Privacy Policy

This Policy explains what Weeloom Tales collects, how we use it, and what choices you have. It covers the Services and is part of our Terms of Service. Any term not defined here shall have the meaning set forth in the Terms of Service.

1. What We Collect

You give us:

• Information about you — name, email, password, and Google OAuth provider ID
• Your Content — a fictitious character name along with its traits, weekly story directions, an age band for the stories, and preferences
• Payment details — handled by our payment processor. We only see the last four digits, card brand, expiration, billing ZIP, and transaction history
• Phone number or messaging handle — optional, only if you want messages from us

Messages (including any emails) you may send us, including through Messaging Services

We collect automatically:

• Device and connection data — IP address, device type, operating system, browser, language, and device identifiers
• Usage data — what you view (including the stories we generate for you), features and functionality you used or accessed, dates and times (including your time zone), and opt-out preferences
• Cookies and similar technologies, including ad identifiers.

We receive from others:

• Approximate location based on your IP address, as determined by our analytics provider.
• Payment, subscription status, and record customer ID from our payment processor and from app stores
• Message delivery and read status, from the messaging platforms we use.
• Usage and campaign data, from analytics and advertising partners.

2. How We Use It

To provide the Services and generate your stories, process payments and manage subscriptions, provide customer support, review content for safety and compliance with our Terms, diagnose problems and improve how the Services work, send account, billing, and security messages, send marketing if you've opted in, personalize your experience, detect fraud, abuse, and security problems, enforce our Terms, comply with law, and defend legal claims.

We also create de-identified and aggregated data, which we may use for any purpose. We won't try to re-identify it.

3. How We Share It

We don't sell your personal information for money.

Service providers working under contract, who may only use information to serve us: cloud hosting, AI story and image generation, payments, messaging delivery through Messaging Services, email delivery, analytics, support tools, security and fraud prevention.

Messaging platforms. If you ask us to message you through a Messaging Service (a feature currently unavailable), we share your phone number or username handle and the content of our messages with that platform so it can deliver them. Those platforms are independent companies with their own privacy policies, which govern what they do with your information. See Section 6.

Advertising partners. We share device identifiers, cookie IDs, and usage data with advertising partners to show you ads elsewhere and measure them. California and several other state laws call this "selling" or "sharing," even though we receive no money. Opt out at Section 9.

Business transfers. In a merger, acquisition, financing, or sale of assets. We'll tell you if your information becomes subject to a materially different policy.

Legal and safety. When reasonably necessary to comply with law or legal process, enforce our Terms, prevent fraud or security issues, or protect anyone's rights or safety.

With your permission, including if you ask us to feature a story you created.

4. AI and Your Content

How stories are made. We use third-party AI providers to generate story text and illustrations. When you create a character and submit your weekly submissions, we send the details you've entered to those providers so they can generate stories and illustrations, and they send the results back to us.

We don't train AI models on Your Content. We don't use what you submit to train or develop any AI model.

Our providers don't either. Under our agreements with them, our AI providers may not use Your Content to train their models.

Human review. Our team may review content and generated stories to investigate safety reports, fix problems, and check quality. Access is limited to staff who need it.

What we screen out. Our Terms prohibit submitting a real individuals details, including that of a minor. We take steps to identify and remove that content. If you think someone submitted information about a real individual (including a minor), please email us at privacy@weeloomtales.com.

Marketing. We may use de-identified or aggregated content to promote the Services. We won't feature a specific character or story you created in a way that identifies you without asking first.

5. Cookies and Ads

We and our partners use cookies, pixels, SDKs, and local storage for sign-in and security (can't be turned off), remembering preferences, analytics, and advertising through providers like Meta and Google Ads.

Control them through our cookie banner and/or your browser settings. Blocking some will break parts of the Services.

We honor Global Privacy Control (GPC) as an opt-out of sale and sharing for the browser sending it. Browser "Do Not Track" signals have no agreed standard, so we don't respond to those.

6. Messaging

It's optional. You never have to give us a phone number or messaging handle. Doing so is never required to buy anything or use the Services.

Consent happens at the form. When we ask for your number or user handle, we ask for your consent there — and tell you which service we'll use. Not through this Policy.

Two kinds, separate consent. Service messages (account, billing, security) and marketing messages are consented to separately.

We use third-party platforms. We deliver messages through Messaging Services, such as Whatsapp and Telegram. To receive them you need your own account with that service. We share your number or user handle and the content of our messages with them so they can deliver. That company is a separate controller of your information, with its own privacy policy and its own practices, which we don't control. Read theirs before opting in.

Where your information goes. Messaging platforms operate globally and may store and process your information outside your country, including in the United States, Ireland, and elsewhere.

Cost. Messages use your internet data; data charges may apply. Frequency varies.

To stop, reply STOP, block us in the messaging app, email support@weeloomtales.com, or change your account settings. We honor opt-outs made by any reasonable method. Tell us promptly if you change or give up a number or handle you gave us.

We don't sell phone numbers or handles, and we don't share them for anyone else's marketing. Terms Section 6 has the full program rules.

7. How Long We Keep It

We keep your information while your account is active. When your subscription ends, we delete Your Content, and any other Weeloom Content, generated in connection with your Service Account. Deletion is permanent. Copies may remain briefly in routine backups. We keep records the law requires us to hold, along with de-identified data and anything else needed for business or legal reasons.

Our AI providers and the Messaging Services providers keep information on their own schedules, under their own policies.

8. Security

No system is completely secure. We have implemented reasonable administrative, technical, and physical safeguards commensurating with the scope of services we offer and our company. Keep your password confidential and tell us at support@weeloomtales.com if your account may have been accessed.

We use service providers in the United States and abroad. If you use the Services from elsewhere, your information is transferred to the U.S., where privacy laws may differ.

9. Your Choices and Rights

You can: view and update most details in account settings, request access, correction, deletion, or a copy of your information, opt out of targeted advertising, sale, or sharing via the Your Privacy Choices page, unsubscribe from marketing emails through the footer of each email, stop messages (Section 6), and control cookies (Section 5).

To make a request, email privacy@weeloomtales.com. We'll verify your identity, usually by confirming control of your account email, and respond within the time the law requires. We won't discriminate against you for exercising your rights.

Appeals. If we deny a request, email privacy@weeloomtales.com with "Privacy Appeal" in the subject. We'll respond within 45 days with our decision and reasoning.

10. U.S. State Privacy Rights

Residents of California and other states with comprehensive privacy laws — including Colorado, Connecticut, Delaware, Florida, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, and Virginia — have rights under their state's law. Rights vary by state. Exercise them through Section 9.

Depending on your state, you may have the right to: know what we collect and why, access, correct, delete, or port your information, opt out of sale, sharing, targeted advertising, and profiling, limit use of sensitive information, and not be discriminated against for exercising these rights.

Below are categories we've collected in the last 12 months based on features and functionalities you have used:

Category Examples Why Identifiers Name, email, IP, device ID, phone number or messaging handle (if provided) Provide Services, security, analytics, messaging, marketing, support Customer records Name, billing information, subscription and purchase history Payment, support, billing, analytics Analytics Usage, pages viewed, features used Improve Services, ads Sensitive information Account log-in and password Run and secure your account

We collect these from you, automatically, and from the third parties, and disclose them to our service providers.

Sensitive information. We collect account credentials only to run and secure your account. We don't use or disclose sensitive personal information for purposes that require an opt-out.

California Shine the Light and Nevada: we don't share personal information for third parties' direct marketing, and we don't sell covered information as Nevada defines it. Questions to privacy@weeloomtales.com.

11. Children

Our Services are directed to adults to create stories. You must be 18 years of age to create an account. We don't direct or market the Services to children or knowingly let them register. While we understand that the stories would be read to children, account creation and use of the Services must be by an adult.

The characters are fictional — an imaginary friend for a story. Our Terms prohibit submitting a real child's name, photograph, likeness, address, school, or other identifying details (Terms Section 3.2).

We don't knowingly collect personal information from children under 13, or from anyone under 18 as an account holder. If you believe a child's information was submitted, email privacy@weeloomtales.com. We'll delete it promptly and may terminate the account that submitted it.

12. Changes and Contact

We may update this Policy at any time at our discretion. For material changes we'll give at least 30 days' notice by email or messaging through the Service and update the date below. Material changes apply going forward. If we ever want to use information we already collected for a materially different purpose, we'll ask your consent first.

Last Update: August 1, 2026