Children’s privacy

Who we are

“Letopis Kids” (kids.letopis.io) is the kids’ part of Letopis. The data controller is Denis Fedorovici, a private individual, str. Studenților 5, MD-4839 Stăuceni, mun. Chișinău, Republic of Moldova.

Questions about data — [email protected].

What we keep

About the grown-up: email or Google sign-in, the PIN (encrypted) and subscription details. Card details are seen only by the payment provider, not by us.

About the child: name or nickname, age, avatar and secret picture, what they read and which endings they found, their tales. From 11, also the hero they made for the stories (a name, “he” or “she”, a look, two traits) their first choice at each turn of our stories, and the drawings they uploaded to their stories. Voice recordings — only if you allowed them.

What we never collect

We never ask for a child’s surname, photos, school, address, phone or location. From 11, a child can upload their own drawing to the story maker — a photo of a drawing on paper, say. We strip the file’s metadata, including where it was taken, as soon as it is uploaded, and you see every picture before the family does and can delete it.

Before a tale is sent to family, we automatically look for anything like an address, phone number or surname and show it to you.

A grown-up’s consent

Only a grown-up can create a child’s profile. You confirm that you are the parent or legal guardian and allow us to keep the child’s data under this policy. A profile can’t be created without it.

Voice recording is a separate permission, and it works only with a subscription: a card payment confirms that a grown-up gave it. We never ask a child for more than the tales need, and never ask them to enter their own details.

Why, and on what basis

So your child can pick up where they left off and get stickers for endings, and you can see what they read and review their tales. The basis is our agreement with you (account and subscription) and your consent for the child’s data.

Checking a tale before it’s sent and protecting the account from break-ins are our legitimate interest: keeping children safe. We keep payment records because the law requires it.

We show no ads, sell no data, build no profiles from it and make no automated decisions that matter for you or your child.

Who can see it

A child’s tales — only you and the people you sent a link to. They never appear in the library or search.

On our team — only support, and only when you ask for help.

Other readers see choices in our stories only as shares (“54% chose this”), and only where at least 10 people chose. Nobody sees who chose what, and readers can’t message each other on the site.

Narration, AI and other services

Tales marked “narrated” are voiced with speech synthesis from our own texts. Only the texts of our tales go into synthesis — nothing about you or your child.

We never send a child’s or family’s voice into synthesis, never make new voices from them and never use them to train AI. There’s no AI helper in the kids’ part, and kids’ texts are never sent anywhere for processing.

Servers and database — Hetzner Online GmbH (Germany), site delivery and file storage — Cloudflare, Inc. (USA), emails are sent by Resend (USA), payments are handled by Paddle. Each gets only what its job needs, under a contract with us. If data is stored outside Moldova and the EU, we transfer it under the EU standard contractual clauses.

Cookie

Essential only: to keep you signed in and your child’s place in a tale. No analytics or third-party trackers.

How long we keep it

A child’s profile, progress, tales and drawings — as long as the profile exists; a drawing also goes with its story. If nobody signs in for 24 months, we send a reminder and delete it 30 days later.

Voice recordings — while the permission stands. Revoke it and that child’s recordings are deleted at once. Family links work until you turn them off, or for 30 days — your choice.

Delete a child’s profile or the account and we erase everything at once, and from backups within 30 days.

Payment records — 6 years, as Moldova’s archive rules require, with nothing about the child. Support conversations — a year after the last message.

How we protect it

Connections are encrypted, the PIN is stored as a hash, and team access to data is limited and logged. Once a year we check that the protection works.

If data ever leaks, we tell the supervisory authority within 72 hours, and you as soon as we know it affects you.

Your rights

In your dashboard, under “Data”: download everything as one archive, correct it, delete a child’s profile or the whole account, revoke permissions. Anything else — email [email protected], we reply within a month.

You can restrict or object to processing and complain to the National Center for Personal Data Protection of Moldova or to the supervisory authority in your country.

Parents in the US: under COPPA you can review your child’s data, delete it and stop us from collecting more.

If this policy changes

We’ll email you in advance. If we ever want to use a child’s data in a new way, we’ll ask for permission first.