect some of the data discussed in this Privacy Policy. These help us provide certain features and analyze usage. Our uses fall into the following categories:

  • Essential Cookies. Necessary to provide the Services, including session management and authentication.
  • Performance Cookies. Used to understand how visitors use the Services, assess performance, and identify issues.
  • Functionality Cookies. Allow us to remember choices you make (such as language preferences) and provide enhanced features.

You can instruct your browser to refuse all cookies or indicate when a cookie is being sent. However, if you do not accept cookies, some features of the Services may not function properly.


6. Analytics

We use analytics services, including Google Analytics, to understand how users interact with the Services. These services may use cookies and similar technologies to collect information about your use of the Services and report on usage trends. You can learn more about Google's practices at https://policies.google.com/privacy and opt out of Google Analytics by installing the Google Analytics Opt-Out Browser Add-on.


7. Your Choices

A. Opt-Out of Marketing Communications

If we send you marketing communications, you may opt out by following the unsubscribe instructions in those communications. We may still send you non-promotional messages such as transactional emails and account notifications.

B. Cookie Controls

You can adjust your browser settings to remove or reject browser cookies. You may also use privacy-focused browser extensions to limit tracking. Blocking cookies may affect the functionality of the Services.

C. Advertising Industry Opt-Out Tools

You can limit interest-based advertising through the following:

D. Account Deletion

You may request deletion of your account and associated data by contacting us at support@twinklebot.com. Upon account deletion, we will delete your personal information, including any child photographs stored in our systems, within 30 days. Certain information may be retained longer if required for legal or compliance purposes.

E. Other Rights

Depending on your jurisdiction, you may have additional rights regarding your personal information. If you wish to exercise any such rights, please contact us at support@twinklebot.com. We may ask you to verify your identity before responding to your request.


8. International Transfers

Your information may be transferred to, processed, and stored in countries other than the country in which you reside, including the United States. If we transfer your data out of the European Economic Area ("EEA"), we implement appropriate safeguards, which may include:

  • Transferring to countries recognized by the European Commission as providing an adequate level of data protection.
  • Confirming that the service provider has an active self-certification under the EU-U.S. Data Privacy Framework.
  • Executing EU Standard Contractual Clauses together with applicable addenda.

9. What Is Our Legal Basis?

In jurisdictions such as the European Union and the EEA, we only collect, use, or share information about you when we have a valid legal basis, specifically one of the following:

  • Consent. The consent you provide at the point of collection.
  • Performance of a Contract. The performance of our contract with you (e.g., providing the Services you requested).
  • Legal Obligation. Compliance with a legal obligation to which we are subject.
  • Legitimate Interests. Our legitimate interests or those of a third party, provided they are not overridden by your rights. Our legitimate interests include ensuring the security of our Services, administering our business, and preventing fraud.

10. Your EEA Privacy Rights

If you reside in the EEA, you have the following rights under the General Data Protection Regulation ("GDPR"):

  • Access. Request a copy of the personal data we hold about you.
  • Correction. Request correction of inaccurate or incomplete personal data.
  • Erasure. Request deletion of your personal data where there is no legitimate reason for us to continue processing it.
  • Objection. Object to processing of your personal data based on legitimate interests or for direct marketing purposes.
  • Restriction. Request that we suspend processing of your personal data in certain circumstances.
  • Portability. Request transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
  • Withdraw Consent. Withdraw consent at any time where we rely on consent to process your data, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at support@twinklebot.com. We will respond to legitimate requests within one month, or up to three months for complex requests.


11. Your State Privacy Rights

State consumer privacy laws in the United States may provide residents with additional rights regarding our use of their personal information.

California. California's "Shine the Light" law (Civil Code § 1798.83) permits California residents to request information regarding our disclosure of personal information to third parties for their direct marketing purposes. California residents may also have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

Other States. Residents of Colorado, Connecticut, Virginia, Utah, and other states with applicable privacy laws may have rights to confirm processing, access and delete personal information, data portability, and opt out of targeted advertising and sales. Colorado, Connecticut, and Virginia residents may also have rights to correct inaccuracies and opt out of profiling.

To exercise any of these rights, please contact us at support@twinklebot.com. To appeal a decision regarding a consumer rights request, please contact us at support@twinklebot.com.


12. How We Protect Your Information

We use reasonable procedural, physical, and electronic safeguards to protect your information from unauthorized access or use. These include encryption of data in transit (HTTPS/TLS) and at rest, access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials secure and not sharing them with anyone.


13. Information Storage

We retain your information for as long as necessary to provide the Services, fulfill our legal obligations, enforce our agreements, and resolve disputes. Specific retention practices include:

  • Account Data. Retained for as long as your account is active, and deleted within 30 days of account deletion (unless retention is required for legal purposes).
  • Child Photographs. Retained only as long as necessary to generate your requested storybook content and maintain your storybook library. Deleted within 30 days of account deletion.
  • Usage Data. Generally retained for a shorter period, except where used for security or as required by law.
  • Aggregated Data. When we anonymize your information so it can no longer identify you, we may use it indefinitely for analytics and service improvement.

14. Children's Privacy

TwinkleBot is a service designed to create personalized storybooks for children; however, the Services are intended to be used by parents and legal guardians, not by children directly. You must be at least 18 years old to create an account and use the Services.

We do not knowingly collect personal information directly from children under 13 (or the applicable age of digital consent in your jurisdiction). The child character information (name, gender, and photograph) is provided by the parent or legal guardian, who represents and warrants that they have the legal authority to provide this information.

If you believe a child under 13 has provided us with personal information without parental consent, please contact us at support@twinklebot.com and we will promptly take steps to delete such information.


15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by revising the "Last updated" date at the top of this page. For material changes, we may also provide notice through the Services or by email. Your continued use of the Services after changes become effective constitutes your acceptance of the updated Privacy Policy. If you do not agree, you must stop using the Services.


16. Third-Party Links and Features

The Services may contain links to third-party websites or services. We are not responsible for the practices of such third parties. We encourage you to read the privacy policies of any third-party sites you visit.


17. Contact Us

If you have any questions about this Privacy Policy, please contact us: