Effective 25 July 2026.
Telliwisp is an independent project operated by Animesh Mukherjee in Victoria, Australia. Telliwisp is not currently operated by a registered company.
Who this policy covers
Telliwisp is a parent-managed storytelling service. A parent or legal guardian creates the account and supervises a child’s use. Contact contact@telliwisp.com.
Information we collect
- Parent email, authentication identifier, and basic profile details.
- Child nickname, age band, preferences, progress, points, levels, and private group membership.
- Story ratings, feedback, notification preferences, and support messages.
- Parent recordings only when deliberately recorded and saved.
- Limited technical and security information such as device/app version, timestamps, and error logs.
We do not require a child’s full legal name, exact birth date, postal address, precise location, or independent login.
How we use information
We use information to authenticate parents, provide and personalise stories, remember progress, operate private groups, play recordings, deliver requested reminders and service emails, respond to support, prevent abuse, and improve reliability.
Legal bases
Depending on location, processing is based on providing the service, consent for optional notifications and recordings, legitimate interests in security and improvement, and compliance with law.
Children
Use is intended under parental supervision. Child profiles are subordinate to a parent account and are not public. Contact us if information was provided without appropriate parental authority.
Service providers
We use providers such as Supabase for authentication, database, functions, and storage; Resend for operational email; and Apple and Google for platform services and optional sign-in. Providers process information under their own data-processing terms.
Sharing and sale
We do not sell personal information or use family information for targeted advertising. We may disclose information when legally required, to protect safety or service integrity, or during a protected business transfer.
Recordings
Microphone permission is requested only when a parent starts recording. Saved recordings are private to the family account and can be deleted by a parent.
Retention and deletion
Information is retained while an account is active and as reasonably needed for security, disputes, or law. Account deletion removes associated family data from active systems, subject to limited backup and legal retention.
Security and international processing
We use access controls, encrypted connections, restricted storage, and provider safeguards. Providers may process information outside the user’s country. No online system can promise absolute security.
Your choices and rights
Depending on location, a parent may request access, correction, deletion, restriction, objection, portability, or withdrawal of consent. Contact support from the parent account email.
Changes
Material changes will be posted here with a revised effective date and, where appropriate, communicated in the app or by email.
Optional analytics and measurement
Parents may opt in to privacy-safe product measurement in Parent Settings. The authenticated web app and iOS app store fixed-name events in Telliwisp’s Supabase database, linked to the parent account for access control and deletion. Events may include a story identifier, broad age band, web or iOS surface, approved narration or permission status, and time. They never include a child name or identifier, written response, recording, device or advertising identifier, URL, precise location, or arbitrary text. Raw product events are retained for no more than 90 days and reporting suppresses groups smaller than five.
Separately, the public website may use Google Analytics 4 only after visitor consent. Advertising storage, Google Signals, and ad personalisation are disabled. Google Analytics is not used inside the authenticated app or iOS app. See the Cookie Policy and use Analytics choices in the public-site footer to manage consent.
Installation and trial security retention
To enforce account and device limits, Telliwisp stores a one-way installation identifier, device type, and recent activity time. After account deletion, a pseudonymous one-way installation claim may be retained for up to 90 days to prevent immediate free-account cycling. To enforce the one-trial-per-email rule, Telliwisp also retains a one-way SHA-256 hash of the normalized parent email and the trial dates after account deletion. The trial registry does not contain the readable email, child information, recordings, or story history.