Privacy Policy

Where story continuity is offered: Yarnily keeps a record of your child's fictional story world (the characters, places and story events from the stories we've made together) so that future stories can continue and remember. This is a record of make-believe, not of your child's life. You can see everything the story world remembers, and pause, correct or delete any of it, at any time, from your world page. Deleting a memory removes it from all future stories. This feature is covered by the same consent as the learning journey and switches off with it.

Today, what Yarnily keeps under that consent is the short note of what each story explored, which is what the learning journey reflects back to you. You can read all of it in your data export, switch it off per child, and it is deleted with the story or the child.

Some of these we could plausibly use. We don't ask for them anyway, because a children's product should hold as little as it can get away with.

• Your location, or your child's.
• Your child's school, class or teacher.
• Health, medical or diagnostic information.
• Behavioural profiles: Yarnily does not rate, rank, grade or assess your child, and does not build a profile to target them with anything.
• Contact details for your child. Children do not have their own account, an email address or a phone number in Yarnily.
• A full date of birth. Yarnily asks for the month and the year, and nothing finer.
• Voice recordings of your child.
• Transcripts of anything your child says. Yarnily does not listen.

Yarnily shows no advertising to children and no third-party advertising trackers run in the children's screens.

We do not sell your family's information, and we never share it for advertising. Making a story does mean sending parts of it to specialist providers, and it would be dishonest to imply otherwise:

• Content-generation providers (computer models) help write, illustrate, narrate and safety-check stories. The story text reaches them, and it contains your child's first name. If you uploaded a photo, it reaches the providers who draw your child.
• Service providers handle hosting, storage, sign-in, analytics and error reporting.
• Payment providers handle purchases. Card details go to them, never to us.

What we can tell you for certain is what we do:

• Each provider receives only the minimum its task needs, and only for as long as the task takes.
• We do not sell your family's information, to anyone, ever.
• We never share it for advertising, and no advertising is shown to children.
• We do not use your family's data to train models of our own.

What each of those providers does with what it receives is a question about their contracts, and we would rather answer it slowly than confidently. Every provider is engaged under a written contract with us, which is what the law requires before any of your family's data reaches them, and each also has its own data-protection terms. We are working through those terms and will say what they commit to once we have read them, rather than summarise them before we have checked them.

We publish the itemised version of this — for every job done on our behalf, exactly which of your family's data it receives — and we keep it current. See what leaves Yarnily.

We may also disclose information where the law requires it (a valid court order or legal process) or where it is necessary to protect a child from harm. We will tell you when we are permitted to.

Under India's Digital Personal Data Protection Act 2023 you hold these rights as your child's parent or guardian. All of them work from inside the app: none of them require our permission.

• While your account is open, we keep your family's stories and profiles so they are there when you come back. Nothing expires on you.
• When you delete a child, their photos and illustrations are removed from storage and their story content is erased at the moment you ask. It is not queued for later.
• When you delete your account, the same applies to everything in it, immediately.
• A device you link for your child is kept until you remove it in Kids devices or delete your account, and then its record is deleted at once. A device nobody uses for 90 days stops working, and its record is deleted soon after.
• Analytics about how the parent screens are used are kept for 12 months.
• Payment and tax records are kept for ten years from the date of the payment, as Indian financial and tax law and our payment provider's terms require, even after an account is deleted. What is kept is the record of the payment: the amount, the date, the plan and the payment provider's reference numbers. Your name, phone number and children are not part of it, and no card, UPI or bank details ever were. This is the one category we cannot delete on request.
• Consent records are kept for as long as we may need to show that consent was properly taken. They contain nothing about your child.

We are building an automatic sweep that purges what is left of closed accounts on a fixed schedule. Until it runs, a deletion you ask for is carried out at the time you ask: the sweep is a backstop for anything a deletion misses, not the thing that performs it.

The analytics mentioned above, and the one other cookie this site sets, are covered on their own page, with what each is called, what it does, how long it lasts, and how to say no, in the Cookie Policy. kids.yarnily.com, where a child reads on a device you have linked, sets no cookies.

Only an adult can open a Yarnily account, and only a parent or guardian can add a child. Before a child's details are stored, we ask you to confirm that you are their parent or guardian and that you agree to how their information will be used: a verifiable parental consent, as the DPDP Act requires. We record that you gave it, when, and against which version of this policy.

If we change what you are agreeing to in any material way, we ask again rather than assuming the old answer still holds. The in-app consent currently in force is version 2026-10-v8.

Yarnily is built for India and this policy is written to the DPDP Act 2023. Where families use Yarnily from elsewhere, we also honour the United States' COPPA and, in the European Economic Area and the United Kingdom, the GDPR's rules for children, including your rights of access, correction, erasure, portability and objection, and your right to complain to your local supervisory authority.

Your family's information travels encrypted and is stored encrypted. A child's photo and the reference picture drawn from it are held in private storage and reached only through Yarnily's own access-checked routes: never from a public link, and never by another family. Story pictures become readable by someone holding a share link only when you create one, and stop being readable when you revoke it. A device you have linked can read the pictures and narration of the books it shows, until you remove it. Access by our team is limited to the people who need it to run the service.

No service can promise it will never be breached. If your family's data is involved in one, we will tell you and the Data Protection Board of India, as the law requires.

Yarnily runs on cloud infrastructure in India, and that is where your family's account, stories and pictures are stored. Analytics about how the parent screens are used are held in the European Union.

Some of the providers who help make a story process it in other countries, including the United States. Where that happens it is covered by the data-protection terms we hold them to, and the rules in this policy apply to your family's data wherever it sits.

When this policy changes materially we will tell you in the app, with the date the change takes effect. If the change alters what you consented to on your child's behalf, we ask for consent again rather than treating your silence as agreement.

One address, for everything: a data question, a billing problem, a story that reached your child and shouldn't have. We would rather run one inbox a person actually opens than three that route into silence.

Yarnily is a product of Sycuera Technology Private Limited.