Privacy notice

Pimlo is made by Ozessa Ltd ("we", "us"), the controller of the personal information described here. Contact us about anything in this notice at support@pimlo.app.

A Pimlo account is created and managed by an adult parent or caregiver. Children do not have their own accounts and do not give us information directly; they listen to and explore the stories you create for them. Parent-only areas such as settings, billing and deleting information are protected by a parent check.

Your account. Your email address and password (the password is stored by our authentication provider in a form we cannot read), your sign-in and security records, and your notification choices.

Your child's profile. What you choose to tell us: your child's first name, age, and optionally their gender, the illustrated avatar you pick for them, their interests and favourite kinds of story, things you'd like stories to encourage or avoid, and anything else you write about them. We never ask for photos of your child, their surname, their school or where they live, and we ask you not to include those details.

Your family's stories. The worlds, characters, places, keepsakes, story requests, stories, illustrations and narration created for your household, and the story memory Pimlo keeps so that characters and events can return.

Payments. Your subscription status, plan and billing history. Card details are entered on and held by Stripe, our payment provider; we never see or store your full card number.

Messages and feedback. What you send us, including feedback from the app (with the screen you were on and basic device information) and emails to support.

The launch list and the demo. If you join the launch list or try the demo, your email address, whether you agreed to hear from us and when, how you found us (the referring page and any campaign tags in the link) and when you visited the demo. The demo only shows stories we made in advance.

Technical information. Your IP address, browser and device details, and error and performance records, used to run and protect the service. We design our logs to leave out story text and children's names.

To provide Pimlo (performing our contract with you): creating your account, writing, illustrating and narrating stories for your child, remembering their world between stories, playing and saving stories, taking payments and managing your subscription, and providing support.

To keep stories safe and the service secure (our legitimate interests in protecting children and running a safe service): automatically checking every story, illustration and narration before it plays, preventing abuse and fraud, limiting misuse, and investigating problems you report. If you report a story, or a safety check flags one, we may look at it.

To improve Pimlo (our legitimate interests): understanding whether the service works, how long stories take and where things fail, using records designed to leave out story content wherever possible.

With your consent: sending launch news and occasional story updates, sending notifications you switch on, and analytics cookies. You can withdraw consent at any time.

To meet legal obligations: keeping payment and tax records and responding to lawful requests.

We do not sell personal information, we do not use it for advertising, and we do not use your family's stories in other families' worlds or publish them.

Stories are created with AI services. To write a story, we send the story-writing service the details needed for it: your child's age, any gender you chose, their interests and preferences, your request, and the relevant parts of their story world. Your child's name is not sent: before anything leaves Pimlo, we replace it with a made-up stand-in name, and we put the real name back when the story returns to us. Illustrations are made from scene descriptions and your child's chosen avatar; narration is made from the finished story, so the narration service receives the story text including your child's name. These providers process this information to produce the content we ask for. Every result is checked automatically for safety before it reaches your child, and anything that fails is not shown.

We use these service providers. They process information on our behalf and only as needed to provide their service:

• Cloudflare (United States, global network): hosting, security, bot protection, and storage of illustrations and narration.
• Supabase: our database and sign-in service, holding account, profile and story information.
• DeepSeek (China): writing stories, safety checks of story text, and keeping story memory consistent. Children's names are replaced with stand-ins before anything is sent.
• xAI (United States): narration voices, and timing narration to the text.
• fal (United States): creating and enhancing illustrations and checking them for safety, including through Google (Gemini) image review.
• Stripe (Ireland and United States): payments and subscriptions.
• Resend (United States): sending account and service emails.
• Sentry (United States): error reports when something breaks, designed to leave out story text and children's names.
• PostHog (European Union): records of key events, such as signing up or a story becoming ready, sent from our servers. PostHog does not run in your browser and does not record your screen.
• Google (United States): Google Analytics, only if you accept analytics.

If you switch on device notifications, your browser's push service (for example Google, Apple or Mozilla) delivers a signal to your device; the notification text is fetched from Pimlo directly, so private details do not pass through the push service.

We may also share information if the law requires it, to protect a child or anyone else from harm, or as part of a sale or reorganisation of our business, in which case this notice would continue to apply.

Some providers above process information outside the UK and the European Economic Area, including in the United States and China. When we transfer personal information internationally, we rely on the safeguards the law provides, such as adequacy regulations or standard contractual clauses, and we send only what each provider needs to do its job.

We use essential cookies and storage to keep you signed in, remember which child is listening, keep the app working and protect it from abuse. If you download stories to listen offline, they are stored on that device until you remove them or clear your browser's site data. Analytics cookies are used only if you accept them: Google Analytics then measures visits to public pages and selected parent screens, which sections of our public pages are viewed, which of our links and buttons are used, and whether a launch-list signup succeeded. It uses fixed page and button names, never your email address, children's names, story content or private screens such as story playback. Your analytics choice lasts for your browser session, and you can change it at any time in Analytics settings.

We keep your account, children's profiles and stories while your account exists, including after a membership ends, so your family can still play the stories you made. You can delete a child's profile, or your whole account, at any time in the parent settings.

When you delete your account, we stop using it straight away and erase your account, children's profiles, stories, illustrations and narration from our live systems. Copies in backups expire automatically on their normal schedule, and if a backup is ever restored, deleted accounts stay deleted. We keep payment and tax records for as long as tax law requires (usually six years), and a minimal record that a deletion happened.

Launch-list details are kept until you unsubscribe or ask us to remove them, or deleted if Pimlo stops operating. Technical and security records are kept only as long as needed for their purpose.

Your family's stories and media are private to your account: illustrations and narration are stored privately and delivered only to your signed-in account. We use encryption in transit, access controls, and checks that stop one household from seeing another's information. No service can be perfectly secure, but we work to protect your information and will tell you and the regulator if a breach puts you at risk.

You can ask for a copy of your information, or ask us to correct or delete it, restrict or object to how we use it, or send it to you in a portable format. As a parent, you can make these requests about your child's information too. Where we rely on your consent, you can withdraw it at any time. Every marketing email includes an unsubscribe link, and notifications can be switched off in settings.

To make a request, email support@pimlo.app. We will reply within one month. If you are unhappy with how we have handled your information, please tell us first so we can put it right. You can also complain to the UK Information Commissioner's Office at ico.org.uk, or, if you live in the European Union, to the data protection authority in your country.

Pimlo is designed to be used by parents. We do not knowingly collect personal information directly from children under 13: the details about your child come from you, and children use Pimlo through your account. As a parent, you can review your child's information in the app, change or delete it at any time by editing or deleting their profile, and ask us to stop using it by emailing support@pimlo.app. We do not sell personal information, share it for targeted advertising, or use children's information for advertising of any kind. Depending on your state, you may have additional rights to access, correct or delete your information; contact us to use them.

We will update this notice when Pimlo changes. The date at the top shows when it last changed. If a change affects how we use information you have already given us, we will tell you by email or in the app before it takes effect.