CradleAdventures is built for families. We treat your information, and especially your child's information, with care and full COPPA compliance. This page explains what we collect, what we never collect, and why.
1. Who we are
CradleAdventures (“we,” “our,” “us”) provides personalized AI bedtime stories for children aged 0 to 12. CradleAdventures is a product of MoonCore Labs, and the service is intended to be purchased and used only by parents and legal guardians.
2. Information we collect
- Account information. Your name, email address, and password (stored hashed). This is what you provide when you create an account.
- Story inputs.The child's first name, age range, an optional short appearance description (used only to illustrate the story), story world, story style, art style, mood, and narrator voice you select. These are used to generate the story you requested, and are kept only if you save the story (see retention below).
- Toy photos (optional).You can add a photo of a favourite toy so it can appear in the story. Every upload is automatically checked and any photo containing a human face is rejected. If you upload a toy for a single story, it is used for that one generation and not saved. If you choose to attach a toy to a child's saved profile, we store it in encrypted cloud storage so it can pre-fill future stories for that child, until you remove it or delete the profile or your account.
- Generated stories you save. Only the stories you choose to save are stored, and they are associated only with your account.
- Billing information. Handled exclusively by a leading third-party payment processor. We never see or store your full card number.
3. What we never collect
- Photos containing human faces (these are automatically rejected on upload).
- Your child's last name, exact date of birth, school, address, or location.
- Any personally-identifying information about the child beyond a first name, an age range, and the optional appearance details you choose to add for the illustrations.
- Behavioral profiles, ad-tracking identifiers, or device fingerprints.
4. Children's privacy and compliance
CradleAdventures is built to meet strict children's privacy standards:
- COPPA (United States).We comply with the Children's Online Privacy Protection Act. Accounts are reserved for adults 18+, the service is intended to be used by a parent or guardian, and we do not knowingly collect personal information directly from children under 13. Information about a child is only ever provided by the adult account holder, to create the story they requested.
- GDPR / UK GDPR (Europe & the UK). We process personal data on the lawful basis of consent (which you give by creating an account) and contract performance. You have full rights of access, rectification, erasure, restriction, portability, and objection.
We also honour data-protection and data-subject rights under other applicable laws where you live — including Canada (PIPEDA and provincial laws such as Quebec's Law 25), Australia (the Privacy Act 1988) and Brazil (the LGPD). To exercise any privacy right in your jurisdiction, contact us at privacy@cradleadventures.com.
If you believe a child has registered an account, please email us at privacy@cradleadventures.com and we will delete the account immediately.
5. How we use information
- To generate the story you requested (one-time, then discarded).
- To deliver the service: log you in, save stories you choose to save, process subscriptions.
- To send service-related emails (account confirmations, receipts, security alerts).
- If you opt in: weekly newsletter and product updates. You can unsubscribe in one click.
We do not sell, rent, or share your information with advertisers. CradleAdventures is ad-free.
6. Third-party services we rely on
We use a small set of trusted providers to deliver the service. Each one handles only the data it needs, under a written agreement that prohibits using your information for any other purpose.
- A leading AI provider. AI story and illustration generation. Inputs are sent to produce the story you requested. The provider does not retain your prompts to train its models.
- A specialist voice-synthesis partner. Voice narration. The text of stories you choose to narrate is sent for synthesis, and is not used for training.
- A trusted, PCI-compliant payment processor. Handles subscriptions and Moonspark-pack purchases.
- A dedicated authentication service. Account sign-in and security. Stores your email, hashed password, and session tokens.
- An encrypted cloud-storage provider. Keeps your saved stories, child profiles, and toy images.
- A third-party email service. Sends transactional and newsletter emails (when you opt in).
7. Data retention
Account data is kept while your account is active. Saved stories — together with the child's first name, age range and any appearance description you entered to create them — are kept until you delete the story or delete your account. Story inputs for stories you don't save are discarded shortly after the story is generated. A one-off toy photo used for a single story is not retained; a toy photo you attach to a saved child profile is kept until you remove it, or delete that profile or your account. When you delete your account we begin removal and then permanently purge your data.
8. Your rights
You can access, export, or delete your account and all associated data at any time from your account settings, or by emailing privacy@cradleadventures.com. We will respond within 30 days. If you are in the EU/UK, you have additional rights under GDPR including the right to object and the right to data portability.
9. Changes to this policy
If we make material changes we will notify account holders by email at least 14 days before they take effect. The “Last updated” date at the top of this page always reflects the most recent revision.
10. Contact us
Privacy questions: privacy@cradleadventures.com
Child-safety concerns: safety@cradleadventures.com