Privacy Notice

How the English Loomtale service handles personal information. This notice is informational; acknowledging it is not blanket consent to processing, advertising or recurring payments.

1. Controller and contact

The controller is Piqle inc., a corporation incorporated in Delaware, United States (Delaware file number 2644967), address 919 North Market Street, Suite 950, Wilmington, DE 19801, United States. Contact info@piqle.io or +1 (813) 535-9353 for privacy questions and rights requests.

2. Information and purposes

Account information includes your email, account identifier and authentication records. We use it to create and secure an account and administer the service you request. Passwords are handled through authentication systems and should never be sent to support.

Reading information includes choices, the current scene, progress, bookmarks and reader preferences. Guest saves remain in the browser; supported saves sync to the account after sign-in. Their purpose is to provide the reading experience and continuity across devices, not to infer sensitive characteristics for advertising.

Transaction records include payment references, amount, currency, subscription status, billing period, contact details needed for receipts, the terms and recurring-payment authorization, and cancellation records. We use them for service delivery, accounting, legal obligations, support, refunds and disputes. We do not store full card numbers or card security codes.

Support records contain your contact details, message and relevant attachments. Technical records may include IP address, request time, browser or device characteristics and security logs needed to deliver and protect the website and investigate faults. Do not send sensitive records unrelated to your request.

Analytics information is collected on this website through Amplitude when analytics is on (see section 7). It covers the pages you view with their full address and title, the referring page and campaign details, sessions, clicks on links, buttons and other page elements with their visible text (such as a story choice; text that looks like an email address or card number is masked), repeated or unresponsive clicks, which form fields you changed and whether a form was started or submitted (not what you typed), file downloads, scrolling and which parts of a page were shown, page-load performance, and requests from the page that fail with a server error, including their full address. It also covers product events such as viewing a story, opening, starting and finishing an episode, viewing a scene, choosing a story option (recorded by its identifier), active reading or listening time, signing up or signing in (the method only), invitations, starting checkout (billing period, price and currency) and confirmed subscription access.

Each analytics event includes a random device ID, a session ID, your account ID when you are signed in, the time, and your browser's user agent and language; our product events also include the site's language and market. Amplitude receives your IP address, uses it to estimate your approximate location (country, region and city) and may store it with the event. We do not send your email address, password or payment card details to Amplitude. We use analytics to understand and improve the service and to find faults, not for advertising.

Our iOS and Android apps also send product events of the same kind to Amplitude, together with app lifecycle events (such as installing, opening and closing the app), a device identifier, device and operating-system details, language, app version and, when you are signed in, your account ID. App versions before iOS 1.1.1 and Android 0.3.2 send your IP address, from which Amplitude estimates approximate location (country, region and city); from iOS 1.1.1 and Android 0.3.2, the apps do not send your IP address and do not share location more precise than country.

3. Legal bases where required

Contractual processing supplies an account, paid access and requested saves. Legal-obligation processing covers required financial records and lawful requests. Where permitted, legitimate interests support proportionate security, service reliability and handling claims, balanced against users' rights. Processing that requires consent, such as optional tracking or marketing, starts only after the necessary separate choice and can be withdrawn. On the website, analytics for visitors from the European Economic Area, the United Kingdom or Switzerland, or whose country we cannot determine, is based on consent. For other website visitors and in the apps, where a legal basis is required, analytics is based on our legitimate interest in understanding and improving the service, and you can object at any time.

We do not claim that accepting these terms supplies consent for every purpose. We do not make decisions with legal or similarly significant effects solely from automated evaluation of fictional story choices. If data is necessary for a function, we explain the effect of not providing it.

4. Recipients and transfers

Vercel provides website and API hosting, including global content delivery. Supabase provides account authentication and the database in the West US (Oregon) region, United States. Authentication email uses the built-in Supabase email service. If you purchase a subscription, Stripe processes the payment. Amplitude, Inc. provides product analytics and stores analytics information in the United States. These providers receive the account, technical, analytics or transaction information needed to perform their respective tasks.

We use infrastructure, authentication, database, email, payment and analytics providers only for their specified role. Stripe and banks process transaction information under their own applicable terms and privacy notices. The English service processes account and analytics information in the United States, including for users outside the United States. You can contact us for information about the safeguards applicable to a particular transfer.

We may disclose information when lawfully required, to protect rights in a specific dispute or incident, or in a business transfer subject to appropriate protections and notice. We do not publish private reading histories or sell personal information as a feature of the service.

We assess cross-border transfers under the laws applicable to the customer and the processing involved. Accepting the Terms is not blanket consent to international transfers. Contact the privacy address above to request details of recipients and applicable safeguards.

5. Retention

Account information and cloud saves are kept for as long as needed for an active account and the requested service. On a verified deletion request, we remove or de-identify information no longer needed and explain any records that must remain.

Financial, consent and dispute records may need to be retained for statutory periods or specific legal claims. Security logs are limited to legitimate operational and security needs. Supabase maintains daily database backups under the current seven-day backup window. Copies are used for recovery, and restoring a backup must not reactivate a withdrawn permission. Retention is determined by purpose, mandatory recordkeeping and specific disputes, not by an unlimited right to keep everything.

Browser saves remain until you or the service removes them. Deleting browser data does not erase server records or cancel a subscription.

Amplitude keeps analytics events while our Amplitude account is active, unless we delete them sooner. Deleting your Loomtale account does not automatically delete analytics events already sent to Amplitude; ask us using the contact details in section 1 and we will request their deletion. The analytics cookies described in the Cookies and Local Storage Notice expire 365 days after they were last updated.

6. Choices and rights

Depending on applicable law, you may request access, correction, deletion, restriction, a portable copy, or object to qualifying processing. You can withdraw consent without affecting the lawfulness of processing before withdrawal. On the website, you can withdraw analytics consent or object to analytics at any time with Cookie settings, which is also linked in the site footer; for the apps, contact us. Contact info@piqle.io. We verify identity only to the extent necessary and respond within applicable deadlines, explaining any lawful extension or exception.

Where applicable, you may use an authorized agent, appeal a decision or complain to your data-protection authority. We do not require you to waive rights as a condition of submitting a request. We do not operate targeted advertising or sell or share information for cross-context behavioural advertising in the current service; if practices change, required disclosures and opt-out controls must be implemented first.

A deletion request for a subscribing account also requires stopping future charges. Some records may remain for legal compliance; we explain why. This notice does not imply that all jurisdiction-specific rights apply to every individual or that regulatory thresholds have already been assessed.

7. Cookies, marketing and children

See the Cookies and Local Storage Notice for browser storage. On the website, Amplitude analytics starts for visitors from the European Economic Area, the United Kingdom or Switzerland, or whose country we cannot determine, only after they select Accept, and other visitors can turn it off in Cookie settings. The current service does not use advertising trackers. Necessary account, security and reading storage is separate from your analytics choice.

Service emails such as authentication, receipts and subscription notices are not an authorization for promotional email. Optional marketing requires an appropriate separate opt-in and a usable unsubscribe method where required.

Loomtale is not directed to children under 13. We do not knowingly collect personal information from anyone under 13, or under the higher minimum age that applies where they live for using online services without a parent's consent; if we learn that we have, we delete it. Teenagers aged 13 to 17 may use Loomtale with a parent's or guardian's permission. We do not show advertising, sell personal information or build advertising profiles, and we do not collect precise location. A parent or guardian may contact support to review or delete a teenager's account and reading data. Content warnings for specific stories must also be respected.

8. Security and updates

We use safeguards proportionate to the data and risks, including access restrictions, protected connections and operational recovery controls. No system can guarantee absolute security; we meet applicable incident-response and notification obligations.

We publish a dated version and give additional notice for material changes when required. A new notice alone does not authorize an incompatible purpose or replace consent that the law requires.