Privacy Policy

Dandle creates personalized bedtime stories and children's books. The account holder is the child's parent or guardian and consents on the child's behalf. Questions or data requests: support@dandle.ai.

• Account— your email (and password, if you don't use Google sign-in). Basis: performance of our contract with you.
• Child & story details— the child's first name, date of birth, interests, chosen story world, language, reading length and send schedule, and the names and traits of the family & friends you add as characters. You confirm you may share these details about others. Basis: contract.
• Books — an uploaded photo or an avatar you build. Basis: contract.
• Sample stories— when you request a sample from our landing page, your email and the child's first name, so we can generate and send it. Basis: your request (consent).
• Payments— handled by Stripe; we don't store your card details. Basis: contract.
• Analytics — only if you accept analytics cookies (see below). Basis: consent.
• Cancellation feedback— if you tell us why you're cancelling, the reason and any comment you add. Optional; the flow can be skipped entirely. Basis: consent.
• CC'd contact (optional)— if you add a second email address to a child's story settings, that address receives the same nightly story, reminders, and enrollment email you do. You confirm you have their agreement to receive these. Basis: consent (yours, on their behalf).

Essential cookies needed to sign in and run the site are always on. We use PostHog and Google Analytics (via Google Tag Manager) for product and marketing analytics, but neither loads until you accept on our consent banner — decline and no analytics cookies are set or data captured. You can change or withdraw your choice anytime via Cookie settings in the footer.

An uploaded photo is used only to build the book's character sheet and is deleted after the character sheet is generated. Our AI providers are configured so that your content is not used to train models.

You can export or permanently delete your data at any time from your account page. Every nightly story email also has a one-click unsubscribe for the account holder (a CC'd contact's removal is managed by the account holder, not by them directly). To exercise any other GDPR right (access, correction, objection, or to withdraw consent), email support@dandle.ai.

• Anthropic (Claude) — story & safety
• Google (Gemini) — illustrations
• Stripe — payments
• Prodigi — printing & shipping
• Supabase — data, authentication, storage
• Resend — email delivery
• PostHog (EU) — product analytics (only with your consent)
• Google Tag Manager / Google Analytics — marketing analytics (only with your consent)

We keep personal data only as long as we need it:

• Account & story data — while your account is active; erased immediately when you delete your account, and purged from backups within 30 days.
• Uploaded photos— deleted as soon as the book's character sheet is generated.
• Order & payment records — kept for 6 years to meet tax and accounting law; personal shipping details are anonymized when you delete your account.
• Sample-story requests — deleted after 12 months, or sooner if you create or close a Dandle account or ask us to.
• Analytics— collected only with your consent and stopped the moment you withdraw it via Cookie settings; retained by PostHog and Google Analytics under our projects' retention settings.
• Cancellation feedback— kept to help us improve Dandle, even after you delete your account: the reason/comment is retained, de-identified from your account the moment it's deleted.
• CC'd contact— kept only as long as you keep it set on the child's story settings; removed immediately when you clear it or remove the child from stories.

We prefer EU-region processing. Some processors (e.g. Anthropic, Stripe) operate outside the EEA — those transfers rely on Standard Contractual Clauses.

We may update this policy; the date above reflects the latest version.