Privacy Policy

Yarnable (“Yarnable”, “we”, “us”) makes personalised, illustrated audiobooks for children. This policy explains what personal data we collect, why, who we share it with, and the rights you have under the EU General Data Protection Regulation (GDPR) and the UK GDPR. It applies to the Yarnable website at yarnable.app and the Yarnable mobile app.

Yarnable is aimed at parents and guardians. It is not directed at children, and children do not create their own accounts. The adult account holder is the person who provides any information about a child.

1. Who is responsible for your data

Yarnable is the controller of the personal data described in this policy. For any privacy question or to exercise your rights, contact us at privacy@yarnable.app.

2. Data we collect

Account data

You sign in with Google or Apple. We receive your email address and a unique account identifier from that provider. We do not receive or store your Google or Apple password. If you use Apple’s “Hide My Email” feature, we only ever see the relay address it generates.

Child profile data

To personalise stories, you may create one or more child profiles. A profile can include a child’s name or nickname and an age band (for example toddler, young reader, reader, or teen). You choose what to enter — a nickname works just as well as a real name. This information is provided by you as the adult account holder, is used only to tailor and label the stories you generate, and is never used for advertising or profiling.

Content you create

When you generate a story we process the prompts and preferences you enter and store the resulting story text, illustrations, and audio narration in your library. This content is private to your account.

Subscription and payment data

Paid plans are handled through the Apple App Store, Google Play, or our billing provider RevenueCat. We receive your subscription status and tier. We never see or store your full card number — that is handled by the app store or payment processor.

Usage, device, and diagnostic data

We collect product-analytics events (for example which screens you visit and which features you use), plus technical data such as your IP address, device and browser type, and error diagnostics. IP addresses are also used for abuse prevention and rate limiting.

Yoto connection data

If you connect your Yoto account to push stories to a Yoto player, we store the access and refresh tokens that Yoto issues so we can upload content on your behalf. We only send Yoto the specific stories you choose to publish. You can disconnect Yoto at any time, which revokes these tokens.

3. How we use your data

• To create your account and sign you in.
• To generate, store, and play back the personalised stories, images, and audio you request.
• To manage your subscription and enforce plan limits.
• To operate, secure, and improve the service, including preventing abuse and diagnosing errors.
• To publish stories to your Yoto player when you ask us to.
• To respond to your support and privacy requests.

4. Legal bases (GDPR)

• Contract: creating your account, generating and storing your stories, and managing your subscription.
• Legitimate interests: securing the service, preventing abuse, and understanding how features are used through privacy-respecting analytics. We balance these against your rights.
• Consent: where required, such as connecting an optional third-party service like Yoto. You can withdraw consent at any time.
• Legal obligation: keeping records we are required to keep, such as for tax on paid subscriptions.

5. AI processing

Yarnable creates stories using third-party AI providers. The prompts and preferences you submit are sent to Google (for story text and illustrations) and to ElevenLabs (for audio narration and alignment) so they can generate your content. We send these providers only what is needed to produce your story. We do not sell your data, and we do not use your stories or your child’s information to build advertising profiles.

6. Who we share data with

We share personal data only with service providers who process it on our behalf, under contract, to run Yarnable:

We may also disclose data if required by law, or to protect the rights, safety, or security of Yarnable and its users.

7. International transfers

Some of our providers process data outside the European Economic Area, including in the United States. Where that happens, transfers are protected by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an equivalent adequacy mechanism.

8. How long we keep data

We keep your account data, child profiles, and generated content for as long as your account is active. When you delete a story it is removed from your library. When you delete your account we delete your personal data and generated content, except where we must retain limited records to meet legal obligations (such as billing records). Diagnostic and analytics data is kept for a limited period and then deleted or aggregated.

9. Your rights

Under the GDPR and UK GDPR you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your data (“right to be forgotten”).
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing relies on it.

To exercise any of these rights, email privacy@yarnable.app. You also have the right to complain to your local data protection supervisory authority.

10. Children’s privacy

Yarnable is intended for use by adults on behalf of their children. Children cannot create accounts or enter their own information. Any information about a child is provided and controlled by the adult account holder, who can view, edit, or delete a child profile at any time and can choose to use a nickname instead of a real name. We do not knowingly collect personal data directly from children. If you believe a child has provided us with data without a parent’s involvement, contact us and we will delete it.

11. Cookies and analytics

We use essential cookies to keep you signed in and to secure the service. We use PostHog for privacy-respecting product analytics to understand how Yarnable is used. We do not use third-party advertising cookies or sell your data to advertisers.

12. Security

We protect your data with encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure, but we take reasonable steps to guard against unauthorised access, loss, or misuse.

13. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the date at the top of this page and, where appropriate, notify you in the app.

14. Contact

Questions about this policy or your data? Email us at privacy@yarnable.app.