Privacy Policy

1. Introduction

This Privacy Policy explains how ParentTales ("we", "us", or "our") collects, uses, and protects your personal data when you use our service available at parenttal.es (the "Service").

We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our Service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

The data controller responsible for your personal data is:

Name: Sole Proprietor Karim Shakirov

Tax ID: 166108420764

Location: Kazan, Republic of Tatarstan, Russian Federation

Contact email: support@parenttal.es

3. Data We Collect

We collect and process the following categories of personal data:

3.1. Account Data

• Email address
• Name

3.2. Voice Data

• Voice recordings for creating your voice profile
• Voice models generated from your recordings

3.3. Children's Data

• Children's names
• Children's ages
• Preferences for story personalization (themes, genres)

3.4. Technical Data

• IP address
• Browser type and device information
• Usage data and analytics

4. How We Use Your Data

We process your personal data for the following purposes:

Purpose	Legal Basis
Providing access to the Service	Contract performance
Creating and training voice models	Consent
Generating personalized stories	Contract performance
Processing payments	Contract performance
Customer support	Legitimate interest
Service improvement and analytics	Legitimate interest
Sending service notifications	Contract performance
Legal compliance	Legal obligation

5. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent — for processing voice recordings and children's data. You can withdraw consent at any time.
• Contract performance — necessary to provide the Service you have requested.
• Legitimate interests — for improving our Service, security, and fraud prevention.
• Legal obligation — to comply with applicable laws and regulations.

6. Data Storage and International Transfers

Your personal data may be stored and processed in the following locations:

• European Union — for users outside Russia
• Russian Federation — for Russian users (as required by Russian data localization laws)

When we transfer data outside the EU/EEA, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by the European Commission
• Transfers to countries with adequate data protection levels
• Explicit consent for specific transfers

7. Third-Party Services

We share your data with the following third-party service providers:

Service	Purpose	Location	Data Shared
Kinde	Authentication	Australia/EU	Email, name
Fish Audio	Text-to-speech, voice cloning	USA	Voice recordings
Google (Gemini)	AI story generation	USA	Story prompts, preferences
Google Analytics	Usage analytics	USA	Usage data, IP address
Robokassa	Payment processing	Russia	Payment information

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of access — obtain a copy of your personal data
• Right to rectification — correct inaccurate personal data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to data portability — receive your data in a machine-readable format
• Right to object — object to processing based on legitimate interests
• Right to restrict processing — limit how we use your data
• Right to withdraw consent — withdraw consent at any time for consent-based processing

To exercise your rights, contact us at support@parenttal.es. We will respond within 30 days.

You also have the right to lodge a complaint with a supervisory authority in your country of residence.

9. Children's Data

Our Service is designed for parents and legal guardians to create stories for their children. We do not collect personal data directly from children under 16 years of age.

Information about children (names, ages, preferences) is provided by parents or legal guardians and is used solely for personalizing stories.

Parents or legal guardians are responsible for providing information about their children and may request its deletion at any time.

If you believe we have collected data from a child without parental consent, please contact us immediately.

10. Cookies

We use the following types of cookies:

• Essential cookies — required for the Service to function (authentication, session management)
• Analytics cookies — help us understand how you use the Service (Google Analytics)

You can control cookies through your browser settings. Disabling essential cookies may affect Service functionality.

For analytics cookies, we use anonymized IP addresses where possible.

11. Data Retention

We retain your personal data for the following periods:

• Account data — duration of account activity plus 3 years after deletion
• Voice data — duration of account activity, deleted upon request
• Children's data — duration of account activity
• Payment records — 7 years (legal requirement)
• Usage logs — 90 days

12. Security Measures

We implement appropriate technical and organizational measures to protect your data:

• Encryption in transit (TLS/SSL)
• Encryption at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures

Despite our efforts, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new policy on our website
• Sending an email notification
• Displaying a notice in the Service

Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

14. Contact Us

For any questions about this Privacy Policy or our data practices, please contact us:

Email: support@parenttal.es

Effective Date: January 19, 2026