Privacy Policy
Last updated: August 13, 2026
Prefer the short version? Read our Privacy Promise.
Who is responsible for your data
Jevon Max, an individual operating the zingytales.com service under the trading name Zingy Tales, is the data controller for the personal data described in this notice and decides how and why it is processed. Paddle acts as our Merchant of Record and is the controller of the payment data you give it at checkout.
What we collect and why
Parent account: email address, hashed password, and subscription status — to create and secure your account and give you the access you paid for (performance of our contract with you). Child profiles: a display name and avatar chosen by the parent — no real names, birthdays, photos, or contact info are required (contract). Usage data such as which stories were played, listening progress, and up to 5 child profiles per account — to sync playback and improve the library (legitimate interests). Support messages and any files you attach — to answer you (contract / legitimate interests). Device, browser, and IP information in server and security logs — to prevent fraud and abuse and keep the service secure (legitimate interests, legal obligation). Analytics on public marketing pages is based on your consent where required.
What we don't collect
We do not run advertising trackers, cross-site profiling, or personalised ad networks on the kids' experience. Analytics on child-facing routes (/kids, /parents, /admin, /auth) are disabled.
Children's privacy (COPPA)
Zingy Tales is designed for families. Accounts must be created by a parent or legal guardian. We collect the minimum information needed to provide the service to a child profile and do not knowingly collect personal information directly from children under 13.
How we use your data
To operate the service (deliver stories and audio, sync progress), process subscription payments through our billing provider, prevent abuse, and answer support requests. We do not sell personal data.
Analytics and cookies
On public marketing pages we use Google Analytics and Microsoft Clarity to understand aggregate visits and improve the site. These are disabled on auth, kids, parents, and admin routes. Essential cookies are used to keep you signed in.
Who we share data with
Service providers and subprocessors that help us run the service: hosting, database and email delivery, analytics (Google, Microsoft), and support tooling. Our Merchant of Record, Paddle, for the sale of subscriptions, subscription management, payments, tax compliance, and invoicing. Professional advisers such as legal and accounting, and authorities where we are required by law. We never sell personal data and we do not share it with ad networks. Some providers process data outside your country; where that happens we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
How long we keep it
Account and profile data is kept while your account is active. After you delete your account we remove personal data within 30 days, except where we must keep records longer for legal, tax, or fraud-prevention reasons (billing records are typically retained for up to 7 years by Paddle and by us). Support messages and attachments are kept for up to 24 months, and security logs for up to 12 months, after which data is deleted or anonymised.
How we protect your data
We use appropriate technical and organisational measures: encryption in transit, encryption at rest for stored data, hashed passwords and parent PINs, row-level access controls on our database, and restricted administrative access.
Your rights
Depending on where you live, you have the right to access, correct, delete, export (port), or restrict processing of your personal data, to object to processing based on legitimate interests, and to withdraw consent at any time. You can access, export, or delete your account and all child profiles at any time from the parent dashboard, or by asking us through the contact page. We respond within one month. If you are in the UK or EEA you also have the right to complain to your local data protection supervisory authority.
Contact
Privacy questions or requests? Signed-in members can reach us through the built-in Contact section in the parent dashboard. Everyone else can use our contact page.