Privacy Policy

Last updated: October 15, 2026

This Privacy Policy explains how MightyInk LLC (“MightyInk,” “we,” “us,” or “our”) collects, uses, discloses, stores, and deletes information when you use the MightyInk mobile application, web application, public sharing pages, website, and related services (collectively, the “Service”). Capitalized terms not defined here have the meanings given in our Terms & Conditions.

1. Who the Service Is For

MightyInk is designed for parents, guardians, and other adults who are at least 18 years old. Only an adult may create or manage an account. Adult account holders may create characters based on themselves, their children, other family members, friends, and other people whose information they are authorized to provide.

Children may enjoy the Service through an adult’s account, under that adult’s supervision. Children do not need their own account and never need to provide us with any information about themselves; everything the Service knows about a child is provided by the adult account holder. We treat all activity on an account as the account holder’s activity. MightyInk does not offer accounts to children and does not knowingly collect personal information directly from a child under 13.

If you believe a child has provided information to us directly, or that a child’s information was provided without appropriate parental authorization, contact us using the information in Section 16 and we will promptly investigate and delete it where appropriate. See Section 8 for more about children’s information.

2. Information We Collect

We collect the following categories of information:

Some of this information, including information about minors, photos containing faces, and voice recordings, may be considered sensitive personal information under applicable law. We use it only for the purposes described in this Policy. We do not sell personal information, we do not use it for third-party or behavioral advertising, and we do not share it for cross-context behavioral advertising. We do not use advertising identifiers.

3. How We Collect Information

• directly from you when you create an account, enter information, upload content, record audio, make selections, submit a report or request, communicate with us, or use the Service;
• automatically from your device and use of the Service, including through server logs, session cookies or similar technologies, app diagnostics, and security systems;
• from Apple, Google, RevenueCat, or another applicable platform when you sign in, subscribe, make a purchase, restore purchases, or receive an entitlement; and
• from another authorized family member when that person invites you, adds you to a family, or shares content with you.

4. How We Use Information

We use information to:

• create and secure accounts, authenticate users, and manage family membership;
• create and personalize characters, avatars, stories, songs, illustrations, narration, voices, and related media;
• operate family, friend, sharing, favorites, history, archive, and notification features;
• process subscriptions, credits, purchase restoration, refunds, reversals, and fraud or duplicate-purchase controls;
• cache and deliver media, synchronize content across devices, and support limited offline use;
• screen uploaded photos and text for safety before generation (see Section 5);
• provide support and transactional messages, including verification, password-reset, welcome, generation, sharing, and account notices;
• monitor reliability, investigate errors, enforce limits and safety rules, prevent abuse, secure the Service, and maintain audit and operational records;
• comply with law, respond to reports, and protect the rights, safety, and integrity of users, MightyInk, and others; and
• analyze and improve Service quality and generation performance, including automated quality checks described in Section 5. We do not use your photos, voice recordings, or content to train or fine-tune AI models, and we do not permit our AI providers to do so.

5. AI and Media Processing

AI providers and information sharing

MightyInk uses third-party AI and media providers to create the content an adult account holder requests. Our current providers, and what each one does, are:

Only the information needed for the feature you selected is sent, and not every provider receives every type of information. We send information to these providers through their business API services. Under the terms that govern those services, the providers may not use your content to train their models. They may keep a copy for up to 30 days for safety and abuse monitoring, then delete it, except where a provider has agreed to a shorter or zero-retention arrangement with us. If a provider change materially affects how personal information is shared, we will update this Policy and ask you to review the AI notice again.

AI consent

Before any personal information is sent to an AI provider, the app shows an AI notice (“Made with AI”) that identifies the providers, the information that may be shared, and the purposes, and links to this Section. You can defer this at sign-up and browse existing content without it, but every feature that creates new content requires it, so you will be asked again the first time you create a character, story, or song. If you select Continue (labeled Allow AI Features in some versions of the app), AI features are enabled. If you select Not now, nothing is sent to AI providers. You can withdraw permission at any time in Settings; withdrawal stops future sharing with AI providers and disables creation features, but does not undo processing already completed or automatically delete content already created. You can delete content, cloned voices, or your account using the controls in Sections 10 and 12. We record the date and version of the notice you accepted.

Automated safety screening

To keep the Service safe for families, every uploaded photo and the text you type into story, song, sidekick, and feedback fields is automatically screened by AI safety classifiers before it is used (currently OpenAI for photos and feedback, and OpenAI and Google for story, song, and sidekick ideas and descriptions). If a request is ambiguous, we may ask you to clarify it before continuing. Content that appears to be unsafe is rejected and not used to generate anything. We keep pseudonymous records of screening outcomes (hashed identifiers, the safety category, and the decision, not the content itself) to enforce limits and detect abuse.

Automated quality checks

To check and improve the quality of what MightyInk creates, we may send a sample of recently finished stories and songs (their text, the idea and selections used to create them, their illustrations, and song audio and lyrics) to OpenAI or Google for automated review. These providers receive this information under the same terms described above and may not use it to train their models. Uploaded photos and voice recordings are never included in quality checks.

Photos and face information

We use uploaded photos only to create visual references, illustrated characters, avatars, and other content you request, and to screen them for safety. MightyInk and its AI providers do not use these photos for facial recognition, identity verification, authentication, face matching, or surveillance. MightyInk does not create or retain facial-geometry templates, facial-recognition profiles, or biometric identifiers from uploaded photos. We do not keep newly uploaded photos. Once a character’s illustration has been drawn from a photo, we automatically delete the photo (and any extra photos uploaded for the same character), usually within minutes and no later than 24 hours after upload. After that, the character’s illustration is used as the reference for future illustrations. Photos uploaded before October 15, 2026 stay with the character until it is deleted. We keep an AI-written description of the person’s appearance (for example hair, eye color, skin tone, and build) with the character so that future illustrations stay consistent; it is deleted when the character, family, or account is deleted, subject to Section 10.

Voice recordings and cloned voices

Cloned voices can be created only from recordings of adults (people aged 18 or older). We do not create cloned voices from recordings of children. Before a recording is uploaded, the app presents a separate consent notice that identifies ElevenLabs as the current AI voice provider and requires you to confirm that you are an adult and that you are the person recorded or have that person’s permission. The recording is not uploaded unless you select Allow and Continue. We record the date and version of the consent you gave.

MightyInk does not keep a copy of the recording; we pass it to ElevenLabs, which creates and hosts the cloned voice. We store the cloned-voice identifier and label. A cloned voice is used only to narrate content and is never used to identify anyone. Your family can choose it as the narrator for your family’s stories. If you share a story and choose a cloned voice as its narrator, the people you share it with (a friend family, or anyone with a public link to it) can hear that story narrated in the cloned voice.

You can select Delete Voice at any time to stop future use of the voice. This initiates deletion of the cloned-voice record maintained by MightyInk and requests deletion of the corresponding voice from ElevenLabs. Deleting the associated character or your account also initiates deletion of the cloned voice. In every case, we delete a cloned voice automatically if it has not been used to narrate anything for three years. ElevenLabs deletion may complete asynchronously; contact us at legal@mightyink.ai if you have concerns about completion. After a cloned voice is deleted, stories that used it are narrated by the story style’s standard narrator, and narration we saved in the deleted voice is deleted. Copies already saved on a device may remain until the app’s cache is cleared. Creating another cloned voice requires consent again before a new recording is uploaded.

6. Other Service Providers and Disclosures

We disclose information to service providers as reasonably necessary to operate the Service, including:

• Google Cloud Storage for uploaded and generated media and operational archives;
• Neon (PostgreSQL) for application, account, session, content, commerce, and operational records, and a separate audit database for provider-usage records;
• RevenueCat and the Apple App Store for subscriptions, purchases, entitlements, restoration, refunds, and transaction verification;
• Apple and Google when you use their sign-in services;
• Resend for transactional email;
• Expo and Apple for push notifications, whose contents may include a story or song title, a character name, a family member’s name, or a family name;
• Render, Cloudflare, and other infrastructure used to host, secure, and deliver the Service, including server logs, which may contain names and story or song ideas;
• Better Stack for uptime monitoring and operational alerts. Better Stack receives only a fixed set of operational fields (alert category, counters, host and deployment identifiers, random correlation tokens, and internal record identifiers). We do not send story prompts, names, email addresses, photos, voice recordings, or generated audio to Better Stack; and
• on our website and public sharing pages, web fonts and scripts loaded from third-party hosts (such as Google Fonts and a content-delivery network), which receive your IP address and browser information when the page loads.

We require service providers that receive personal information from us to protect it and to process it only for authorized purposes, and we obtain written commitments to that effect where the provider offers them.

A small number of MightyInk personnel can access account, family, character, and generation records, including generated illustrations and the prompts sent to AI providers, through an access-controlled administrative console. This access is used only to provide support, investigate problems and abuse, maintain the Service, and comply with law, and it is protected by strong authentication and logged. We also receive internal notifications when accounts are created or upgraded so that we can operate the Service.

We may also disclose information:

• when required by law, legal process, or a valid government request;
• to protect the rights, property, safety, or security of users, MightyInk, or others, including reporting apparent child sexual abuse material to the National Center for Missing & Exploited Children as required by law;
• to investigate fraud, abuse, security incidents, content reports, or violations of our Terms; or
• in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of all or part of our business or assets, subject to applicable law. If that happens, personal information will remain subject to commitments at least as protective as this Policy unless you are notified and given a choice.

7. Family, Friend, and Public Sharing

• Family sharing. Everyone in your family can see all family characters (including photos, avatars, and details about children), stories, songs, and cloned voices, and shares pooled subscription benefits and credits. What each person can do depends on their family level: Admins manage the family and all of its content; Members can create content, spend credits, and edit, share, or delete what they created; Guests can read and listen only. Anyone with a valid invite code can join your family after verifying an email address, and existing members are notified when someone joins. Admins can remove members, and members can leave. When someone leaves or is removed, the content they created stays with the family. Share invite codes carefully and remove members who should no longer have access.
• Friend families. Once two families accept a friend request, they can exchange characters, stories, songs, requests, and notifications. A friend family can see the names, avatars, and details only of the characters you choose to share with them, and can use those shared characters in their own stories, which means the shared character’s name and details are sent to our AI providers for those stories. Unsharing a character or unfriending stops future sharing but does not remove content already created.
• Finding families. Signed-in users can search for families by family name or handle to send a friend request. Search results identify the family and the adult who runs it. Names and avatars of characters under 18 are not shown to families you are not friends with.
• Public links. If you create a public story or song link, anyone who receives or obtains the link can view or play the shared content without signing in and can share it onward. The public page and its preview image show the story or song title, the cover illustration (which may depict your child’s illustrated likeness), and the names of the featured characters as entered in the app. A public link stays active until it is revoked; it does not expire on its own. The family that made the story or song, and any family whose character appears in it, can create or revoke its public link. Link-preview services and social platforms fetch and cache those items. We ask search engines not to index public pages, but we cannot control caching by messaging apps or social networks. Revoking a link prevents future access through that link but cannot recall copies, screenshots, downloads, caches, or onward sharing already made.

Before sharing, review the content for names, faces, voices, or other information you do not want recipients to see.

8. Information About Minors (Children’s Privacy)

MightyInk is operated by adults for the benefit of their families. We do not offer accounts to children, and we do not knowingly collect personal information directly from a child under 13. Information about a child (such as a character name, age or age label, gender, height, build, relationships, appearance details, and photos) is provided by an adult account holder who represents that they are the child’s parent or legal guardian or have that parent’s or guardian’s permission. We use a child’s information only to provide the features the account holder requested, never to build a profile of the child, to market to the child, or for advertising.

When a child uses the Service through an adult’s account, we treat that use as the adult’s: story ideas, choices, and other inputs entered through the account are the account holder’s inputs, and the technical identifiers involved (such as a session identifier or push token) belong to the adult’s account and device and are used solely to operate and secure the Service. We do not use them to track a child across services or to serve advertising. The account holder decides which features a child may use and is responsible for supervising that use.

A parent or legal guardian may contact us at any time to:

• review the personal information we hold about their child;
• request correction or deletion of that information;
• refuse to permit further collection or use of the child’s information; or
• ask questions about our practices regarding children’s information.

We will verify the requester’s identity and their relationship to the account or child before acting, using the account email address and, where needed, additional confirmation. Deleting information required for a feature may make that feature or related content unavailable. We will respond within the time required by applicable law.

If we learn that we have collected personal information directly from a child under 13 without verifiable parental consent, we will delete it promptly. If we ever change the Service so that children are invited to provide information themselves, we will first obtain verifiable parental consent as required by the Children’s Online Privacy Protection Act (COPPA) and update this Policy.

9. Storage and Security

Application records are stored in databases. Uploaded and generated media, such as photos, avatars, illustrations, narration, songs, and sharing images, are stored in private object storage and delivered through short-lived signed links.

We maintain a written information-security program with administrative, technical, and physical safeguards designed to protect information, including password hashing, server-managed sessions, encryption in transit, access controls and strong authentication for administrative access, authorized media access, rate limits, secret scanning, and operational monitoring. We review these safeguards periodically and require our service providers to maintain comparable protections. No system is completely secure, and we cannot guarantee that information will never be lost, misused, or accessed without authorization. If a security incident affects your information, we will notify you and regulators as required by law.

The app stores settings, identifiers, and cached content on your device so that content loads quickly and some features work offline. Cached illustrations, narration audio (which may include a cloned voice), and song audio may remain on the device after sign-out until a different family signs in, the app is removed, or the cache is cleared. To make signing back in faster, the app also remembers the account holder’s name, email address, and profile picture on the device after sign-out; this is removed when the account is deleted. Use device-level protections (such as a passcode) on shared devices. Public-link previews and third parties may maintain separate caches outside our control.

10. Retention and Deletion

We keep personal information only as long as reasonably necessary for the purposes described in this Policy. Our retention schedule is:

Deleting your account initiates deletion of your account records, cloned voices, favorites, and reading history. If you are the last member of your family, the whole family and all of its content are deleted. If other members remain, the characters, photos, stories, songs, and credits you added stay with the family until they or the family are deleted. Content you shared with friend families or through public links, and copies, screenshots, downloads, or caches made by recipients or third parties, are outside our control. Third-party providers may retain limited records under their contracts, security requirements, or legal obligations.

Deleting the app or signing out does not delete an account. Use Delete Account in Settings, visit mightyink.ai/delete-account to send us a deletion request (which we complete after confirming your identity), or contact us for assistance.

11. Notifications and Communications

With your permission, we send push notifications about generation, family, friend, sharing, requests, and failures. Notification text may include a story or song title, a character name, a family member’s name, or a family name and will appear on your lock screen unless you adjust your device settings. You can disable push notifications in your device settings. We send transactional emails needed for account security and operation, including an email-verification message, a welcome email once you verify, and a notice if you are removed from a family. If we ever send marketing communications, we will provide the opt-out choices required by applicable law and will not send them to children.

12. Your Choices and Privacy Rights

Depending on the feature, you can:

• update account, family, character, sharing, notification, and content settings;
• withdraw AI permission in Settings (which disables the Service until you allow it again);
• decline a cloned-voice upload before any recording is sent;
• delete a cloned voice;
• revoke public sharing links and remove family members or friend families;
• delete characters, stories, songs, recordings, and other content;
• report content that concerns you (see Section 13); and
• delete your account in Settings or at mightyink.ai/delete-account.

Depending on where you live, you may also have the right to know what personal information we collect and how we use and disclose it, to access it and receive a copy in a portable format, to correct it, to delete it, to restrict or object to certain processing, to withdraw consent, to opt out of sales, sharing, targeted advertising, or profiling (we do none of these), to appeal a decision on your request, and to complain to a regulator. We do not discriminate against you for exercising a privacy right. An authorized agent may submit a request on your behalf with proof of authority.

Submit a request using the information in Section 16. We will verify your identity and, for requests about a family or a minor, your authority, using the account email address and additional confirmation where needed. We will respond within 45 days or the shorter period required by applicable law, and will tell you if we need more time.

13. Reporting Content and Requesting Removal

If you see content in MightyInk that concerns you, including content that depicts you or your child without permission, intimate imagery, or content that appears to involve the abuse or exploitation of a child, report it to legal@mightyink.ai with a link to or description of the content. We review reports promptly, remove content that violates our Terms, and, for requests to remove non-consensual intimate imagery, act within 48 hours of a valid request. We report apparent child sexual abuse material to the National Center for Missing & Exploited Children and cooperate with law enforcement as required by law.

14. International Processing

MightyInk is operated from the United States, and our providers process information in the United States and other countries. Those countries may have different data-protection laws. Where required by law, we use recognized safeguards for international transfers, such as contractual protections or another legally authorized transfer mechanism.

15. Legal Bases for Processing

Where applicable law requires a legal basis, we process personal information as necessary to perform our contract with you; based on consent, including consent for AI-provider sharing, device permissions, photos, and cloned-voice recordings; for legitimate interests such as operating, securing, supporting, and improving the Service and preventing abuse; and to comply with legal obligations. You may withdraw consent where processing is based on consent. Withdrawal does not affect processing already completed and may make the Service unavailable.

16. Contact Us

The Service operator is:

MightyInk LLC
14205 N Mo Pac Expy, Ste 570, PMB 893606
Austin, Texas 78728
United States

Privacy requests, parent and guardian requests, content reports, and legal inquiries: legal@mightyink.ai. General support: support@mightyink.ai. You may also write to the mailing address above.

17. Changes to This Policy

We may update this Policy as the Service, our practices, providers, or applicable law changes. We will post the revised Policy and update the date above. If a change materially affects how we use or share personal information, including a change in AI providers or the information they receive, we will notify you in the app and, where required, ask for your permission again before the change takes effect.