Privacy policy

• Parent account: email address, display name, and authentication data managed by Firebase Authentication (Google sign-in).
• Child profile: a name (or nickname) you choose, preferred reading language, app feature toggles, and an illustration / avatar reference. We never collect a kid’s email address or password.
• Content you create: stories, sentences, captured-page images, generated audio, and AI-generated illustrations. Stored in your private Firebase Cloud Storage bucket; readable only by your account and any co-parent you invite.
• Cloud usage counters: aggregated counts (number of OCR calls, TTS characters, illustrations generated, storage bytes). Used for billing + capacity planning.
• Billing: payment method details are handled by Stripe; we never see your full card number. Stripe shares the customer id, last 4 digits, country, and subscription status with us so we can keep your plan in sync.
• Diagnostic logs: server logs may contain account ids, timestamps, and error messages, retained for at most 30 days for debugging.

• No advertising or tracking pixels.
• No third-party analytics on kid-facing screens.
• No marketing emails to children.
• No microphone audio is recorded; Parler only plays audio.

Generating illustrations sends the sentence text and an optional story description to Google’s Vertex AI (Gemini for prompt-shaping, Imagen for the image). Google processes those prompts to produce your image; per Google’s terms, prompts and outputs are not used to train Google’s models. The resulting image is stored in your private Firebase Cloud Storage bucket.

Translation, text-to-speech, and OCR (camera-to-text) likewise call Google Cloud APIs with the relevant text or image. Same handling.

Parler is designed to be used with a parent or legal guardian. On a family account, the parent is the account holder and the data controller. (On a school account, the school is the controller — see Schools & education below.) We do not knowingly market to children, do not allow discovery / messaging between accounts, and do not share child profile data with third parties beyond the cloud providers required to deliver the service (see Data sharing below).

If you believe a child has signed up without a parent’s consent, email us and we will delete the data.

For school accounts (classroom, school, or district plans), the school— not Parler — is the data controller and education agency. Sacred Blue Studios acts as a data processor / service provider that handles student data only on the school’s documented instructions and only to provide the service.

• The school is responsible for providing any notices required by law and for obtaining any parental consent required before students use Parler.
• We process student data only to deliver the service — never for advertising, and never to train AI models.
• A Data Processing Addendum governs how we handle student personal information. See our plain-language DPA summary; a countersigned DPA is available from legal@parler123.app.

COPPA. For school use, the school or teacher may provide consent on behalf of parents under the COPPA school-consent mechanism, for use limited to the educational context. For family use, the parent who creates the account provides consent.

FERPA.Where the service touches education records, Parler acts as a “school official” with a legitimate educational interest, under the school’s direction. We use education records only to provide the service, do not sell them and do not use them for advertising, and we return or delete them at the school’s request.

GDPR-K & age-appropriate handling.We aim to minimise the data collected about children and to handle it in an age-appropriate way. Where GDPR applies, the school is the controller and Parler is the processor; we will support the school’s handling of data-subject requests.

We share data with the following subprocessors, each only for the purpose noted:

• Google Cloud / Firebase (Authentication, Cloud Storage, Vertex AI, Cloud TTS, Vision OCR, Translation, Speech-to-Text): to host the app and run the AI calls you trigger.
• Stripe: to take payments. Stripe’s privacy policy applies to the payment data they collect.
• SendGrid: to send transactional email (invites, receipts, account notices). No marketing email to children.
• Printify: only when a family or school orders a physical product (for example a t-shirt or mug printed from a drawing), to fulfil and ship that order.

We never sell personal data. We don’t share data with advertisers.

• Stories, pages, audio, and illustrations: kept until you delete them, or your account is closed.
• Deleting a child cascades to all of that child’s pages, stories, audio, and tablet sessions.
• Closing your account deletes all family data within 30 days. Email us if you want immediate deletion.
• Stripe retains billing records as required by financial law.

Depending on where you live, you have rights to access, correct, export, or delete your personal data, and to object to certain processing. Email legal@parler123.app and we will respond within 30 days.

Parler uses local storage and browser cookies only for what’s required to keep you signed in and remember in-app preferences (highlight calibration, font size, print preferences). No third-party tracking cookies.

We’ll update this page when our practices change. Material changes will be flagged with an in-app banner.