Privacy policy for Little Lantern.

LJ Capital OÜ, registry code 16835445, is the controller for Little Lantern at littlelantern.online.

Kadaka tee 42b, Mustamäe linnaosa, Tallinn, Harju maakond, 12915, Estonia.

Privacy contact: contact@littlelantern.online. General support: contact@littlelantern.online.

Account and contact data: parent email, account identifiers, support messages, and communication preferences.

Child profile data provided by the parent or guardian: child name, age, chosen story character or avatar, friends' names, favorite animal, color, language, region, regional book style, delivery time, timezone, and optional bedtime details.

Paid plan and payment data: plan selection, billing option, Stripe customer, subscription, checkout, payment, invoice, and billing event identifiers. Full card details are handled by the payment provider and are not stored by Little Lantern.

Story and asset data: generated story text, storybook files, image prompts, illustration jobs, page narration jobs, video jobs, delivery links, validation status, and delivery status.

Delivery audit data: staff-facing records of which story, storybook link, audio links, animation link, plan, language, region, child profile, and delivery status were sent, so support can investigate parent complaints.

Technical data: request metadata, security logs, cron/job status, provider task identifiers, and error logs needed to run and protect the service.

To create and manage parent accounts and child profiles.

To personalize bedtime stories, storybooks, audio, and animation based on the information provided.

To apply parent-provided special requests in a safe, original way when protected characters, brands, games, or films are mentioned.

To send nightly email links at the selected delivery time.

To process subscriptions, one-time purchases, trials, invoices, cancellation, and billing support.

To run safety, quality, security, fraud-prevention, debugging, and legal compliance workflows.

To respond to support, privacy, and legal requests.

Contract: to provide the account, trial, paid plan, personalized story generation, delivery, and support requested by the parent or guardian.

Legitimate interests: to secure the service, prevent abuse, debug errors, improve reliability, manage business records, and protect legal claims, balanced against user rights.

Legal obligation: to keep accounting, tax, consumer law, and compliance records where required.

Consent: where required for optional communications, cookies, or processing that needs consent under applicable law.

Little Lantern is designed for parents and guardians, not for child-managed accounts. A parent or legal guardian should decide what child profile information is entered.

Only provide information necessary for story personalization. Avoid sensitive data, precise location, school details, medical data, identity documents, or other unnecessary information.

Current signup uses character selection instead of child photo upload. Photos are not required to receive stories.

Parents may request correction or deletion of child profile data by contacting the privacy contact email.

Little Lantern may use infrastructure, database, storage, email, payment, AI generation, image generation, audio generation, video generation, logging, and hosting providers to deliver the service.

Current planned provider categories include Supabase for database/storage, Stripe for payments, Resend for email, Kie.ai or model providers for images/video, ElevenLabs for narration, OpenAI or other language model providers for story drafting, Airtable for staff-facing delivery tracking, and Vercel for hosting.

Provider access is intended to be limited to what is needed for the service. Provider choices and data flows will be updated in this policy when the live production integration changes.

Some providers may process data outside Estonia or the European Economic Area. Where required, transfers should rely on appropriate safeguards such as adequacy decisions, standard contractual clauses, provider data processing terms, or other lawful transfer mechanisms.

Account, subscription, and generated story records are kept while the account is active and for a reasonable period needed for delivery, support, audit, accounting, legal claims, and safety obligations.

If a legacy or future photo-upload feature is used, photo records are kept only as long as needed for the profile, support, safety, or deletion-request workflow, subject to legal and security retention requirements.

Billing and accounting records may need to be retained for statutory periods. Support and security logs are retained only as long as needed for the relevant purpose.

Deletion requests are handled subject to legal, accounting, security, and dispute-retention requirements.

Depending on the situation, GDPR gives you rights to access, correct, delete, restrict, object to processing, request portability, and withdraw consent where processing is based on consent.

To exercise rights, contact contact@littlelantern.online. We may need to verify the requesting parent or account holder before acting on a request.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate or another competent EU supervisory authority.

At this stage, Little Lantern does not use non-essential analytics or marketing cookies. If analytics, advertising, or tracking cookies are added later, cookie notices and consent flows will be updated before launch.

Little Lantern is designed to use secure links, server-side service credentials, role-based access, provider secrets in environment variables, and restricted delivery records.

No internet service can be guaranteed perfectly secure. If you suspect unauthorized access or a privacy issue, contact support immediately.

Effective date: 2026-05-31.

This policy should be updated whenever production providers, data categories, tracking tools, storage locations, or legal requirements change.