Privacy policy

A note for parents and guardians

Oodleloo is designed for children, but our accounts, purchases, and communications are intended for adults. Only a parent or guardian aged 18 or older should create an account, subscribe, or contact us. Children never create their own accounts and we never ask a child for their name, address, phone number, email, or photograph. Children can, however, make things inside a parent’s account, such as drawings and songs, and those creations are saved to that account. See “Children’s privacy” below for exactly what is stored and for how long.

Information we collect

• Account information. When you register, we collect your name, email address, and a securely hashed password. You may optionally add a display name, a short “about” note, and a profile photo or character avatar.
• Purchases and subscriptions. When you buy a product or start an Oodleloo Premium membership, our payment processor, Stripe, collects your payment details, billing name, and address. We never see or store full card numbers. We keep a record of your orders, subscription status, and receipts.
• Contact messages. If you use our contact form, we collect your name, email address, and message so we can reply.
• Usage information. Like most websites, we automatically collect limited technical data such as your browser type, device, approximate region, referring pages, and how you navigate the site, through cookies and analytics as described below.

How we use information

We use the information we collect to create and manage your account, process orders and subscriptions, provide access to Premium content, respond to your messages, send service and transactional emails, keep the service secure, understand which content families enjoy so we can improve it, and meet legal and tax obligations. We do not sell your personal information, and we do not use it for third-party advertising.

Cookies and analytics

We use essential cookies for sign-in sessions, security, and your shopping cart. We also use Google Analytics 4 to understand site usage in aggregate. We configure Google Analytics to anonymize IP addresses and to disable advertising features and Google Signals, so it is not used to build advertising profiles. Video embeds use YouTube’s privacy-enhanced mode, which does not set tracking cookies until a video is played. You can control cookies through your browser settings, and you can opt out of Google Analytics with the Google Analytics Opt-out Browser Add-on.

How we share information

We share information only with service providers who help us run Oodleloo, and only as needed to perform their service. These include Stripe (payment processing), Google Analytics (aggregate usage measurement), our email and hosting providers, and shipping carriers for physical orders. We may also disclose information if required by law or to protect the rights, safety, and property of Oodleloo and others. We never sell personal information.

Children’s privacy

Protecting children is central to what we do, so we want to be specific rather than vague about this.

What a child never gives us. Children do not create accounts and we never ask a child for their name, address, phone number, email address, photograph, or location. There is no chat, no messaging, no public profile, and no way for a child to be contacted by anyone through Oodleloo.

What a child can create, inside a parent’s account. When a signed-in family uses Oodleloo, these are saved to the parent’s account so the family can come back to them: drawings and songs made in the Creative Studio, stories written with the story builder, which videos and stories have been watched or read, game scores, and time spent playing. Game scores appear on leaderboards under the account holder’s chosen display name, so please choose a display name you are comfortable with others seeing. You can change it at any time in your account settings.

How long we keep it. Drawings and songs are kept for about 14 days and then deleted automatically, and we email a reminder before that happens. Stories written in the story builder are kept for about 30 days. Progress, scores, and play time are kept while the account is open. When you close your account we delete this information.

Your control. As the parent or guardian, you can view everything saved under your account, delete any individual item, or ask us to delete all of it, at any time, by contacting hello@oodleloo.com. You can use Oodleloo without allowing anything to be saved by not signing in. We do not sell any of this information, we do not share it for advertising, and we do not use it for behavioral advertising or child-directed tracking.

We support the goals of the Children’s Online Privacy Protection Act (COPPA) and similar laws. If you believe a child has given us information in a way this policy does not describe, contact us at hello@oodleloo.com and we will delete it promptly.

Photographs you turn into coloring pages

What happens to the photo. Premium+ families can upload a photograph and get a printable coloring page of it. The photograph is stored on a private disk, checked automatically against our content rules, sent to our image provider (OpenAI) to be drawn into outlines, and deleted from our servers as soon as the page is ready, whether or not the page worked. We never publish it, never show it to another family, and never use it to train anything.

What our provider does with it. Under our agreement with OpenAI, data sent through their API is not used to train or improve their models. They keep a copy of the image for up to 30 days in abuse-monitoring logs and then delete it. Their safety systems scan every uploaded image, and an image that their child-safety classifier flags may be retained and reviewed by a person at OpenAI. That is a child-protection measure we would not want removed, and it is the reason we ask you to upload only photographs you would be comfortable showing a stranger.

How long the coloring page lasts. The finished page is kept for 14 days so you can print it again, then deleted automatically. Download or print anything you want to keep.

Your choice. This is the only feature on Oodleloo that sends a photograph anywhere, and it only ever runs when a grown-up uploads a photograph and asks it to. Not using it sends nothing.

Voice recordings and voiceprints

Oodleloo Premium+ includes a beta feature that can read stories aloud in a parent’s own voice. Doing that means recording your voice and generating a voiceprint, which is biometric information, so it is handled separately from everything else on this page and only ever with your written permission.

Adults only, and never a child’s voice. Only the adult account holder may record, and only their own voice. We do not record children’s voices for any purpose.

Written release first. We collect nothing until you have read our voice notice and signed a release. The release states what is collected, the single purpose it may be used for, and how long it is kept. We store a copy of the exact wording you agreed to.

Purpose. To create a synthetic copy of your voice so that Oodleloo stories can be read aloud in your voice, inside your own family account, for your own children. We use it for nothing else. We do not use it to train, fine-tune, or improve any model.

Retention and destruction schedule. We keep your recording and voiceprint for up to 12 months from the day you sign. We permanently delete your recording, your voiceprint, and every story narration generated from them within 30 days of whichever comes first: you withdrawing your release, the term ending, you closing your account, or us ending the beta. In practice withdrawal deletes them immediately; the 30 days is an outer limit, not a target.

We never sell or share it. We do not sell, lease, trade, or otherwise profit from your voice recording or voiceprint, and we do not disclose it to anyone else for their own use.

How it is stored. Encrypted in transit and at rest, reachable only from your own account, never included in public pages, and never shared with third parties for their own purposes.

Withdrawing. You can withdraw at any time from your voice settings, for any reason or none, without affecting your membership. The beta is not currently available to residents of IL.

Data retention

We keep personal information for as long as your account is active or as needed to provide the service, and afterward only as required to comply with legal obligations, resolve disputes, and enforce our agreements. You may ask us to delete your account and associated data at any time.

Security

We use industry-standard measures such as encryption in transit (HTTPS), hashed passwords, and trusted payment infrastructure to protect your information. No method of transmission or storage is perfectly secure, but we work hard to safeguard your data.

Your rights and choices

You may access, correct, download, or delete the personal information we hold about you, and you may unsubscribe from non-essential emails at any time. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including the right to object to or restrict certain processing. To exercise any of these rights, email us at hello@oodleloo.com.

Third-party links

Our site may link to other websites, such as our YouTube channel. Their privacy practices are governed by their own policies, and we encourage you to review them.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above, and significant changes will be highlighted on this page.

Contact us

Questions about this policy or your information? We would love to hear from you at hello@oodleloo.com, or through our contact page.