Privacy Policy

Last updated: June 2026  ·  Effective date: June 2026
Data controller: Chen Ben Dror, operating as SlumberTales · Vaizman 6, Ramat Hasharon, Israel
Contact: relaxjustforme@gmail.com

Contents

  1. Overview — Our Commitment
  2. Who This Policy Applies To
  3. What Data We Collect and Why
  4. How AI Processing Works
  5. Legal Basis for Processing
  6. Who We Share Data With
  7. How Long We Keep Your Data
  8. Your Rights
  9. Children's Privacy
  10. Cookies and Tracking
  11. Data Security
  12. International Data Transfers
  13. Changes to This Policy
  14. Contact and Complaints

1. Overview — Our Commitment

We do not sell your personal data. We do not use your data for advertising. We collect only what is necessary to provide and improve our service.

SlumberTales is a small, independent service. We take privacy seriously and handle data only in ways that directly support delivering stories to you and your child. This policy explains exactly what we collect, why we collect it, who we share it with, and what rights you have.

This Privacy Policy is written to comply with applicable privacy law, including the EU General Data Protection Regulation (GDPR), the Israeli Privacy Protection Law (1981) and its Amendment 13 (effective August 2025), and other applicable data protection legislation.

2. Who This Policy Applies To

This policy applies to anyone who:

The service is used by parents and guardians on behalf of their children. Children do not directly use the service, create accounts, or submit personal information. See Section 9 for more detail on children's privacy.

3. What Data We Collect and Why

We collect minimal data. Here is a full breakdown:

Data Source Purpose Stored?
Email address Collected by Digistore24 at checkout To send purchase confirmation and (for subscriptions) billing notifications. Held by Digistore24. We receive it only for order identification. Not stored in our own database.
Story preferences
(child's age, topic, voice, optional character/place name)
Entered by you in the story creation form Sent to Groq AI API and Google Text-to-Speech API to generate the story. Not used for any other purpose. Not stored after story generation. Processed in memory only during your session.
Payment information
(card number, billing details)
Entered on Digistore24's checkout page To process your payment. Never seen or stored by SlumberTales. Digistore24 handles this entirely.
Server/access logs
(IP address, browser type, pages visited, timestamps)
Automatically generated by our web server Security monitoring, debugging, and understanding general usage patterns. Retained for up to 30 days, then deleted.
Email correspondence Messages you send to relaxjustforme@gmail.com To respond to support requests and resolve issues. Retained for as long as necessary to resolve your issue, then deleted.

We do not build profiles of users. We do not use your data for marketing or advertising. We do not use tracking pixels or third-party analytics tools such as Google Analytics.

4. How AI Processing Works

When you use the story creation form, the following happens:

  1. You enter story preferences: your child's age, a topic, an optional narrator voice preference, and optional details like a character name or favorite place.
  2. These inputs are sent from your browser to our server over an encrypted HTTPS connection.
  3. Our server sends this data to the Groq API (operated by Groq Inc., USA) which uses the Llama-3.3 language model to generate story text.
  4. The story text is then sent to the Google Cloud Text-to-Speech API (operated by Google LLC, USA) to generate the narrated audio.
  5. The resulting MP3 file is returned to your browser for download.

Important facts about AI processing:

5. Legal Basis for Processing

Under GDPR and Israeli privacy law, we must have a legal basis for each type of data processing. Our legal bases are:

We do not rely on consent as our primary legal basis for processing. We do not currently send marketing communications. If we introduce email newsletters in future, we will request explicit opt-in consent at that time.

6. Who We Share Data With

We share your data only with the following parties, and only to the extent necessary:

We do not sell your personal data to any third party. We do not share your data with advertisers, data brokers, or marketing platforms.

We may disclose data if required by law, court order, or lawful government request under applicable law.

7. How Long We Keep Your Data

When retention periods expire, data is deleted securely. Because we store so little data ourselves, most access and erasure requests will primarily involve coordinating with Digistore24.

8. Your Rights

Under GDPR and the Israeli Privacy Protection Law (Amendment 13), you have the following rights regarding your personal data:

Right of Access

Request a copy of the personal data we hold about you.

Right to Rectification

Ask us to correct inaccurate or incomplete data.

Right to Erasure

Request deletion of your personal data, subject to legal retention obligations.

Right to Restriction

Ask us to limit how we process your data in certain circumstances.

Right to Portability

Receive your data in a structured, machine-readable format.

Right to Object

Object to processing based on our legitimate interests.

Right to Withdraw Consent

Where processing is based on consent, withdraw it at any time.

Right to Complain

File a complaint with your national data protection authority.

To exercise any right, email relaxjustforme@gmail.com. We will respond within 30 days.

EU residents: You may also contact your national supervisory authority. Full list at edpb.europa.eu.

Israeli residents: You may contact the Privacy Protection Authority (PPA) at gov.il/privacy-protection-authority.

9. Children's Privacy

SlumberTales is a service for parents and guardians. The story creation experience is operated by adults on behalf of their children.

If you believe a child has submitted personal information to us without parental authorization, contact us at relaxjustforme@gmail.com and we will delete it promptly.

10. Cookies and Tracking

SlumberTales uses only essential cookies — those necessary for the website to function. We do not use:

Essential cookies we use are session cookies that last only for your browser session (e.g., to maintain your story generation state) and are deleted when you close your browser.

Digistore24's checkout pages may use their own cookies in connection with payment processing, governed by Digistore24's Privacy Policy.

Google Fonts are loaded via a Google CDN, which may involve Google logging the font request. This does not involve personal story data.

Because we do not use non-essential cookies, we do not currently display a cookie consent banner. We will implement one if our cookie usage changes.

11. Data Security

We take reasonable technical and organizational measures to protect your data:

No system is 100% secure. In the event of a data breach that affects your rights, we will notify you and the relevant supervisory authority as required by applicable law (within 72 hours under GDPR where feasible).

12. International Data Transfers

SlumberTales is operated from Israel. Your data may be processed in the following jurisdictions:

Where personal data is transferred to countries without an EU adequacy decision, we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR.

13. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page.

For significant changes that materially affect how we handle your personal data, we will notify customers by email where we have your address. We recommend reviewing this page periodically.

Continued use of SlumberTales after a policy update constitutes acceptance of the revised policy.

14. Contact and Complaints

For any privacy questions, data requests, or concerns:

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority: