Privacy Policy
TaleCast ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our mobile application and services.
1. Information We Collect
Account Information
When you create a TaleCast account, we collect:
- Email address
- Username and display name
- Profile photo (optional)
- Date of birth (to verify age eligibility)
- Creator biography and links (for creator accounts)
Purchase & Transaction Data
When you purchase Gems or subscribe, we collect:
- Transaction amount and timestamp
- Gem balance and transaction history
- Payment method type (e.g., card brand, last four digits — full card details are handled by Stripe and never stored on our servers)
Reading & Listening Activity
- Content you have unlocked or purchased
- Reading and listening progress (chapter, position)
- Titles, series, and creators you follow
- Ratings and reviews you submit
- Community posts and comments
Device & Technical Information
- Device type, operating system, and version
- App version
- IP address and approximate geographic region
- Crash reports and performance diagnostics
- Push notification token (if you grant permission)
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account;
- Process purchases and deliver content you unlock;
- Track and display reading/listening progress;
- Send transactional emails (receipts, password resets);
- Send optional marketing and digest emails (with your consent — you may opt out at any time);
- Provide creator payout processing;
- Improve Platform features, performance, and recommendations;
- Detect and prevent fraud, abuse, and policy violations;
- Comply with legal obligations.
3. Third-Party Services
Supabase
We use Supabase for our database, authentication, and backend infrastructure. Your account data and content are stored on Supabase-managed servers. Supabase is SOC 2 Type II certified. For more information, see supabase.com/privacy.
Stripe
All payment processing is handled by Stripe, Inc. When you make a purchase, your payment information is submitted directly to Stripe. TaleCast does not receive or store your full payment card details. Stripe's privacy policy governs their handling of your payment data: stripe.com/privacy.
ElevenLabs
Creators on TaleCast may use AI voice generation powered by ElevenLabs. When a creator generates audio using this feature, the text content of the script may be transmitted to ElevenLabs' servers to produce the audio. TaleCast does not share listener or reader data with ElevenLabs. For more information: elevenlabs.io/privacy.
Expo / React Native
Our app is built with Expo. Expo may collect anonymous usage and crash analytics to improve developer tooling. This data is not linked to your personal identity.
4. Cookies & Local Storage
TaleCast is a mobile application and does not use browser cookies. However, we use the following on-device storage mechanisms:
- On-device local storage for authentication tokens (session persistence);
- AsyncStorage for user preferences such as theme and notification settings;
- Cached content data to enable offline reading progress.
You can clear locally stored data by uninstalling the app or clearing app data in your device settings.
5. Data Sharing & Disclosure
We do not sell your personal data to third parties. We may share your information only in the following circumstances:
- With service providers who assist in operating TaleCast (Supabase, Stripe, ElevenLabs) under contractual data protection agreements;
- With law enforcement or government authorities when required by law or to protect the safety of our users;
- In connection with a merger, acquisition, or sale of assets, in which case we will notify users before data is transferred;
- With your consent for any other purpose.
Creator usernames and published content are publicly visible on TaleCast. Community posts and comments you make are visible to other users.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain records for legal compliance (e.g., financial transaction records retained for 7 years under applicable law). Reports you file for content moderation purposes are retained indefinitely with your identity permanently removed, to support platform safety even after account deletion.
7. Your Rights (GDPR & CCPA)
Depending on your location, you may have the following rights with respect to your personal data:
- Right to Access — request a copy of the personal data we hold about you;
- Right to Correction — request that we correct inaccurate or incomplete data;
- Right to Deletion — request that we delete your personal data (subject to legal retention requirements);
- Right to Portability — request your data in a machine-readable format;
- Right to Object — object to processing of your data for direct marketing purposes;
- Right to Restrict — request that we limit how we use your data while a dispute is resolved;
- Right to Opt Out of Sale — we do not sell personal data; this right is automatically satisfied.
California residents under the CCPA have additional rights including the right to know what categories of personal information we collect and the right to non-discrimination for exercising these rights.
To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days.
8. Children's Privacy
TaleCast is not directed at individuals under the age of 18 and we do not knowingly collect personal information from minors. If we become aware that a user is under 18, we will terminate their account and delete associated data. If you believe we have inadvertently collected data from a minor, contact us immediately at [email protected].
9. Security
We implement industry-standard security measures to protect your personal data, including:
- Encrypted connections (TLS) for all data transmission;
- Supabase Row Level Security (RLS) to prevent unauthorized data access;
- Session tokens stored on-device and never transmitted except over TLS;
- Regular security audits and monitoring.
No system is completely secure. If you discover a security vulnerability, please disclose it responsibly to [email protected].
10. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of TaleCast after changes constitutes acceptance of the updated policy.
11. Contact Us
For all privacy questions, data requests, or general support: