Privacy Policy

1. Introduction

1.1. This Privacy Policy describes how LLC EVALLUME ("Company," "we," "us") collects, uses, and shares information when you use skazka.ai and related services (the "Service"). LLC EVALLUME, 30 N Gould St Ste N, Sheridan, WY 82801, USA; privacy@skazka.ai. Cookies are addressed in the Cookie Policy; biometric data in the Biometric Data Consent.

2. Information We Collect

• Account information: email address.
• Child's information (provided by a parent/guardian): first name, age range, gender, eye color, interests, and a photo (to create the Avatar).
• Voice sample of the adult Customer — only when ordering voice narration (Audio Clone).
• Contact and shipping address — for printed-book orders.
• Payment information: transaction data (processed by our payment providers; we do not store full card numbers).
• Device information: IP address, browser type, operating system, cookies.
• Usage data: interactions with the Service (via analytics).

3. Photos and Voice (Biometric Data)

3.1. To create the Avatar, the child's photo is processed; the original photo is deleted immediately after the Avatar is created and is not retained. The Avatar — a stylized depiction — is stored in the account and used to generate illustrations in future stories, until account deletion or your request.

3.2. For narration in the Customer's voice (Audio Clone), a sample of the Customer's voice is processed; cloning is performed ephemerally — the sample and the voice model are deleted after the narration is produced. A child's voice is never cloned — Audio Clone is available only for the adult Customer's voice.

3.3. The photo and voice sample are biometric data, processed only on the basis of your separate explicit consent (see Biometric Data Consent; GDPR Art. 9(2)(a); and, where applicable, U.S. state biometric laws such as Illinois BIPA), solely to provide the Service, and are not used for advertising or identification.

4. How We Use Information and Legal Bases

We use information to create and deliver personalized stories and audio; process payments; send order confirmations and notifications; provide support; improve the Service; and comply with legal obligations. Under the GDPR, our legal bases are: performance of a contract; your consent (including separate explicit consent for biometric data and for marketing); our legitimate interests; and legal obligations.

5. Children's Privacy (COPPA)

5.1. The Service is for adults; children under 13 may not use it directly. We collect a child's information only from the parent/guardian, who represents they are authorized to provide it and to consent on the child's behalf.

5.2. Consistent with the amended COPPA Rule, a child's photo and any voice data are treated as personal information (biometric identifiers); we maintain a data-retention policy and do not retain such data longer than necessary. We obtain separate parental consent before disclosing a child's data to third parties where such disclosure is not integral to the Service.

5.3. Parental rights. You may review your child's information, request its deletion, refuse further collection or use, and withdraw consent, by contacting privacy@skazka.ai (we respond within 30 days).

6. Subprocessors and Sharing

We share the minimum necessary information with subprocessors to provide the Service:

• OpenAI — story-text and illustration generation;
• ElevenLabs — voice synthesis and cloning (for audio);
• Lulu — printing and shipping of physical books (name and shipping address);
• Lemon Squeezy — Merchant of Record and payment processing (Online/Digital/Audio);
• Stripe — payment processing for printed books;
• Analytics: Google Analytics, Meta, and, where applicable, other providers;
• Hosting: cloud servers (United States).

We do not sell, rent, or share children's personal information with third parties for marketing purposes.

7. International Data Transfers

7.1. Your information may be processed in the United States and other countries where our providers operate. For transfers from the EU/EEA/UK, we rely on the EU-U.S. Data Privacy Framework where available and, as a safeguard, on the European Commission's Standard Contractual Clauses (and the UK Addendum). You may request information about these safeguards at privacy@skazka.ai.

8. Retention and Deletion

• Children's photos: deleted immediately after the Avatar is created.
• Voice sample and voice model: deleted after the narration is produced (ephemeral).
• Avatars and child's data: retained until account deletion or your request.
• Unpaid previews: deleted after the period stated on the Site (the avatar and child's data remain in the account).
• Account data: retained until you request deletion or close your account.
• Transaction records: retained for the period required by applicable accounting and tax law.

You may request deletion at any time at privacy@skazka.ai.

9. Cookies

9.1. We use cookies and similar technologies; details and consent management are in the Cookie Policy. In the EU/EEA and UK, non-essential cookies are set only after your prior consent.

10. Your Rights

10.1. GDPR (EU/EEA/UK): access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. You may lodge a complaint with your local supervisory authority.

10.2. California (CCPA/CPRA): the right to know, delete, correct, and opt out of the sale/sharing of personal information. We do not sell or share personal information, and we honor Global Privacy Control signals. We do not sell the personal information of consumers under 16.

10.3. To exercise any right, contact privacy@skazka.ai.

11. EU / UK Representatives

11.1. For the purposes of Article 27 GDPR and the UK GDPR, our representatives are:

• EU Representative: [TBD — to be appointed and inserted].
• UK Representative: [TBD — to be appointed and inserted].

12. Data Security

12.1. We use SSL/TLS encryption in transit, access controls, and other measures. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

13. Changes to This Policy

13.1. We may update this Policy. We will post the new Policy with its version number and date and, for material changes, provide additional notice. Version history is retained.

14. Contact