← Back

Privacy Policy

Effective date: February 25, 2026

This policy describes how the Foxari web application (the “Service”) processes user data. The Service is designed with GDPR principles in mind.

1. Data Controller

The data controller is Kalaytan. For all questions related to data processing, contact: info@kalaytan.com.

2. What Data We Collect

The Service does not require registration and does not collect email addresses, phone numbers, payment details, or geolocation. We process only:

• Session identifier — an anonymous UUID stored in a cookie
• Story history — generated story texts linked to the session
• Family preferences — the child’s name, age, and interests that you provide when creating a story

3. Processing Children’s Data

The Service is intended for use by parents and legal guardians of children aged 2–10. Children should not use the Service on their own.

A child’s name and age, when provided by a parent, are used solely to personalize stories and are not shared with third parties for marketing purposes. A parent may request deletion of this data at any time.

4. Purpose of Processing and Legal Basis

• Generating personalized stories — based on legitimate interest (Art. 6(1)(f) GDPR)
• Saving story history and preferences — for easier repeated use, based on legitimate interest

5. Cookies

The Service uses one technical cookie:

• session_id — an HttpOnly cookie valid for 1 year. It contains an anonymous session identifier (UUID) and is required for the Service to function.

We do not use analytics, advertising, or tracking cookies. No third-party cookies are set.

6. Data Sharing with Third Parties

Story prompts (without personal identity linkage) are sent to Google Gemini AI for story generation. No other sharing with third parties takes place.

7. Data Storage

Data is stored on a server in the European Union. Data is retained for the lifetime of the session and may be deleted upon request.

8. Your Rights

Under GDPR, you have the right to:

• Request access to your data
• Request correction or deletion of your data
• Object to processing
• Lodge a complaint with a data protection authority

To exercise your rights, email info@kalaytan.com.

9. Security

We take reasonable technical measures to protect data, including the use of HttpOnly cookies and secure HTTPS connections.

10. Policy Changes

We may update this policy from time to time. The current version will always be available on this page.