Privacy Policy

Pineapple Storytime LLC ("Pineapple Storytime," "we," "our," or "us") is a New Mexico limited liability company with principal offices at 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110. This Privacy Policy describes how we collect, use, and protect information when you use our Service.

1. Information We Collect

We collect only what's needed to run your account:

Account information. When you create an adult account, we collect your name, email address, and a password (stored as a one-way hash). For organizational accounts we also collect the organization name, your role, and any locations/classrooms you set up.

Payment information. Subscription payments are processed by Stripe. Stripe handles your card information directly; we never see or store your full card number. We receive only a customer token, the last four digits, card brand, and billing country.

Usage data. We record which stories your account opens, reading progress, and feature usage so we can improve the platform and show you activity on your home page.

Communications you send. Announcements, direct messages, and calendar events you create on organizational accounts are stored so other members can see them.

Technical data. Standard server logs (IP address, browser type, pages viewed, timestamps) for security and troubleshooting.

2. Children's Privacy (COPPA)

The Service is designed to be used by adults. We do not knowingly collect any personal information from anyone under 13. Children do not sign up, log in, or provide data to the Service. If a child accesses the Service, they do so under the supervision of an adult account holder, and the Service does not capture their name, image, voice, contact information, or behavioral data.

If you believe we have inadvertently received information from a child, please contact us at support@pineapplestorytime.com and we will delete it promptly. We comply with the Children's Online Privacy Protection Act (COPPA).

3. How We Use Information

We use your information to:

• provide, maintain, and improve the Service;
• process subscriptions, payments, and refunds;
• personalize your reading experience and home page;
• send account notifications, invoices, and activity digests you opt in to;
• protect the security and integrity of the Service;
• comply with legal obligations.

We do not sell your personal information. We do not use your data to train AI models. We do not serve third-party advertising.

4. Information Sharing

We share information only as needed:

• Payment processing. Stripe, to process subscriptions.
• Hosting & email. Vercel (hosting), Supabase (database), and Amazon Web Services (transactional email).
• Within your organization. Admins may see member names, roles, and reading activity for their organization and locations.
• Legal. When required by law, subpoena, or to protect rights, safety, or property.
• Business transfers. In the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

5. Data Security

We use industry-standard security measures: HTTPS for all traffic, encryption of data at rest in our database, hashed passwords, role-based access controls, and audited service providers. No method of electronic storage is 100% secure, but we work to protect your information and notify you promptly of any breach that affects you.

6. Data Retention

We retain your information for as long as your account is active. If you close your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain records longer (for example, tax or billing records). Backups may persist for up to 90 days before being overwritten.

7. Your Rights

You have the right to:

• access and receive a copy of your personal data;
• correct inaccurate information;
• request deletion of your account and data;
• opt out of marketing emails at any time (transactional emails like invoices and security notices will still be sent);
• unsubscribe from or cancel your paid subscription at any time from your account settings.

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what we collect and to request deletion. Residents of the EU/UK have rights under the GDPR, including data portability and objection to processing. To exercise any of these rights, email support@pineapplestorytime.com.

8. Cookies & Tracking

We use essential cookies to keep you logged in and remember preferences. We use limited, first-party analytics to understand aggregate usage (e.g., most-read stories). We do not use third-party advertising cookies or cross-site trackers. You can control cookies through your browser settings.

9. International Data Transfers

Pineapple Storytime is operated from the United States. If you access the Service from outside the US, your information will be transferred to and processed in the US.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version on the Service and update the "Last Updated" date. Material changes will be announced by email or in-app notice. Your continued use of the Service after changes take effect constitutes acceptance.

11. Contact Us

Questions about this policy or how we handle your data?

support@pineapplestorytime.com

Pineapple Storytime LLC
1209 Mountain Road Pl NE, Ste N
Albuquerque, NM 87110