Privacy Policy

Last updated: February 22, 2026

1. Introduction

This Privacy Policy describes how Vibe Coding Kids ("we," "us," or "our") collects, uses, and protects information when you use Story Builder ("the Service"). We are committed to protecting the privacy of our users, especially children. Story Builder is designed for children ages 3–12 to use with parental supervision.

2. COPPA Compliance

We comply with the Children's Online Privacy Protection Act (COPPA). Our approach to protecting children's privacy:

  • Parental consent model: Only parents or legal guardians (18+) may create accounts. By creating an account, a parent provides verifiable consent for their child to use the Service under their supervision.
  • No direct data collection from children: We do not collect personal information directly from children. All data is collected through the parent's account.
  • Minimal data collection: We collect only what is necessary to provide the Service (see Section 3 below).
  • Parental rights: Parents can review, delete, or request copies of any data associated with their account at any time by contacting us.
  • No behavioral advertising: We do not serve targeted advertising to children or use children's data for advertising purposes.

3. Information We Collect

Information you provide

  • Email address: Used for account creation, authentication (magic link sign-in), and essential service communications.
  • Story inputs: Character descriptions, story themes, and preferences you provide when creating stories. These are used solely to generate your stories.
  • Payment information: Processed securely by Stripe, our payment provider. We do not store credit card numbers or full payment details on our servers. See Stripe's Privacy Policy for details.

Information collected automatically

  • Usage data: Pages visited, features used, story creation activity, and general usage patterns. This helps us improve the Service.
  • Device information: Browser type, operating system, and screen size. Used for ensuring the Service works correctly on your device.
  • Error and performance data: We use Sentry for error tracking to identify and fix bugs. This data does not include personal information or story content.

4. How We Use Your Information

We use collected information to:

  • Provide and maintain the Service (account management, story creation and storage).
  • Process payments and manage subscriptions.
  • Send essential service communications (sign-in links, billing receipts, important updates).
  • Improve the Service based on aggregated, anonymized usage patterns.
  • Monitor for and prevent abuse or misuse of the Service.

We do not use your information to:

  • Serve targeted advertising.
  • Sell or rent personal information to third parties.
  • Train AI models on your specific story content without your consent.
  • Build profiles of children.

5. How We Store Your Data

Your data is stored securely using the following services:

  • Supabase: Account information, story content, and user preferences are stored in a Supabase-hosted PostgreSQL database with row-level security enabled. Data is encrypted at rest and in transit.
  • Stripe: Payment and subscription data is managed by Stripe. We store only a Stripe customer ID to link your account to your billing information.
  • AI service providers: Story text and illustration prompts are sent to third-party AI services for generation. These providers process the data in accordance with their own privacy policies and data processing agreements.

6. Data Sharing

We share your information only with the following categories of service providers, and only as necessary to operate the Service:

  • Supabase: Database hosting and authentication.
  • Stripe: Payment processing.
  • AI providers: Story and illustration generation (content inputs only, not personal information).
  • Sentry: Error monitoring (technical data only).

We do not sell, rent, or trade your personal information. We may disclose information if required by law or to protect the safety of our users.

7. AI-Generated Content and Data

When you create a story:

  • Your inputs (character descriptions, story themes) are sent to AI services to generate story text and illustrations.
  • Generated stories are stored in your account and accessible via shareable links you control.
  • We do not use your specific story content to train AI models. Anonymized, aggregated usage patterns (e.g., popular story themes) may be used to improve the Service.

8. Cookies and Tracking

Story Builder uses minimal cookies:

  • Essential cookies: Required for authentication and session management. These cannot be disabled as the Service will not function without them.
  • Analytics: We may use basic, privacy-respecting analytics to understand how the Service is used. We do not use tracking pixels, retargeting cookies, or third-party advertising cookies.

We do not use cookies or similar technologies to track children across websites or serve advertising.

9. Your Rights and Data Deletion

You have the right to:

  • Access your data: Request a copy of the personal information we hold about you.
  • Correct your data: Update your email address or other account information.
  • Delete your data: Request deletion of your account and all associated data, including stories and personal information. We will process deletion requests within 30 days.
  • Export your data: Request a portable copy of your stories and account data.
  • Withdraw consent: Cancel your account at any time.

To exercise any of these rights, contact us at hello@vibecodingkids.com.

10. Data Retention

We retain your data as follows:

  • Active accounts: Data is retained for as long as your account is active.
  • Canceled subscriptions: Your account and stories remain accessible even after canceling a paid subscription. You can still view existing stories.
  • Deleted accounts: Upon account deletion request, we will delete your personal information and story data within 30 days. Some anonymized, aggregated data may be retained for analytics.
  • Billing records: Payment records may be retained as required by law or for accounting purposes.

11. Security

We take reasonable measures to protect your information, including encryption in transit (HTTPS), encryption at rest, row-level security in our database, and secure authentication via magic links (no passwords stored). However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The "Last updated" date at the top of this page indicates when this policy was last revised.

13. Contact Us

If you have questions about this Privacy Policy or want to exercise your data rights, please contact us at: hello@vibecodingkids.com