1. Introduction

NikoSafe LLC ("NikoSafe", "we", "us", or "our") operates the NikoSafe Story platform (the "Service"). We are committed to protecting the privacy of children and families who use our Service. This Privacy Policy describes the information we collect, how we use it, and the choices you have regarding your data.

NikoSafe Story is designed for parents and guardians to create personalized storybooks for their children. We comply with the Children's Online Privacy Protection Act (COPPA) and take special precautions to protect the personal information of children under 13.

2. Information We Collect

a. Parent/Guardian Account Information

• Name and email address
• Password (stored in hashed form)
• Payment information (processed securely via Stripe; we do not store card numbers)

b. Child Profile Information

To create personalized storybooks, we collect the following information about your child, provided solely by you, the parent or guardian:

• Child's first name and age
• Gender
• Physical appearance details (skin tone, hair color, eye color) for illustration accuracy
• Favorite color and hobbies
• Pet information (name, type, breed)
• School name, teacher name, grade, and best friend's name (optional)
• Family member names and relationships (optional)
• Uploaded photos (optional, for cartoon character generation)

c. Generated Content

• AI-generated story text and illustrations
• AI-generated audio narrations
• PDF versions of storybooks

d. Usage Data

• Story creation and reading activity
• Subscription and purchase history

3. How We Use Your Information

• Story Generation: Child profile data is sent to our AI systems (OpenAI and Google) to generate personalized story text and illustrations. This data is used solely for content creation and is not retained by these AI providers beyond the generation session.
• Audio Generation: Story text is sent to ElevenLabs to produce AI-synthesized voices for narration. Voices are model-generated — no real child voice is recorded, sampled, or processed. No child personal information is included in audio generation requests.
• Printing: If you order a printed book, the story content and your shipping address are shared with our print partner (Lulu) to fulfill the order.
• Gifting: If you gift a story, the recipient's email is used solely to deliver the gift notification.
• Clinical Review: Generated stories are reviewed by our clinical team to ensure they meet NikoSafe safety standards before being released to you.
• Parent Dashboard: Activity data is used to display reading analytics and achievements in your parent dashboard.

4. AI-Generated Content Disclosure

NikoSafe Story uses artificial intelligence to generate story text and illustrations. Specifically:

• Story text is generated using OpenAI's language models with strict safety guardrails for child-appropriate content.
• Illustrations are generated using Google's image generation models with explicit instructions to exclude text, words, and any inappropriate content.
• All AI-generated content undergoes clinical review before release to ensure compliance with NikoSafe Standards.
• The child profile information you provide (name, appearance, interests) is used as input to personalize the AI-generated content.

5. COPPA Compliance

NikoSafe Story is a service designed for parents and guardians to use on behalf of their children.

• Parental Consent: Before any child profile information is collected, we verify you are the parent or guardian using the FTC-approved credit card authorization method (16 CFR §312.5(b)(1)(iv)): a one-time $0.50 charge is placed on your card and refunded immediately. The transaction confirms you are an adult cardholder and creates a verifiable consent record.
• No Direct Child Interaction: Children do not create accounts or input personal data directly. All data is provided by the parent/guardian.
• Data Minimization: We only collect the information necessary to generate personalized stories: name, age, gender, appearance details, and optional interests.
• Parental Access & Deletion: Parents can review, modify, or delete their child's profile and all associated data at any time through the Parent Dashboard, or by contacting us at support@nikosafestory.com.
• Right to Refuse Further Collection: You may withdraw consent at any time. Doing so will result in deletion of your child's profile and stops all further data collection about that child.
• No Third-Party Marketing: We do not sell, trade, or share children's personal information with third parties for marketing purposes. We do not use children's data for advertising or behavioral profiling.
• Consent Records: We retain the consent confirmation (verification date, method, transaction reference) for as long as your account is active, plus 12 months for compliance audit purposes.

6. Sub-Processors & Data Processing Agreements

We share information only with the following service providers ("sub-processors"), solely for the purposes described above. Each operates under a signed Data Processing Agreement (DPA) and, where applicable to EU/UK data, the European Commission's Standard Contractual Clauses (SCCs):

International transfers: For users in the EU, UK, or Switzerland, transfers to US sub-processors occur under the EU-US Data Privacy Framework or Standard Contractual Clauses (Module 2) as appropriate. You may request a copy of these by emailing privacy@nikosafestory.com.

We do not sell personal information. We do not use children's data for advertising or behavioral profiling.

7. Data Security

We implement industry-standard security measures to protect your data, including encrypted data transmission (HTTPS/TLS), hashed passwords, and access controls. Payment processing is handled entirely by Stripe and we never store your credit card information.

8. Data Retention & Deletion

We retain your data for as long as your account is active. You may request deletion of your account and all associated data at any time through the Parent Dashboard ("Delete All My Data" option) or by emailing support@nikosafestory.com. Upon deletion request, we will remove all personal data, child profiles, generated stories, and associated files within 30 days.

9. Your Rights

As a parent or guardian, you have the right to:

• Review the personal information collected about your child
• Request corrections to inaccurate information
• Request deletion of your child's personal information
• Export a copy of all your data
• Withdraw consent at any time (which will result in deletion of child profiles)
• File a complaint if you believe your rights have been violated

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a prominent notice on our Service. Continued use after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: