Privacy Policy

Last updated: [17 July 2026]

1. Who Is Responsible

The data controller for Turnleaves is [Turnleaves LLP, Kazakhstan], [registered address]. For any privacy question or request, contact [email protected].

2. Data We Collect

• Account data: email address, username, and a hashed password. Optional profile details (avatar, bio) if you add them.
• Content data: the prompts, story settings, chapters, comments, and reviews you create on the service.
• Usage data: pages viewed, generation requests, feature usage, approximate region, device and browser type, IP address, and server logs kept for security.
• Payment data: payments are processed by Paddle as merchant of record. We never receive your full card details; we receive only transaction confirmations (plan, amount, status) needed to activate your subscription or credits.

3. How We Use Data

We use your data to operate the service (generate stories, narration, and images you request), manage subscriptions and credits, moderate published content, secure the platform, respond to support requests, and send essential service emails such as verification and billing notices. We do not send marketing email without your consent.

4. Processors and Sharing

We share data only with service providers acting on our instructions under data-processing agreements:

• AI providers that generate text, speech, and images ([LLM provider], [TTS provider], [image provider]) — they receive the story context needed to produce output you request;
• Paddle.com Market Ltd — checkout, billing, taxes, and refunds;
• hosting and infrastructure providers ([hosting provider]) and a transactional email provider ([email provider]).

We do not sell your personal data and we do not share it with advertisers or data brokers. We may disclose data where the law requires it, for example in response to a valid legal order or to report child-safety violations to the competent authorities.

5. Legal Bases (GDPR)

Where the GDPR applies, we process data to perform our contract with you (Art. 6(1)(b)), for our legitimate interests in security and service improvement (Art. 6(1)(f)), to comply with legal obligations (Art. 6(1)(c)), and with your consent where we ask for it (Art. 6(1)(a)).

6. Your Rights

You may request access to, correction of, deletion of, or a portable copy of your personal data, object to or restrict certain processing, and withdraw consent at any time. Write to [email protected]; we respond within one month. If you are in the EU/EEA or UK, you may also lodge a complaint with your local supervisory authority.

7. Retention and Transfers

We keep account and content data while your account is active and delete or anonymize it within [90] days of account deletion, except records we must keep for legal, billing, or safety reasons. Data may be processed outside your country; where required, we use appropriate safeguards such as standard contractual clauses.

8. Cookies

Turnleaves uses only essential cookies: a session/authentication cookie and basic preference storage. We use no advertising cookies and no third-party tracking, so we do not show a consent banner for non-essential cookies — there are none.

9. Children

Turnleaves is not directed at children under 16, and we do not knowingly collect their data. If you believe a child is using the service, contact [email protected].

10. Changes

We will announce material changes to this policy by email or in-product notice before they take effect.

← Back to Turnleaves