Privacy Policy

Last updated: March 4, 2026

Yaralys ("we", "our", "us") operates the mobile applications Yaralys Tales and Yaralys Moments. This policy explains what information we collect, how we use it, and how we protect it.

1. Information we collect

Account information: when you sign in with Google or Apple, we receive your email address, display name, and a unique identifier provided by the authentication service. We do not receive or store your password.

Child profiles: parents may create profiles that include first name, year of birth, avatar, favorite themes, and educational preferences. This data is used to personalize the experience.

Generated content: stories, vocabulary words, and related metadata are stored to build your library.

Purchase history: credit purchases and payment receipts are stored for billing and support purposes.

Usage data: we collect minimal analytics events, for example story counts and reading progress, to improve the service. We do not use advertising identifiers or third-party ad analytics SDKs.

2. Children's privacy

Yaralys is designed for parents of children aged 3 to 12. Parental consent is required for any child profile and for any child-related feature. We take children's privacy seriously.

• A parent account is required to use the applications. Children do not create standalone accounts.
• Parental consent is required across the Yaralys ecosystem for all children under 13.
• We do not knowingly collect personal data directly from children.
• Child profile data, such as first name, age, and preferences, is entered and controlled exclusively by the parent.
• Parents can review, edit, or delete child profiles and related data at any time.
• We do not serve behavioral advertising, including for children.

If you believe we have collected information about a child without parental consent, contact us immediately so we can investigate and remove it.

3. How we use your information

• Authenticate your identity and provide access to the service
• Generate personalized content based on child profile preferences
• Track credit balances and purchase history
• Improve the quality and safety of generated content
• Provide customer support

4. Third-party services

We rely on the following services to operate the applications:

• Firebase (Google Cloud): authentication, database (Firestore), and file storage (Cloud Storage). Firebase privacy
• OpenAI: text generation. We send only privacy-compatible prompt fields, including age band and story parameters. We do not send the child's first name, exact age, parent email, parent name, Firebase user identifier, or profile identifiers in prompts. OpenAI privacy
• Together AI: illustration generation. We send privacy-compatible image prompts built from scene context, age band, and closed-list avatar presets. We do not send the child's first name, parent email, Firebase user identifier, or profile identifiers in prompts.
• Apple / Google: sign-in providers and in-app purchase processors.

We do not sell your personal data to third parties.

5. Data storage and security

Your data is stored on Google Cloud Firestore and Google Cloud Storage. We use industry-standard security measures, including encryption in transit (TLS), Firebase security rules, and server-side authentication.

6. Retention

• Account data is retained while your account remains active.
• Stories and child profiles are kept until you delete them or until the account is deleted.
• When an account is deleted, profile data, stories, settings, and child-related data are removed from active systems.
• We may retain minimal pseudonymized deletion-request traces, for example request and completion timestamps plus aggregate counters, for up to 12 months to demonstrate legal compliance and defend legal claims.

7. Your rights

You have the following rights, among others:

• Access to your data from within the application
• Edit child profiles and account settings
• Delete stories, child profiles, or the full account (Settings > Delete account)
• Export stories as EPUB files

Some requests may be subject to legal exceptions where applicable law permits or requires limited retention.

8. Changes to this policy

We may update this privacy policy. If a material change is made, we will notify you in the application or by updating the date above.

9. Contact

For questions about this policy or to exercise your rights, contact us:

Email: privacy@yaralys.com