Privacy Policy

ToddlerGen is designed for families, including very young children. The child play area has no ads, analytics, account forms, free-form text prompts, microphone recording, or social features.

Information kept on the device

Selected cards, settings, generated pictures, and saved stories are stored on the device. An adult can delete stories in the Grown-up Zone. Optional direct-provider API keys are stored in Apple Keychain with this-device-only protection and can be removed in the Grown-up Zone.

Picture Magic cloud service

When Picture Magic is used, the app sends the chosen card identifiers, random request identifiers, and Apple-signed app or purchase proofs to ToddlerGen's service. The service verifies access, selects the picture service included with the verified plan, rebuilds a child-safe prompt, and sends that prompt to the configured image provider. It does not receive a child's name, email address, contacts, precise location, microphone audio, or photo library.

Apple transaction identifiers are transformed with a keyed one-way function before storage. The service retains quota, purchase-period, request-integrity, model, cost, and status records as needed to enforce the five lifetime samples, monthly allowance, refunds, and duplicate-request protection. An ordinary generated image is kept privately for at most 48 hours so an interrupted request can be recovered, then expires automatically.

If three separate verified families independently choose the same card recipe for the same picture tier within that window, ToddlerGen may keep up to three different validated results in a bounded shared popular-recipe cache until less-used results are displaced. The cache is keyed from the service's own picture recipe and model, not a child's name or an Apple identifier. A cached picture still counts as one sample or monthly picture but avoids a new image-provider request. Finished stories are saved on the device.

Service providers

Apple processes purchases. Cloudflare provides the private relay, database, short-lived image storage, and Fast Magic generation. fal provides Storybook Magic generation. The selected production image provider processes only the safe picture prompt needed to generate an image. In advanced direct-provider mode, the adult's selected provider receives the prompt directly under that provider's privacy terms.

Cloudflare and the image provider necessarily process technical connection information to operate and secure their services. ToddlerGen does not use this information for advertising, tracking, profiling, or analytics, and does not sell personal information.

Children and families

ToddlerGen does not ask a child to provide personal information. Parents and guardians should choose picture services and manage purchases in the adult-gated Grown-up Zone.

Your choices

ToddlerGen has no online account to delete. You can use the local demo without cloud generation, remove direct-provider keys, delete all saved stories, cancel Wonder Club through Apple, and delete the app. For privacy questions, email support@jeffcoindustries.com.