Privacy Policy · Nori Tales

Noritales Privacy Policy

Last updated: October 23, 2026
Operator: Noriloop LLC, New Mexico, United States
Service: Noritales — https://noritales.com

Noriloop LLC ("Noriloop," "we," "us," or "our") operates Noritales, a digital platform that provides personalized children's stories, audiobooks, and related digital features.

This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, when we share it, and the choices available to parents, guardians, and other users.

Noritales is designed so that paid accounts and purchases are managed by adults. Where information about a child is provided, it must be submitted by a parent, legal guardian, or another adult with lawful authority to do so.

1. Who Is Responsible for Your Data?

For personal information processed through the Noritales service, the data controller is:

Noriloop LLC
New Mexico, United States
Website: https://noritales.com

For privacy questions, requests, or complaints, please contact us using the support or contact method published on the Noritales website.

Payments are processed by Stripe, our payment processor, which handles payment card details under its own privacy terms. See the Stripe Privacy Policy.

2. Who May Use Noritales?

Noritales accounts, subscriptions, purchases, and personalization tools are intended to be managed by adults.

You must be at least 18 years old, or the age of legal majority in your jurisdiction, to create a paid account or enter into a purchase agreement with us.

Children should not independently create paid accounts, purchase products, submit personal information, upload images, or provide voice recordings to Noritales.

If you provide personal information about a child, you confirm that you are the child's parent or legal guardian, or that you otherwise have lawful authority to provide the information and authorize its use for the requested Noritales service.

3. Information We Collect

Depending on the features you use, we may collect the following categories of information.

3.1 Account and Contact Information

This may include:

name;
email address;
country or region;
account identifiers;
login and authentication information;
language preferences; and
customer support communications.

3.2 Parent or Guardian Information

Where required for account management, consent, safety, fraud prevention, or legal compliance, we may process information relating to the parent, guardian, or other authorized adult managing the account.

3.3 Child Profile and Personalization Information

A parent or guardian may choose to provide information used to personalize a story or audiobook, such as:

a child's first name or nickname;
age or age range;
interests and preferences;
story themes selected by the parent;
character preferences;
language preferences;
how a story should refer to the child in its sentences (as a girl, as a boy, or by name only), if the parent or guardian chooses to answer; and
other information intentionally entered by the adult user.

We encourage parents and guardians to provide only the minimum information needed for the requested personalization.

The story reference preference is optional and has a single purpose: to let a story's sentences refer to the child in the way the parent or guardian chose. It is a grammar instruction, not an identity record. It is sent to our artificial intelligence provider only as a grammar instruction for writing the requested book, it is never used for advertising or analytics, and it can be changed or removed at any time from the child's profile (books already made are not rewritten). It is deleted together with the child profile or the account.

3.4 Images and Photographs

Where a feature allows image-based personalization, an authorized adult may upload a photograph or image.

Images may be processed to create illustrations, characters, or other personalized digital content requested by the user.

You should not upload an image unless you have the legal right and authority to use it.

3.5 Voice Recordings and Audio

Where voice personalization is offered, an authorized adult may provide a voice recording.

Voice recordings may be processed to generate narration or other audio features specifically requested by the account holder.

Do not upload or submit another person's voice unless you have that person's permission or another lawful basis to do so.

3.6 Story Inputs and Generated Content

We may process:

prompts;
story topics;
custom text;
personalization instructions;
generated stories;
illustrations;
audiobook files; and
related content necessary to provide the requested service.

3.7 Purchase and Subscription Information

When you purchase a subscription or digital product, we may receive information such as:

product purchased;
subscription status;
billing period;
transaction identifier;
currency;
amount paid;
country or tax jurisdiction;
refund status; and
payment status.

Noriloop LLC does not need to receive or store your full payment card number when payment is processed by our payment provider.

Payments on the Noritales website are processed by Stripe, our payment processor. Noriloop LLC is the seller; Stripe processes payment card information under its own privacy terms.

3.8 Technical and Usage Information

When you use the Service, we may automatically receive limited technical information, such as:

IP address;
device and browser type;
operating system;
approximate country or region;
login and security events;
pages or features used;
timestamps;
error logs; and
cookie or similar technology identifiers.

We use this information to operate, secure, troubleshoot, and improve the Service.

4. How We Use Personal Information

We may use personal information to:

create and manage user accounts;
provide subscriptions and purchased digital products;
personalize stories, illustrations, and audiobooks;
generate requested digital content;
provide customer support;
process and manage purchases, subscription status, cancellations, and refunds;
authenticate users and protect accounts;
prevent fraud, abuse, and unauthorized access;
detect technical errors and maintain service reliability;
comply with legal, tax, accounting, and regulatory obligations;
enforce our Terms of Service;
protect the safety and rights of users, children, Noriloop, and third parties;
improve existing features and develop new features using appropriately controlled data; and
communicate important service, security, billing, or account information.

We do not use children's personal information for behavioral advertising.

5. Children's Privacy

Children's privacy is especially important to us.

Noritales is a service for families, but the account holder and purchaser must be an adult. Features involving a child's personal information are intended to be operated by the parent or guardian.

Where applicable law requires parental consent before a child's personal information may be collected, used, or disclosed, we will require or rely on appropriate authorization from the parent or guardian before processing that information.

Depending on the jurisdiction, additional protections may apply to children under a particular age. For example, U.S. law provides additional protections for personal information collected online from children under 13, and European countries may apply different age thresholds for parental authorization.

Parents and guardians may contact us to:

ask what personal information we hold about their child;
request access to that information;
request correction;
request deletion where applicable;
withdraw a consent previously provided, where processing is based on consent; or
ask us to stop further collection or use where required by law.

If we learn that personal information from a child has been submitted without the required authorization, we may delete or restrict that information as appropriate.

6. Photos, Audio, Voice, and Biometric-Like Data

Photos and voice recordings may be sensitive because they can relate to a person's likeness or voice.

When these materials are submitted for personalization:

we process them only for purposes connected with the requested feature and related service operations;
we limit access to authorized systems, personnel, and service providers that need access to perform the service;
we do not permit users to submit another person's likeness or voice without appropriate authority;
we do not sell uploaded child photographs or voice recordings; and
we do not use a child's photograph or voice recording for targeted advertising.

Where a third-party technology provider is required to process an image, audio file, or other input to provide the requested feature, we may transmit the minimum information reasonably necessary for that processing, subject to contractual, security, and legal safeguards where applicable.

7. Artificial Intelligence and Automated Processing

Some Noritales features use artificial intelligence or other automated technologies to create or personalize stories, illustrations, narration, or related content.

Information you intentionally provide for these features may be sent to technology service providers solely as needed to perform the requested processing and operate the Service.

We seek to minimize personal information included in such processing and apply controls appropriate to the nature of the feature.

Noritales does not make legally significant decisions about children through automated decision-making.

8. Legal Bases for Processing

Where laws such as the EU or UK GDPR apply, we process personal information only when we have an appropriate legal basis. Depending on the activity, this may include:

Contract

We process information that is necessary to provide a purchased or requested service, such as maintaining an account, generating purchased content, or managing a subscription.

We may rely on consent for certain optional personalization features or where consent is specifically required by law.

Where the information concerns a child, consent or authorization must be provided by a parent or guardian where required.

Legitimate Interests

We may process limited information where reasonably necessary to:

secure the Service;
prevent fraud and abuse;
diagnose technical problems;
improve reliability; and
protect our legal rights.

We balance these interests against the privacy rights of users and apply additional caution where children's information is involved.

Legal Obligation

We may process information where necessary to comply with applicable laws, court orders, tax requirements, accounting requirements, or lawful government requests.

We do not sell personal information.

We may share limited information with service providers that help us operate Noritales, such as providers of:

cloud hosting and storage;
payment processing and Merchant of Record services;
email delivery;
customer support;
security and fraud prevention;
content generation and artificial intelligence;
image or audio processing;
analytics and service performance monitoring; and
infrastructure and database services.

These providers receive only the information reasonably necessary to perform their services.

We may also disclose information:

when required by law;
in response to a valid legal process;
to protect users or children from harm;
to investigate fraud, security incidents, or abuse;
to enforce our legal rights; or
in connection with a merger, acquisition, financing, restructuring, or sale of business assets, subject to appropriate legal safeguards.

10. Stripe and Payment Processing

Purchases made through the Noritales website are sold by Noriloop LLC and processed by Stripe, our payment processor.

Stripe collects and processes the information needed to complete a transaction, including payment card details, billing details, fraud-prevention information, and the information needed to calculate applicable taxes through Stripe Tax (for example your billing country and postal code).

Noriloop LLC receives the transaction information needed to provide the purchased product or subscription, such as the plan, the amount, and the payment status, but does not receive or store your full payment card number.

For more information, please review the Stripe Privacy Policy.

11. Cookies and Similar Technologies

Noritales may use cookies or similar technologies that are necessary to:

keep users signed in;
maintain sessions;
remember preferences;
protect accounts;
prevent fraud;
maintain checkout functionality; and
understand service performance.

Where required by applicable law, non-essential analytics, advertising, or similar technologies will be used only after the required notice or consent.

You may be able to manage cookies through your browser settings or any consent controls made available on the website.

12. Advertising

We do not use children's personal information for targeted or behavioral advertising.

On adult-facing pages of the website (such as the home page, blog, programme and sample-book pages, plans, sign-up and checkout results), and only where you have given any consent the law requires, we use Google Analytics and the Meta Pixel, together with Meta's Conversions API, to measure visits and the performance of our advertising. These tools receive technical and event information (for example the pages viewed, sign-up and purchase events, and a hashed form of your e-mail address when you sign up or buy). They never receive a child's name, a book's text or any other information about a child. You can decline in the cookie banner.

If Noritales uses marketing or advertising technologies on adult-facing parts of the Service, we will apply appropriate consent and privacy controls as required by applicable law.

We do not knowingly permit third parties to build advertising profiles based on a child's Noritales activity.

13. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to:

provide active accounts and purchased services;
maintain user libraries and generated content;
meet legal, tax, accounting, and fraud-prevention obligations;
resolve disputes;
maintain security; and
enforce agreements.

Retention periods may differ depending on the type of information and legal requirements.

Where an account or personalized content is deleted, some limited information may remain temporarily in backups, security logs, transaction records, or records that we are legally required to retain.

We aim to apply shorter and more limited retention where appropriate for children's photos, voice recordings, and other sensitive personalization inputs.

14. Data Security

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or misuse.

These measures may include:

access controls;
encryption in transit;
authentication protections;
restricted administrative access;
logging and monitoring;
secure hosting practices; and
review of service providers that process personal information.

No online system can guarantee absolute security. Users should also protect their account credentials and notify us promptly of suspected unauthorized access.

15. International Data Transfers

Noriloop LLC is a United States company, and Noritales may use service providers located in the United States and other countries.

As a result, personal information may be processed outside the country where you live.

Where required by applicable law, we use appropriate safeguards for international transfers, such as contractual protections, adequacy mechanisms, or other legally recognized transfer methods.

16. Your Privacy Rights

Depending on where you live, you may have rights concerning your personal information, including the right to:

request access;
request correction;
request deletion;
request a copy or portability of certain data;
object to certain processing;
request restriction of processing;
withdraw consent where processing is based on consent; and
lodge a complaint with a competent data protection authority.

These rights are subject to applicable legal conditions and exceptions.

Parents and guardians may exercise applicable rights on behalf of their child where authorized by law.

We may need to verify your identity and authority before completing a privacy request.

17. U.S. State Privacy Rights

Residents of certain U.S. states may have additional rights under state privacy laws.

Where applicable, these may include rights to know, access, correct, delete, or obtain a copy of personal information, and rights relating to certain forms of sharing, targeted advertising, profiling, or sale.

Noriloop LLC does not sell children's personal information.

Where legally required, we will provide mechanisms for exercising applicable state privacy rights.

18. European Economic Area, United Kingdom, and Switzerland

If you are located in the European Economic Area, United Kingdom, or Switzerland, you may have additional data protection rights under applicable law.

You may also have the right to lodge a complaint with your local supervisory authority.

Where a child's consent would otherwise be relied upon for an online service, the age at which the child may legally provide that consent varies by jurisdiction. Noritales therefore requires the relevant parent or guardian to manage child personalization features where parental authorization is required.

19. Do Not Submit Unnecessary Sensitive Information

Please do not submit:

government identification numbers;
financial account passwords;
medical diagnoses;
precise location information;
school records;
information revealing highly sensitive characteristics; or
any other sensitive information

unless a Noritales feature specifically and lawfully requests it and the information is genuinely necessary.

Story prompts should avoid unnecessary personally identifying information.

20. Third-Party Links

Noritales may contain links to third-party websites or services.

We are not responsible for the privacy practices of third parties that operate independently from Noriloop LLC. We encourage users to review the privacy notices of those services.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in:

our products;
technology;
service providers;
legal requirements; or
privacy practices.

The current version will be posted on the Noritales website with an updated "Last updated" date.

Where required by law, we will provide additional notice or obtain consent before applying a material change.

22. Contact Us

For privacy questions, parental requests, data access or deletion requests, or concerns about a child's information, contact Noriloop LLC using the support or contact method published on:

https://noritales.com

When contacting us about a privacy request, please provide enough information for us to identify the relevant account while avoiding unnecessary sensitive personal information.

Noriloop LLC
New Mexico, United States
Noritales: https://noritales.com