COPPA Compliance Notice

1. Our Commitment

Taleberry (Echodial LLC) is committed to protecting the privacy of children under 13. We fully comply with the Children's Online Privacy Protection Act (COPPA) and provide parents and teachers with control over children's data.

Only adults (parents or teachers, age 18+) may create accounts. Children never directly register or provide credentials.

3. Child Alias & Minimal Data Policy

We encourage pseudonyms or nicknames for child profiles. Parents/teachers may enter any display name for a child; legal names are never required.

• Collected: Alias/nickname, age, optional interests, reading level progression, story interaction history.
• Not Collected: Last name, home address, phone number, precise geolocation, photos of the child, government identifiers.
• Usage: Personalization of stories, educational adaptation, gamification rewards (points, badges, streaks).
• Public Exposure: Only the alias may appear on public story listings if the parent marks a story as public.

Parents maintain full control and can change or anonymize the alias at any time.

4. Data Collected From or About Children

• Alias / Nickname
• Age (or age band)
• Story preferences (themes, genres)
• Story content generated for the child
• Reading progress (pages viewed, completion state)
• Lesson attempt performance (correct/incorrect responses)
• Gamification stats (points, badges, streaks)

All data is viewable by the parent/teacher through the child's dashboard.

5. How We Use Children's Data

• Generate age-appropriate and interest-aligned stories.
• Adapt educational lesson difficulty (adaptive learning).
• Reward reading engagement (points, badges, streak milestones).
• Support classroom analytics for teachers (aggregated performance metrics).
• Improve story quality using anonymized interaction patterns.

We do not sell children's data or share it with advertisers.

7. School / Classroom Usage (FERPA-Friendly)

Teacher accounts may be used in classroom settings. We design data handling to align with FERPA principles:

• Minimal Identifiers: Student profiles should use first name or alias only.
• Authorized Use: Teachers represent they have obtained necessary parental or school consent.
• Aggregate Analytics: Classroom performance views aggregate individual learning signals; no public sharing.
• No Commercial Use: Student data is never used for targeted advertising or sold.
• Revocability: Removing a student profile deletes associated educational records from our system.

Schools or districts seeking a data processing addendum may contact admin@taleberry.app.

8. Third-Party Services & Safeguards

We use trusted vendors for limited functions:

• OpenAI: Story generation (child names sent only as provided; recommend aliases).
• Authorize.Net: Parent/teacher payment processing (no child billing data).
• Blurb: Optional print orders (only story/book content + shipping details of adult).
• Analytics: Aggregated usage metrics (no direct child identifiers exposed).

We contractually prohibit use of data for advertising or unrelated profiling.

9. Security Measures

• HTTPS encryption for all sessions.
• OTP-based adult authentication (no password storage risk).
• Strict access controls—no public child profile endpoints.
• Story and lesson data scoped to the account owner only.
• Immediate hard deletion on profile removal.