Privacy Policy
Last updated: October 14, 2026
DailyTeller makes personalized stories starring your kid. To do that, you tell us about your kid, and that is a big deal: this policy explains, in plain words, what we collect, why, who helps us, how long we keep it and what you can do about it.
DailyTeller is for parents and legal guardians. You create the account and your kid's profile; your kid only reads and listens to their stories.
The short version
- We only ask for what we need to make the stories, and a photo is optional: you can describe your kid in words instead.
- If you upload a photo, we delete it within 24 hours. We keep only the drawing of your kid's character.
- We never sell your data or your kid's data, and we never use your kid's data for advertising.
- Our AI providers don't train their models on your data.
- Nothing tracks your kid: the reader has no ads, no trackers and no third-party cookies.
- You're in control: you can see, download, correct and delete everything, at any time.
1. Who is responsible for your data
Naolito SL (tax ID ESB67720276), Avda. Sor Teresa Prat 15, 29003 Málaga, Spain, runs DailyTeller and is responsible for your data (the "controller" under EU law, the "operator" under the US Children's Online Privacy Protection Act). Contact: dailyteller@naolito.com · phone to be completed. No other company collects or keeps information through DailyTeller as an operator.
We are based in Spain, so the EU General Data Protection Regulation (GDPR) applies to everything we do, wherever you live.
2. What we collect and why
About you, the parent
| What | Why | EU legal basis |
|---|---|---|
| Email address | To create your account, send your sign-in links and talk to you about your account | Contract |
| Language, time zone and country | To deliver stories at the right time of your day and show the right options. We get your country from your connection | Contract |
Campaign that brought you here (utm tags) and, if you accepted marketing cookies, Meta's cookie IDs | To know which of our ads work. See our Cookie Policy | Legitimate interest (campaign tags); consent (cookies) |
| Payment details (when you subscribe) | To charge your plan. Stripe handles your card; we never see the full number | Contract; legal obligation (invoices) |
| What you write to us | To answer you | Legitimate interest; legal obligation (privacy requests) |
About your kid, which you give us
| What | Why |
|---|---|
| First name and nickname, pronoun, and birthday | So the stories talk about them the right way, with words and length for their age |
| Country, town or city, and story language | So places, seasons and holidays feel like home |
| What they love, in your words, and favorite things | To choose story themes they'll enjoy |
| People and pets they love (names only) | So they can appear in the stories |
| The goal of the stories (for example, bedtime or kindness) | To shape each story |
| How they look: your description, or a photo | To paint their character. The photo is optional and deleted within 24 hours |
| Their character (the drawing) and their stories | To show them the same character in every story, and to keep their library |
| Your special requests and your ratings of the stories | To plan the next stories |
EU legal basis: your consent as their parent or guardian, which you give when you create their profile. You can withdraw it at any time by deleting their profile (see section 9).
Please don't include health details, school names, addresses or anything private in the free texts. Our moderation step may remove them.
About the photo. It is optional. We use it only as a reference so the drawing looks like your kid, together with your description. We never show it back, we don't create a face recognition template or any other biometric identifier from it, and we don't use it to identify anyone. It is deleted within 24 hours; we keep only the drawing.
What we collect automatically
- Technical data of every visit (IP address, browser and device type), which our hosting provider Cloudflare processes to deliver and protect the site.
- Cookies and local storage: only what is strictly necessary to keep you signed in and remember your sign-up answers, plus marketing cookies on our public pages if you accept them. Never in the reader. See our Cookie Policy.
We don't make decisions about you or your kid by automated means that have legal or similarly significant effects. Personalizing the stories is the service itself.
3. Notice to parents about children's privacy (COPPA)
This section is our notice to parents under the US Children's Online Privacy Protection Act (COPPA). It applies to every kid's profile, wherever you live.
What we collect from you about your child. The information listed in section 2: first name and nickname, pronoun, birthday, country and city, language, interests, names of family and pets, the goal of the stories, a description or an optional photo, your special requests and ratings. We collect your email to sign you in and to ask for your consent.
What we collect from your child. Nothing beyond what the reader needs to work. Your kid can turn pages, listen, and rate a story at the end; the rating is saved to their library. The reader has no ads, no trackers, no third-party cookies, no chat and no way to send us text. We don't ask a child for more information than the activity needs, and we never make taking part depend on giving more.
Persistent identifiers. The only identifier the reader uses is our sign-in cookie (dt_session). We use it only to keep you signed in, show your family's stories and protect the service (what COPPA calls "support for internal operations"). It is never used for advertising, to build a profile, or to contact anyone, and no third party can read it.
How we use it. Only to create your kid's character and stories, deliver them, keep them safe and age-appropriate, and keep your account working. Never for advertising, never sold, and never used to train AI models.
Who we disclose it to. Only to service providers that help us make the stories and run the site, under written contracts that let them use it only for us: Cloudflare (hosting and storage), OpenAI (pictures), Anthropic (story text and safety checks), our narration provider (voice), and Resend (sign-in emails). They are listed in section 5. We don't disclose your kid's information to any third party for its own purposes: not for money, not for advertising, and not to train AI. If that ever changed, we would ask for your separate consent first, and you could say no and keep using DailyTeller.
Your consent. We need your consent before we collect your kid's information. You give it in the last step of creating their profile, after reading this notice, and before anything about your kid's looks or photo is sent to make the character. Right after, we email you this notice; a day or two later we email you again to confirm, and you can withdraw your consent at any time, including in reply to those emails. When you subscribe, your card payment also confirms that you are the account holder. If you don't finish creating the profile, we don't keep your kid's information.
Your rights as a parent. At any time you can:
- review your kid's information in the app, or download all of it from your account;
- correct it;
- delete your kid's profile or your whole account. This deletes the information and stops any further collection or use;
- refuse further collection: you can stop using the service and ask us to delete everything.
You can do it in the app or by writing to dailyteller@naolito.com from your account's email address. We may need to confirm that you are the parent before acting.
How long we keep it. The photo, at most 24 hours. The rest, while the profile exists; see our retention policy in section 7. We never keep children's information longer than we need it.
Contact. Naolito SL, Avda. Sor Teresa Prat 15, 29003 Málaga, Spain, dailyteller@naolito.com, phone to be completed.
4. How we use AI
DailyTeller stories, pictures and narration are made with AI, and checked before they reach your kid: everything you write is moderated, every story is checked automatically for safety and age-appropriateness, and anything flagged is reviewed by a person. Before your kid's information goes to an AI provider, we remove surnames, email addresses, phone numbers and street addresses, and the drawing of the character is made from your description (and the photo, if you uploaded one) without using their name. Our AI notice explains what each AI does.
5. Who we share it with
We don't sell personal data, and we never share your kid's data for advertising. We work with these providers, who process data only on our instructions and under data processing agreements:
| Provider | What they do for us | What they receive | Where |
|---|---|---|---|
| Cloudflare | Hosting, database, file storage, security, cookie consent | Everything we store; technical data of visits | Files stored in the EU; database in the EU; network worldwide |
| OpenAI | Painting the character and the illustrations | Your kid's description, age and pronoun, the photo if you uploaded one, the scenes of each story and the character drawing | United States |
| Anthropic | Writing the stories; checking texts and stories for safety | Your kid's first name, age, town, interests, family names, goal and requests; the stories and pictures to check | United States |
| Narration provider | Reading the stories aloud | The text of each page | United States |
| Resend | Sending sign-in emails | Your email address | United States |
| Stripe | Payments | Your name, email, country and payment details. Never your kid's information | EU and United States |
| Meta | Measuring our ads, only if you accept marketing cookies, only on our public pages, and never with your kid's information | Cookie IDs, visited public pages, and (if you sign up) your hashed email and events like "subscribed" | EU and United States |
Stripe also uses payment data for its own purposes (fraud prevention and legal compliance), and Meta uses ad data for its own purposes, as explained in their privacy policies. For the Meta cookies, we and Meta are joint controllers of the collection.
We may also disclose information if the law requires it, to protect a child or anyone else from harm, or as part of a sale or merger of our business, in which case the buyer must keep these promises.
6. International transfers
Some providers are in the United States. When your data leaves the EU, we protect it with the EU Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of these safeguards at dailyteller@naolito.com.
7. How long we keep data
This is our data retention policy. We keep each piece of information only as long as we need it for the reason we collected it, and never indefinitely.
| Data | Why we keep it | When we delete it |
|---|---|---|
| Your kid's photo | To paint the 3 concepts of their character | Within 24 hours of the upload, automatically. Our image provider may keep a copy for up to 30 days to prevent abuse, unless zero data retention applies |
| Your kid's profile, character, stories, requests and ratings | To make new stories with the same character and keep their library | When you delete the profile or your account, at once |
| Concepts of the character you didn't choose | To let you change your mind or repaint | 30 days after they were painted |
| Your account (email, language, time zone, country) | To sign you in and deliver the stories on your schedule | When you delete your account. If an account has no plan and no sign-in for 12 months, we email you and delete it 30 days later |
| Campaign tags and marketing cookie IDs | To measure our ads | 90 days |
| Sign-in links and sessions | To sign you in safely | Links: 24 hours after they expire. Sessions: after 30 days or when you sign out |
| Record of your consent | To prove you gave it | When you delete your account, except a minimal record (no name or email), kept 3 years |
| Security and activity logs | To protect the service and prove we follow the law | 24 months |
| Invoices | Spanish accounting and tax law | 6 years |
When you delete something, it disappears from the service at once and from our database backups within 30 days. AI providers delete what they received within their own short retention periods (see section 5).
8. How we protect data
We follow a written information security program: encrypted connections everywhere; sign-in without passwords; only scrambled (hashed) copies of sign-in codes; every request checked so a family can only see its own stories; photos never shown back and deleted automatically; strict access to our systems; and a yearly review of risks and providers. If something ever goes wrong, we will tell you and the authorities as the law requires.
9. Your rights
Wherever you live, you can:
- see and download all your data and your kid's (access and portability);
- correct it;
- delete your kid's profile or your account (erasure);
- withdraw your consent at any time, by deleting your kid's profile; this doesn't affect what we did before;
- object to processing based on legitimate interest, and restrict processing in some cases;
- say no to marketing cookies at any time (see our Cookie Policy).
Use the options in your account, or write to dailyteller@naolito.com from your account's email. We answer within one month. We may ask you to confirm your identity. Information you gave us about your kid can be deleted at any time, also when your kid is older and asks for it.
If you live in the EU, you can also complain to your data protection authority. Ours is the Spanish Data Protection Agency (aepd.es).
Your rights in the United States
Depending on your state, you have the right to know what we hold about you, to get a copy, to correct and delete it, and to opt out of targeted advertising, sale and profiling.
- We don't sell personal data. We don't use your kid's data for targeted advertising or profiling.
- Using Meta's cookies on our public pages can count as "sharing" or "targeted advertising" under some state laws: you can opt out by rejecting marketing cookies, and we treat a Global Privacy Control signal as an opt-out.
- You can exercise your rights yourself or through an authorized agent. If we turn down a request, you can appeal by replying to our answer; we reply to appeals within 45 days. If you're not satisfied, you can contact your state attorney general.
- We never treat you differently for exercising your rights.
10. Where we offer DailyTeller
We offer DailyTeller to families in the United States and the European Union. We don't offer it in the United Kingdom.
11. Changes to this policy
If we make important changes, we'll tell you by email before they apply, and, if the change affects your kid's information, we'll ask for your consent again.
12. Contact us
- Company: Naolito SL (tax ID ESB67720276)
- Address: Avda. Sor Teresa Prat 15, 29003 Málaga, Spain
- Email: dailyteller@naolito.com
- Phone: to be completed
For anything about your kid's privacy, write to us from your account's email address.