Privacy policy

NomiTale lets a parent or grandparent record their voice once and then hear bedtime stories from our library read in that voice. This policy explains what personal data we collect on nomitale.com and in the NomiTale app, why we collect it, who processes it for us, how long we keep it and what rights you have.

Your AI voice reads catalog stories. With your separate permission, it can also read your private stories after a suitability review. Unrestricted speech, public sharing and audio export are not available.

1. Who we are

NomiTale is operated by Cryptosam LLC, a company registered in the United States (address below). Cryptosam LLC is the data controller for the personal data described in this policy. For any privacy question or request, write to support@nomitale.com.

2. Who NomiTale is for

NomiTale is made for adults. Only people aged 18 or older may create an account or record a voice. Children are the listeners, not users: they do not have accounts and we do not collect data from them. A parent may optionally enter a child's first name and age range to tailor the library; this is never required.

3. Data we collect

On the website:

Waitlist: your email address, language, the page you signed up from, and the time you confirmed your address.
Support form: your name, email address, message and language.
Security data: a one-way hash of your IP address (used for rate limiting and abuse prevention; we do not store the raw IP address with your request), and a Cloudflare Turnstile check that tells us whether a form was sent by a human.
Analytics (only if you accept cookies): pages visited, approximate location derived from the IP address, device and browser type, collected by Google Analytics 4. If you decline, no request is sent to Google.

In the app:

Account data: email address, name, preferred language and country, and your sign-in method (Apple, Google or email link).
Voice recordings: the reading sample you record (about 90–120 seconds) and the recorded consent sentence. We treat these, and the voice model created from them, as biometric / special-category data.
Consent record: which consent text version you accepted, in which language, when, a hash of your IP address and your device's user agent.
Household data: the display name of each voice (for example "Mom" or "Grandpa"), and optionally a child's first name and age range.
Usage data: which stories were prepared in which voice, preparation status, and the number of characters processed (for cost limits).
Subscription status: your plan, its expiry date and the store's transaction identifiers, which we verify directly with Apple or Google. We never see your card or payment details; payments are handled by Apple or Google.
Device data: a push-notification token so we can tell you when a story is ready, and technical error reports (with personal data removed).

We store private story text, titles, reader names, recordings, purchase identifiers and credit history in your account. Manual recordings do not go to AI providers. Optional AI narration sends your text, only with separate permission, to the reviewer shown in the app: OpenAI, Anthropic, or OpenRouter and its specifically named upstream provider. Reviewers receive text, not audio. Approved text then goes to the selected voice provider. A change of processing company requires new permission before new processing. Provider security retention may apply; disabling response storage does not guarantee zero retention. Private stories and recordings remain until deleted; financial records may be retained as legally required.

4. Why we use your data and our legal bases

To provide the service (account, voice creation, story preparation, playback, downloads, subscriptions): performance of our contract with you.
To create and use a copy of your voice: your explicit consent, given on the Voice consent screen together with your recorded consent sentence. You can withdraw it at any time by deleting the voice.
To keep the service safe (rate limiting, bot protection, preventing misuse of voices, error monitoring): our legitimate interest in protecting users and the service.
Website analytics: your consent through the cookie banner.
Waitlist launch emails: your consent, confirmed by clicking the link in our confirmation email.
Keeping records required by law (for example tax records or proof of consent): legal obligation and the establishment or defence of legal claims.

We do not use your data for advertising, we do not sell or "share" personal data for cross-context behavioural advertising, and we do not use your voice or stories to train artificial-intelligence models.

5. Who processes your data

The following services support NomiTale; optional AI providers are used only as disclosed before consent.

Hetzner Online GmbH (Germany) — server hosting for our website, API and databases.
Cloudflare, Inc. (USA) — network security, content delivery, bot protection (Turnstile) and encrypted file storage (R2) for voice samples and prepared audio.
Amazon Web Services (Amazon SES, Ireland region) — sending emails such as sign-in links and waitlist confirmations.

The app identifies the selected voice provider before you consent: Fish Audio or ElevenLabs. Only that provider receives your cleaned voice sample and approved story text, under an internal identifier. Stored voice copies at previous providers are also included when you delete your voice. Processing may take place outside your country. Provider processing and transfer terms must be reviewed before enabling a provider; this draft is not confirmation that those agreements are complete.

Apple (App Store) and Google (Google Play) — selling subscriptions and confirming their status to our servers. They process payments as independent controllers under their own terms.
Expo (USA) — delivering push notifications.
Sentry — error monitoring, with personal-data scrubbing enabled.
Google Ireland Ltd. / Google LLC — website analytics through Google Tag Manager and Google Analytics 4, only after you accept cookies. Advertising features are switched off.
Apple and Google — if you choose Sign in with Apple or Google.

We may also disclose data if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the business (in which case this policy continues to apply).

We store private story text, titles, reader names, recordings, purchase identifiers and credit history in your account. Manual recordings do not go to AI providers. Optional AI narration sends your text, only with separate permission, to the reviewer shown in the app: OpenAI, Anthropic, or OpenRouter and its specifically named upstream provider. Reviewers receive text, not audio. Approved text then goes to the selected voice provider. A change of processing company requires new permission before new processing. Provider security retention may apply; disabling response storage does not guarantee zero retention. Private stories and recordings remain until deleted; financial records may be retained as legally required.

6. International transfers

Cryptosam LLC is based in the United States, and several of our providers are in the United States. Your data may therefore be processed outside your country, including outside the European Economic Area, the United Kingdom, Turkey and Brazil. Where the law requires it, we protect these transfers with appropriate safeguards such as the European Commission's Standard Contractual Clauses, the EU–US Data Privacy Framework where the recipient is certified, the standard contracts required under Turkish law (KVKK Article 9) and equivalent mechanisms under other applicable laws. You can ask us for more information about these safeguards.

7. How long we keep data

Voice sample, consent recording and voice model: until you delete the voice or your account. The copy held by Fish Audio / ElevenLabs may be removed earlier and recreated from our encrypted sample when needed.
Prepared story audio: until the voice or the account is deleted.
Consent record (text version, date, language — without the audio): for as long as needed to prove that consent was given, up to the applicable legal limitation period after the voice is deleted.
Account data: until you delete your account.
Waitlist: until you unsubscribe or ask us to remove you, and in any case no longer than 12 months after the app launches. Unconfirmed sign-ups are deleted after 30 days.
Support messages: up to 2 years after the conversation ends.
Security logs: up to 90 days.
Analytics data: according to the data-retention setting in Google Analytics (at most 14 months).

When you delete a voice, we hide it in the app immediately and aim to remove it everywhere — including from Fish Audio / ElevenLabs — within 24 hours. Remaining copies in encrypted backups are overwritten within 30 days.

We store private story text, titles, reader names, recordings, purchase identifiers and credit history in your account. Manual recordings do not go to AI providers. Optional AI narration sends your text, only with separate permission, to the reviewer shown in the app: OpenAI, Anthropic, or OpenRouter and its specifically named upstream provider. Reviewers receive text, not audio. Approved text then goes to the selected voice provider. A change of processing company requires new permission before new processing. Provider security retention may apply; disabling response storage does not guarantee zero retention. Private stories and recordings remain until deleted; financial records may be retained as legally required.

8. How we protect data

Voice samples and consent recordings are encrypted in our application before they are stored, and again at rest by our storage provider. Storage buckets are private; audio is delivered only to the signed-in owner through short-lived links. Access to production systems is restricted and logged. Our logs do not contain story text, audio or email addresses. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.

9. Your rights

Depending on where you live, you have the right to:

access the personal data we hold about you and receive a copy;
correct inaccurate data;
delete your data (you can delete a voice or your whole account in the app, or on nomitale.com/delete-account without the app);
export your data in a portable format;
restrict or object to certain processing;
withdraw consent at any time, without affecting processing that took place before;
not be discriminated against for exercising your rights;
lodge a complaint with your data-protection authority.

To use these rights, write to support@nomitale.com from the email address linked to your account. We answer within 30 days and may ask you to confirm your identity. If you live in Turkey, see also our KVKK clarification notice. If we refuse a request, you may appeal by replying to our answer.

10. Cookies and similar technologies

The website stores your cookie choice in your browser's local storage. Analytics cookies from Google are set only after you click "Accept". Cloudflare may use strictly necessary cookies to protect the website from attacks. You can change your choice at any time with the "Cookie settings" link in the footer. The app does not use advertising or third-party tracking tools.

11. Changes to this policy

We will update this policy when our service or the law changes. The version number and date at the bottom of this page show the current version. If a change materially affects how we use your data, we will tell you in the app or by email before it takes effect.

Tell NomiTale about inappropriate content or voice misuse. Only the story reference, selected reason and your note are sent to our support team. Audio and story text are not attached. Reports are deleted after 90 days or when you delete your account.