Children's Code Compliance

The best interests of the child are TaleBuzzer's primary design consideration. Every feature decision — from content moderation to data minimisation to the absence of advertising — is evaluated against its impact on the wellbeing, safety, and development of the child.

TaleBuzzer conducts DPIAs under UK GDPR Article 35 before introducing new features that involve processing children's personal data. Our DPIA process considers risks to children's privacy, safety, and wellbeing, and requires sign-off before deployment.

TaleBuzzer accounts are held by a parent or guardian aged 18 or over. Children do not register directly. The parent provides the child's age, which is used solely to select the appropriate reading level. We do not use a child's age for any commercial purpose.

Our Privacy Policy, Cookie Policy, Terms of Use, GDPR Statement, and this Children's Code statement are all publicly available and written in clear, plain English. We do not use legal language designed to obscure our data practices.

We do not use children's personal data in ways that are detrimental to their wellbeing. We do not sell children's data. We do not share children's data with advertisers, data brokers, social media platforms, or any third party for commercial profiling.

TaleBuzzer's Terms of Use set clear standards for acceptable use. Our AI content generation systems are designed to produce only age-appropriate content. Parents can report inappropriate content at hello@talebuzzer.com and we will investigate within 24 hours.

All TaleBuzzer settings default to the highest level of privacy protection. No optional data collection, sharing, or feature is enabled by default. Cookie consent defaults to declined — we do not assume consent.

We collect the minimum data necessary for TaleBuzzer to function. A child profile requires only a first name and an age band. We do not collect a child's surname, email address, school, photograph, location, or any other identifying information.

We do not share children's personal data with third parties except the sub-processors necessary to operate the service. When we send data to OpenAI's API, we send only the child's first name, age band, and selected story preferences. We do not share data with social media platforms or advertising networks.

TaleBuzzer does not collect or use precise geolocation data from children. We receive an IP address as part of standard web requests, which is used for security purposes only. IP addresses are not shared with third parties for location-based services or advertising.

Parents retain full control at all times. The parent account controls all child profiles, story generation, and subscription settings. Children access TaleBuzzer through a child view protected by a parent-set PIN. Session timeouts automatically lock the child view after 60 minutes of inactivity.

We do not use children's personal data for commercial profiling, behavioural advertising, or automated decision-making that produces legal or similarly significant effects. Reading data is used only to personalise the child's stories and provide parents with progress insights.

TaleBuzzer does not use nudge techniques, dark patterns, or deceptive design to encourage children to share more personal data, spend more money, or engage with the platform in ways that are not in their interest. There are no infinite scroll features, push notification pressure tactics, or countdown timers designed to create anxiety.

TaleBuzzer is a web and mobile application. We do not manufacture or integrate with connected toys, wearable devices, or smart home devices. If we integrate with such devices in the future, this statement will be updated.

TaleBuzzer provides parents with clear in-app tools to manage their child's data. Parents can delete individual stories, delete child profiles, or close their entire account at any time from their account settings. Deletion takes effect immediately within the app and data is purged from our servers within 30 days.