Welcome to Recitale — your AI-powered bedtime story
companion for families. We build magical, personalised stories for
children aged 2–10 with voice cloning so kids can hear stories in the
voices they love most.
This Privacy Policy explains how Recitale collects,
uses, shares, and protects your personal information when you use our
mobile application and related services. We are committed to
protecting your privacy and handling your data with care, especially
when it involves children and voice recordings.
📋
Section 01
Information We Collect
We collect the following categories of information to provide and
improve the Recitale service:
📧Account Info
Email address and password when you sign up via Supabase
authentication.
👤Child Profiles
A first name and age group (e.g., 2–4, 5–7, 8–10) that you create
for each child. We never ask children for information directly.
🎭Story Preferences
Themes, characters, and story settings you choose (e.g., Fantasy,
Adventure, Bible, Space).
🎙️Voice Recordings
Audio samples you voluntarily record for voice cloning purposes.
Purchase and subscription status managed via RevenueCat. We do not
store payment card details.
📱Device Info
Device type, operating system, and app version for diagnostics and
compatibility.
⚙️
Section 02
How We Use Your Data
We use the information we collect to:
›Create and authenticate your account
securely.
›Generate personalised AI bedtime stories
tailored to your child's age group, name, and chosen theme.
›Produce audio narration using
text-to-speech technology, including cloned voices when you opt in.
›Save and sync your stories, favourites,
and playlists across devices.
›Process and manage your subscription
through RevenueCat.
›Send optional push notifications (sleep
reminders, new story alerts) — only with your permission.
›Analyse usage patterns in aggregate to
improve app performance and features.
›Comply with legal obligations and
enforce our Terms of Service.
🛡️
We never use your data for advertising profiling, sell it to
data brokers, or share it for marketing purposes.
🎙️
Section 03
Voice & Audio Data
Voice cloning is an optional, opt-in feature. When you choose to clone
a voice:
01
Your audio recordings are transmitted securely over HTTPS to
ElevenLabs, our text-to-speech provider, to
create a voice model.
02
Recordings are processed to produce a voice profile and are
not permanently stored on Recitale's servers
beyond what is necessary for the cloning process.
03
The resulting voice model is stored in ElevenLabs under your
account and referenced in Recitale for story narration.
04
You can delete your cloned voice at any time from
the Voice section in the app, which sends a deletion request to
ElevenLabs.
05
You may only clone voices for which you have explicit permission —
your own voice, or voices consented to by the owner.
⚠️
You must not clone the voice of any minor. Voice
cloning is strictly for adult users who consent to their own voice
being cloned.
👶
Section 04
Children's Privacy
Recitale is designed for parents, guardians, and families. We take
children's privacy very seriously and comply with applicable
children's privacy laws including COPPA (Children's
Online Privacy Protection Act) and GDPR-K provisions.
01
We
do not collect personal information directly from
children. All account creation and data entry is performed by the parent
or guardian.
02
Child profiles contain only a
first name and age group — no email address,
phone number, photo, or location data.
03
Children do not have their own accounts and cannot independently
interact with any data-collection features.
04
AI-generated stories use the child's name and age group solely to
personalise content; this information is not shared with third
parties for profiling.
05
If you believe a child under your care has submitted personal
information without your consent, contact us immediately at
hello@recitale.app
and we will delete it promptly.
🔐
Section 05
Data Storage & Security
Your data is stored using Supabase, a secure backend
platform with industry-standard protections:
›All data is encrypted
at rest and in transit using AES-256 and TLS 1.2+.
›Authentication is handled by Supabase
Auth with secure session tokens; passwords are never stored in plain
text.
›Database access is protected by Row
Level Security (RLS) policies — users can only access their own
data.
›Our infrastructure is hosted on managed
cloud servers with regular security audits.
While we implement strong safeguards, no system is 100% immune to
breaches. In the event of a data breach affecting your personal
information, we will notify you promptly in accordance with applicable
law.
🔗
Section 06
Third-Party Services
Recitale integrates with the following third-party services. Each has
its own privacy policy and data-handling practices:
Supabase
Database, authentication & file storage
ElevenLabs
Text-to-speech & voice cloning
Anthropic Claude
AI story generation
RevenueCat
Subscription & in-app purchases
Apple / Google
App distribution & payment processing
Firebase
Web hosting & analytics
We share only the minimum data necessary with each provider. We do not
sell personal data to any third party.
⚖️
Section 07
Your Rights & Choices
Depending on your location, you may have the following rights
regarding your personal data:
📂Access
Request a copy of the personal data we hold about you.
✏️Correction
Update inaccurate or incomplete information in your account
settings.
🗑️Deletion
Request deletion of your account and all associated data,
including child profiles and cloned voices.
📦Portability
Request your data exported in a machine-readable format.
🔕Opt-out
Disable push notifications at any time in your device settings or
in-app notification preferences.
↩️Withdraw Consent
Delete your cloned voice or child profiles at any time within the
app.
To exercise any of these rights, email us at
hello@recitale.app. We will respond within 30 days.
🗓️
Section 08
Data Retention
🔑Account Data
Retained while your account is active and for up to 30 days after
deletion to allow recovery.
📚Stories & Favourites
Deleted when you delete your account or submit a deletion request.
🎤Voice Recordings
Processed for cloning and not retained on our servers beyond the
cloning session. Cloned voice models are deleted when you remove
them in the app.
📈Usage Analytics
Retained in aggregated, anonymised form for up to 2 years.
We may retain certain data longer if required by law or for legitimate
business purposes (e.g., billing records).
🔄
Section 09
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes
in our practices, technology, or legal requirements. When we make
material changes, we will:
›Update the "Last updated" date at the
top of this page.
›Send an in-app notification or email to
registered users.
›In some cases, ask for your renewed
consent where required by law.
Continued use of Recitale after any changes constitutes your
acceptance of the updated policy.
✉️
Questions or Concerns?
We're here to help. Reach out to our support team and we'll get back
to you within 30 days.