Privacy policy
Last updated 16 October 2026
This policy covers the TaleJoy mobile app and talejoy.app. The operator and data controller is Bahri Okuroglu, trading as TaleJoy, a sole proprietor based in Türkiye. It explains what information is involved, why it is used, and the choices available to parents and carers.
The app today
TaleJoy is being prepared for public release. The current app lets you browse illustrated stories, read, and listen to narration. It does not create an account, offer purchases, or sync reading progress to our servers. This policy also applies to the current development and preview versions.
Reading positions, audio positions, completion status, bookmarks, and reader preferences are stored on your device so you can continue a story. Downloaded illustrations, narration, and story files may be cached there too. We do not receive a separate upload of this saved reading history or use it for behavioural profiling. Your device’s backup settings may include local app data in backups managed by Apple or by you.
Loading stories makes network requests to our content delivery provider, Cloudflare. Those requests involve an IP address, requested story or file, request time, and technical connection information, such as app or device information supplied with the request. This is used to deliver content, operate the service, and detect errors or abuse. A request can reveal which story or media file is being loaded, even though saved progress stays on the device. We do not turn these requests into child profiles or advertising audiences.
Children and family privacy
Our current stories are designed for ages 3–5. The app has no ads, third-party behavioural analytics, advertising identifiers, or social tracking. We do not ask children for names, dates of birth, email addresses, photos, location, or contact lists. The app does not request camera, microphone, contacts, or location access.
Parents and carers should handle support requests and supervise use of the public website and external services. If you believe a child has sent us personal information, contact us so we can review and remove it where appropriate. A parental gate is not a substitute for parental consent where consent is legally required.
Future accounts and purchases
Optional parent sign-in, cloud progress, and app subscriptions are planned but are not active in the current app. We will update this policy before enabling them, explaining account identifiers, any parent email address, purchase records, synced progress, service providers, retention, deletion, and any required consent. We will not silently apply new data uses to information collected under this policy.
Browsing the website
You do not need an account. We do not add behavioural analytics, advertising trackers, or session recording to the website. We do not ask for children’s names, dates of birth, or profiles.
Our hosting provider, Firebase Hosting (Google), processes technical request information such as your IP address, browser information, and requested files to deliver and protect the website. Visiting a website still involves this technical processing even when it has no analytics.
Our artwork and fonts are served with the website. We do not load Google Fonts, catalog services, or social media widgets in the background. Our website code does not set tracking cookies or store reading progress.
Optional YouTube videos
Where a sample video is available, we display our own poster artwork before it is loaded. No YouTube player or remote YouTube thumbnail is requested until you select “Load YouTube video”. This choice applies to the player on that page; it is not saved as a tracking preference.
Once enabled, the embedded player connects to YouTube using its privacy-enhanced mode. YouTube may process information about your device, connection, and video use, and may use cookies or similar technologies. Privacy-enhanced mode does not mean that no data is processed, and YouTube may show ads or recommendations.
You can close the player to remove it from the page. Closing it stops the embedded player but cannot undo information already sent to YouTube. Google’s privacy policy explains its processing.
Contacting support
If you email us, we receive your email address and the information you include. We use it to respond to your enquiry and resolve the issue. Please contact us as a parent or carer and avoid sending a child’s personal information.
Our email providers process messages to deliver and store this correspondence. Support messages are not used for advertising or added to a marketing mailing list.
Purposes and legal grounds
Information is collected electronically through app and website requests and through email you send. We use it to provide the service you request, answer support enquiries, and keep the service secure. Where applicable, these activities rely on providing a requested service or performing a contract, and our legitimate interests in reliable delivery, security, and responding to enquiries, balanced against your rights and children’s privacy. Records required by law are processed to meet those obligations. When processing requires consent, we must obtain it before that processing begins.
Service providers and international processing
The recipients described above are Cloudflare for app content delivery, Google Firebase Hosting for the website, email providers for support, and YouTube only when you enable a website video. We do not sell personal information or share it for targeted advertising. Information may also need to be disclosed where required by law or to protect legal rights.
These providers operate internationally, including in the United States and other countries outside Türkiye or your country of residence. Their service-specific processing and retention are described in Firebase’s privacy information, Cloudflare’s privacy policy, and Google’s policy linked above. You can contact us about recipients and the safeguards applicable to your information.
Retention and deletion
Local reading data stays in the app until changed or removed with the app’s data. Deleting the app removes its local data; offloading it may keep that data. Copies in device backups are controlled by your backup settings. Cached media can be removed by the app or operating system and downloaded again when needed.
We keep support correspondence only as long as needed to resolve the enquiry, handle related follow-up, or meet applicable legal obligations. We then delete it when no longer needed. Hosting and security records follow the providers’ service retention periods; Firebase states that Hosting retains IP data for a few months. We do not keep a separate server-side reading-history database in the current service. Contact us for deletion or information about a particular record; we will explain any record we must retain.
Your choices and rights
You can use this website without loading YouTube. Closing a loaded player stops further playback but does not erase information already sent. You can ask to access or correct information, request deletion, or withdraw consent where processing relies on consent. Withdrawal does not undo lawful processing that happened before it.
Depending on applicable law, you may also ask whether your data is processed, why and with whom it is shared, request restriction or portability, object to processing or solely automated decisions, ask that corrections or deletion be communicated to recipients, and seek a remedy or complain to a data protection authority. This includes applicable rights under Türkiye’s Personal Data Protection Law No. 6698. We do not make automated decisions with legal or similarly significant effects about you or your child.
Contact support@talejoy.app with a privacy question or a request for yourself or your child. We may need proportionate information to verify your authority before disclosing or deleting personal data. Please do not send identity documents or a child’s details unless we explain why they are necessary.
Changes to this notice
We will update this page when the app or website’s data handling changes, and provide additional notice or obtain consent where required. The date above identifies the latest update.