Privacy Policy

Last Updated: February 2, 2026
Effective Date: February 2, 2026

This Privacy Policy explains how Pumi Technologies Inc (“Company,” “we,” “us,” “our”) collects, uses, shares, and protects information when you use our mobile application and related services (collectively, the “Services”).

If you do not agree with this Privacy Policy, do not use the Services.

1) Contact Information

Company: Pumi Technologies Inc
Privacy Contact Email: service@pumistories.com

Mailing Address for Privacy Inquiries (Not a Delaware office):
Pumi Technologies Inc
c/o Legalinc Corporate Services Inc. (Registered Agent)
[INSERT REGISTERED AGENT STREET ADDRESS], Delaware [ZIP], USA

Telephone (optional): [INSERT PHONE NUMBER, IF YOU CHOOSE TO PROVIDE ONE]

Notes:

We do not maintain a physical office in Delaware. The address above is a mailing address for legal and privacy inquiries via our Registered Agent.

2) Who the Services Are For

The Services are intended for parents and legal guardians (“Parents”) who create and manage accounts. Children may view or listen to stories, but the Parent controls the account, settings, and any content uploaded or generated.

3) Information We Collect

A) Information You Provide

Account Information: email address and optional profile details you choose to provide.
Parent Inputs: prompts, categories, story requests, feedback, and any text you enter.
Child Data (optional, provided by Parent): a child’s nickname, age range, preferences, and other information a Parent chooses to provide for personalization.
Child Photos (optional, provided by Parent): if you upload a photo of a child (“Child Photo”), we process it to generate stylized story illustrations and related visuals as described in Section 8.
Communications: messages you send to us (support requests, bug reports), including attachments.

B) Information Collected Automatically

Device and App Data: device model, operating system, app version, language, time zone, and IP address.
Usage Data: screens viewed, feature usage, session duration, and interaction logs.
Diagnostics: crash logs, performance data, and error reports.

C) Purchases and Subscriptions

If you purchase a subscription or in-app purchase through Apple App Store or Google Play, the platform processes payment. We do not receive your full payment card details. We may receive limited information such as:

subscription status (active/expired), product identifier, purchase and renewal dates, and a transaction or receipt identifier.

D) Cookies (Website Only, If Applicable)

If we operate a website, it may use cookies or similar technologies for essential functionality, security, and analytics. You can control cookies via your browser settings.

4) How We Use Information

We use information to:

Provide and operate the Services (account creation, story generation, content delivery, and support).
Personalize stories based on Parent inputs and selected preferences.
Process uploaded images (including Child Photos) to create stylized story visuals (Section 8).
Maintain security and integrity (fraud prevention, abuse detection, troubleshooting, enforcement).
Improve the Services (analytics, debugging, performance monitoring, feature development).
Communicate with you about service-related matters (support responses, important notices).
Comply with legal obligations and respond to lawful requests.

5) Legal Bases (EEA/UK, If Applicable)

Where GDPR or UK GDPR applies, we rely on one or more of:

Contract: to provide the Services you request.
Consent: for optional features (for example uploading a Child Photo) and marketing where required by law.
Legitimate interests: to secure, maintain, and improve the Services, balanced against your rights.
Legal obligation: to comply with applicable laws.

6) How We Share Information

We do not sell personal information for money. We share information only as described below:

A) Service Providers (Processors)

We use trusted vendors to help operate the Services (hosting, storage, analytics, crash reporting, customer support, and AI processing). They may access information only to provide services on our behalf and must protect it.

B) App Stores and Platform Providers

Apple and Google process payments and may collect data under their own privacy policies. We receive limited subscription status signals described in Section 3C.

C) Legal and Safety

We may disclose information if we believe it is reasonably necessary to:

comply with law, regulation, legal process, or governmental request,
protect safety, rights, property, or security of users or the public,
detect, prevent, or address fraud, abuse, or security issues.

D) Business Transfers

If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction, subject to applicable law.

7) Sensitive Data and Advertising

The Services are designed for Parents. We do not knowingly use Child Data for behavioral advertising.
We do not build advertising profiles about children.
Please do not submit sensitive information (for example medical details) in free-text prompts.

8) AI, Photos, and Child Photos

A) What We Do With Uploaded Photos

If a Parent uploads a photo, including a Child Photo, we may process it to:

create an illustration-style depiction suitable for story visuals, and
generate related images aligned to the story context and Parent selections.

B) Identification and Biometric Use

We do not use uploaded photos for identity verification, facial recognition, or to identify a child in the real world. We do not intentionally create or store biometric identifiers (for example faceprints) for identification purposes.

C) Model Training

We do not intentionally use Child Photos to train our own general-purpose AI models.
Some third-party AI providers may process inputs to provide outputs. Where available, we use provider settings and contractual controls designed to restrict providers from using customer content for training. If a provider’s policy differs, we will reflect it in our subprocessor disclosures or in-product notices.

D) Automated Generation

Stories and images may be generated using automated systems. We do not use automated decision-making that produces legal or similarly significant effects about you or your child.

9) Children’s Privacy (COPPA and Similar Laws)

The Services are intended for Parents. Parents may provide Child Data (including Child Photos) for personalization. By providing Child Data, the Parent represents they are the child’s parent or legal guardian and consent to our processing of that data for the purposes described in this Policy.

If you believe we collected Child Data without proper consent, contact us at service@pumistories.com and we will take appropriate steps, including deletion where required.

10) Data Retention

We retain information only as long as reasonably necessary for the purposes described in this Policy:

Account Data: while your account is active and for a reasonable period after to comply with law, resolve disputes, and enforce agreements.
Generated Content (stories and images): retained until you delete it or delete your account, unless we must retain certain records for legal reasons.
Child Photos: retained only as needed to provide photo-based features and allow reuse, unless you delete them or delete your account.
Logs and Diagnostics: typically retained for a limited period for security and reliability (for example 30 to 180 days), then deleted or de-identified, unless a longer period is required to investigate security incidents or comply with law.

11) Security

We use reasonable safeguards designed to protect information, including encryption in transit, access controls, and least-privilege access. No system is completely secure, and we cannot guarantee absolute security.

12) International Transfers

We may process and store information in countries other than your own. Where required, we use appropriate safeguards (for example Standard Contractual Clauses) or other lawful mechanisms.

13) Your Choices and Rights

A) Access, Deletion, and Account Controls

You may request deletion of your account and associated data by emailing service@pumistories.com from the email address linked to your account, with the subject line “Delete My Account”.

You may also request deletion of specific Child Photos or generated content via the same email if in-app deletion is not available.

We may ask you to verify your request before completing deletion.

B) GDPR/UK GDPR Rights (If Applicable)

You may have the right to access, correct, delete, restrict processing, object, and request data portability, and to withdraw consent where processing is based on consent. You may also lodge a complaint with a supervisory authority.

C) US State Privacy Rights (If Applicable)

Depending on your state, you may have rights to know, access, delete, and correct certain personal information. We do not knowingly sell children’s personal information.

D) Canada (If Applicable)

You may request access to and correction of your personal information and ask questions about our practices via service@pumistories.com.

14) Push Notifications and Marketing

We may send push notifications for service-related messages (for example “your story is ready”). You can disable notifications via device settings.

If we send marketing emails where permitted by law, you can opt out using the unsubscribe mechanism or by contacting us.

15) Third-Party Links

The Services may link to third-party sites or services. We are not responsible for third-party privacy practices.

16) Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice as required. The “Last Updated” date reflects the latest version.

17) Subprocessors

We use third-party service providers to help deliver the Services (for example hosting, storage, analytics, crash reporting, customer support, and AI processing). You may request a current list of key subprocessors and their roles by emailing service@pumistories.com.

Contact

service@pumistories.com