Mentari Privacy Policy
Tailored Tales, LLC ("Tailored Tales," "Mentari," "we," "our," or "us")
Effective date: July 30, 2025
1. Introduction
Mentari is a conversational learning companion designed for children and administered and supervised by their parents or legal guardians. We are firmly committed to:
- Collecting only the minimum personal information needed to deliver a safe, engaging experience
- Never selling or renting personal data for advertising or marketing purposes
- Giving parents complete visibility into, and control over, their child's interactions within the app
This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you (the parent or guardian) and your child ("you," "your," or "user") access or use Mentari, our websites, and any related services (collectively, the "Services"). Your use of the Services is also governed by our Terms of Service.
2. What We Collect
| Category | Source | Examples | Why We Collect |
|---|---|---|---|
| Parent Profile Data | Provided by you | E‑mail, password, birth year (used as the Parent Dashboard passcode) | Account creation, secure sign‑in, parental consent |
| Child Profile Data | Provided by parent | Child's first name, age, gender, single photo for avatar generation | Personalized in‑app identity |
| Conversation Content | Generated in the app | Text or voice messages exchanged between the child and Mentari | Deliver daily summaries to parent; content moderation; improve child's experience; safety and content moderation |
| Parental Controls & Settings | Provided by parent | Topics to avoid, words/phrases blocked, notification preferences | Enforce conversation boundaries; send daily summary e‑mails |
| Device & Usage Info | Collected automatically | Device ID, device type/OS, app version, crash logs, basic analytics events (non‑identifying) | Notifications, app functionality, security, troubleshooting |
| Customer Support via Intercom (Parent Dashboard only) | Provided by parent; collected automatically by Intercom | Messages sent in the in‑app Help chat and any attachments; Help Center search queries (if enabled). Automatically collected by Intercom: device type/OS, app version, language, time zone, a device‑level identifier, IP‑derived coarse location, and product‑interaction events. | Provide support, troubleshoot issues, and improve the Help experience |
We do NOT:
- collect precise GPS location, contact lists, or advertising identifiers;
- allow third‑party ad networks, behavioral advertising cookies, or social‑media trackers;
- store the child's source photo after the avatar is created.
- store any photos sent as part of the conversation flow
3. How We Use Information
- Provide & Maintain the Services – create avatars, facilitate contextually aware real-time conversations, deliver daily summary e‑mails, and operate core features.
- Safety & Moderation – automatically flag potentially concerning content and notify the parent; enforce generic and provided topic filters.
- Parental Visibility – surface full conversation logs in the Parent Dashboard and via optional daily e‑mail digests.
- Product Improvement – de‑identified, aggregated analytics help us understand feature usage and app performance.
- Legal & Compliance – meet COPPA and other legal obligations, resolve disputes, detect fraud, and protect the security of our users.
4. Legal Bases for Users in the EEA/UK
We process personal information only when we have a valid legal basis under the EU GDPR or UK GDPR:
- Consent – verified parental consent (see Section 6) for a child to use Mentari.
- Contractual Necessity – to provide the Services the parent requests.
- Legal Obligation – when compliance with a legal requirement is necessary.
- Legitimate Interests – limited, strictly‑necessary analytics and fraud‑prevention that do not override your rights.
5. How & When We Disclose Information
We do not sell or rent personal information. We disclose it only:
| Recipient | Purpose | Safeguards |
|---|---|---|
| Service Providers (hosting infrastructure, e‑mail delivery, avatar‑generation ML) | Operate core functionality under our direct instructions | Bound by strict data‑processing agreements; may not use data for their own purposes |
| Customer Support (Intercom) | We use Intercom to provide in‑app support chat. We share the parent’s contact details (name, e‑mail), our internal user/app identifiers, the Mentari nickname, and the content of support messages. | Intercom acts solely as our processor under a Data Processing Agreement and may process limited technical metadata to deliver the service. See Intercom’s Privacy Policy, DPA, and Sub‑processor list. We do not send children’s personal information to Intercom; the Help chat is available only in the PIN‑gated Parent Dashboard. |
| Legal Authorities | When required by subpoena, court order, or to enforce legal rights | We evaluate each request and disclose the minimum necessary |
| Successor Entity | In connection with a merger, acquisition, or asset sale | We will require the successor to honor this Policy or notify you of material changes |
We never disclose a child's personal information for third‑party advertising or profiling.
6. Children's Privacy & Parental Controls
Mentari complies with the U.S. Children's Online Privacy Protection Act (COPPA) and similar laws globally.
- Verifiable Parental Consent – The parent must create the account, upload the avatar photo, and accept this Policy and the Terms of Service before a child can interact with Mentari.
- Daily Summaries & Full Logs – Parents automatically receive (or can view in‑app) complete transcripts of all conversations.
- Topic Filters – Parents can set forbidden themes (e.g., "no scary stories," "avoid discussions of loss") that the AI will honor. Mentari also has a long list of topics and themes avoided by default.
- Flagged Content Alerts – If Mentari detects potentially concerning topics (e.g., bullying, self‑harm), an alert is sent to the parent dashboard and by e‑mail.
- Review, Correct, or Delete – Parents may at any time access, review, or request deletion of their child's information (see Section 9).
- No Photos Stored – The original child photo is permanently deleted immediately after generating the avatar image. Only the avatar/cartoon representation remains.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Avatar image | Stored until parent deletes the child's profile or requests deletion |
| Conversation transcripts & extracted "memories" | Retained for the life of the child's profile so Mentari can remember past interactions and provide a consistent experience. If the parent deletes the profile—or requests deletion—we securely erase both transcripts and memories. |
| Parent account data | Maintained while the account is active and for an additional period as required for legal, accounting, or security purposes |
We periodically review stored data to ensure it is still needed for personalization or required by law. When deletion is requested, we anonymize or securely erase the data within 30 days.
Support conversations handled via Intercom are retained consistent with the general schedule above and can be deleted upon request. Intercom processes this data solely as our processor under contract (DPA/SCCs).
8. Security
We use industry‑standard administrative, technical, and physical safeguards—including encryption in transit and at rest, role‑based access controls, and regular security audits—to protect information. No Internet transmission is 100 % secure, but we continuously work to keep risks to a minimum.
9. Your Rights & Choices
Parents (global) may:
- Access or download their child's personal data
- Correct inaccurate information
- Delete their child's data and/or close the account
- Withdraw consent at any time (which disables the child's access)
California Residents have additional rights under the CCPA/CPRA, including the right to know, delete, and correct personal information, as well as to limit use of "sensitive personal information" (we do not use data in ways requiring this limitation).
EEA/UK Residents may exercise rights of access, rectification, erasure, restriction, objection, and data portability. You also have the right to lodge a complaint with your local supervisory authority.
To exercise any right, e‑mail us at [email protected]. We will verify your identity (and parental status, where applicable) before fulfilling the request.
10. International Data Transfers
We host our Services in the United States. When we transfer personal information from the EEA, UK, or other regions with data‑protection laws, we rely on approved Standard Contractual Clauses or other lawful mechanisms. By using the Services, you understand that your information may be processed in jurisdictions that may have different data‑protection rules than your home country.
11. Third‑Party Links
Mentari may contain links to external sites (e.g., support articles, parent resources). We are not responsible for the privacy practices of those third parties; please review their privacy policies separately.
12. Changes to This Policy
If we make material changes, we will post the updated policy in‑app and notify parents via e‑mail at least 30 days before the changes take effect. Continued use after the effective date constitutes acceptance.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact:
Tailored Tales, LLC
Attn: Privacy Officer
Address: Westlake, OH 44145
E‑mail: [email protected]
We will respond within the timeframe required by applicable law (30 days for most jurisdictions).
14. Glossary (Key Terms)
- "Parent Dashboard" – the secure section of the app accessible only with the parent's passcode.
- "Personal Information" or "Personal Data" – any information that directly or indirectly identifies an individual child or parent.
- "Processing" – any operation performed on personal information, such as collection, storage, use, disclosure, or deletion.
- "Service Provider" – a third party that processes personal information on our behalf, under contract, and solely to perform services for Mentari.
Children's Privacy Notice (COPPA‑Focused Summary)
- We collect: first name, age, gender, single photo (deleted after avatar creation), conversation content, and non‑identifying device info.
- Why: to create a personalized cartoon avatar and to have safe, educational chats.
- Parental rights: review, delete, or stop collection at any time via the Parent Dashboard or by contacting us.
- We never: show ads, track location, or share data with advertisers.
- Security: we use encryption and strict access controls.
- Questions? Ask a grown‑up to e‑mail us at [email protected]