CozyTales

User Data Deletion Policy

Effective Date: May 12, 2026

Your Right to Delete: You have the right to request deletion of your personal data at any time, without providing a reason. This policy explains how we handle deletion requests in compliance with GDPR, CCPA, and other privacy regulations.

1How to Request Data Deletion

You can request deletion of your account and personal data through any of these methods:

  • •Email: Send a request to hello@cozytales.app from your registered email address
  • •Support: Contact us at hello@cozytales.app with “Data Deletion Request” in the subject

No explanation or justification is required for your deletion request.

2What Data Gets Deleted

Upon receiving your deletion request, we will permanently delete:

2.1 Account Data

  • •Email address and password hash
  • •First and last name
  • •Authentication tokens and session data
  • •Email preferences and settings

2.2 Child Profiles

  • •All child first names and ages
  • •Gender information (if provided)
  • •Interests and favorite values
  • •Pet information
  • •Avatar preferences

2.3 Content Data

  • •All generated stories and their metadata
  • •Story images stored in Cloudflare R2
  • •Narration audio files (if any)
  • •Favorited stories and preferences

2.4 Third-Party Data

  • •OAuth profile data from Google/Facebook
  • •Paddle customer records
  • •Email service provider contact records

3Data We Retain

After deletion, we retain only:

  • •Aggregate Statistics: Total number of accounts, stories generated (no personal identifiers)
  • •Financial Aggregates: Total revenue numbers for tax purposes (not linked to individuals)
  • •Fraud Prevention: Hashed identifiers to prevent abuse (cannot be reversed to identify you)

We believe deletion means deletion - your personal data is permanently removed.

4Deletion Timeline

Our manual deletion process follows this timeline:

  • •Within 48 hours: We acknowledge your request and begin processing
  • •Within 7 days: Primary database records deleted
  • •Within 14 days: Cloud storage files deleted (images, audio)
  • •Within 30 days: All backups purged and deletion complete
  • •Within 90 days: Logs and cache cleared

5Third-Party Services

We instruct our service providers to delete your data:

  • •Supabase: Database records deleted
  • •Paddle: Customer profile deleted
  • •Cloudflare R2: Images deleted
  • •Resend: Email contact deleted
  • •OAuth Providers: We revoke access tokens (note: we cannot delete data from Google/Facebook)

6Backup and Residual Data

  • •Database Backups: Deleted data removed from backups within 30 days
  • •Server Logs: IP addresses and access logs purged after 90 days
  • •CDN Cache: Cached content expires within 24-48 hours
  • •Temporary Stories: Automatically deleted after 48 hours (separate from deletion requests)

7Deletion Process

  1. 1.Verification: We verify your identity through your registered email
  2. 2.Confirmation: You receive an email confirming your deletion request
  3. 3.Processing: Manual deletion begins within 48 hours
  4. 4.Completion: You receive a final email when deletion is complete

8Irreversibility Notice

⚠️ Important: Data deletion is permanent and irreversible. Once deleted:

  • •All your stories and child profiles cannot be recovered
  • •You will lose access to any active subscription benefits
  • •You cannot reactivate your account with the same data
  • •Generated content cannot be retrieved

9Re-registration

After deletion, you may create a new account using the same email address. However, this will be treated as a completely new account with no connection to your previous data.

10Legal Compliance

This deletion policy complies with:

  • •GDPR Article 17: Right to erasure (“right to be forgotten”)
  • •CCPA Section 1798.105: Consumer’s right to deletion
  • •COPPA: Parental rights to delete children’s information

11Special Circumstances

11.1 Active Subscriptions

If you have an active paid subscription, deletion will:

  • •Cancel future payments immediately
  • •Forfeit any remaining subscription time
  • •Not provide refunds for unused time

11.2 Shared Content

If you’ve shared story links publicly, we cannot delete copies that others may have saved.

12Contact Us

For questions about data deletion or to submit a deletion request:

  • •Email: hello@cozytales.app
  • •Subject Line: “Data Deletion Request”
  • •Response Time: Within 48 hours

You can always access this User Data Deletion Policy via the footer of the CozyTales website.