Privacy Policy

• Parent account: your email (for sign-in and order updates), and — if you sell — payout details handled by Stripe.
• Child profiles: a display name and an age band (year of birth only — never a full date of birth). Optionally, a sign-in email or a parent-set passcode if you enable a kid login.
• Designs & usage: the artwork your child creates, related text (titles, captions, prompts), and basic usage records we use to run features and bill optional AI.
• Orders: shipping address and order details when you buy something.
• Technical: standard logs needed to keep the service secure and working. We do not use tracking or advertising cookies.

A grown-up always owns the account. We follow the U.S. Children's Online Privacy Protection Act (COPPA) for users under 13:

• We collect the minimum needed — a display name and an age band — and don't require a child to share more.
• Before a child under 13 can sign in on their own, we obtain verifiable parental consent from you.
• A child's designs and account are managed under your parent account; you can review or delete them at any time.
• We never condition a child's participation on disclosing more than is reasonably necessary.

• To create designs and turn them into products.
• To run moderation and your approval workflow (safety).
• To process orders, payouts, and optional paid AI.
• To send essential account and order emails (not marketing blasts).
• To secure, debug, and improve the service.

We do not show behavioral ads to children or anyone else, and we do not sell or rent personal information. We don't build advertising profiles.

We use a small set of trusted providers, only to deliver the service:

• Google Cloud / Vertex AI — hosting, image generation/embeddings, and content-safety checks.
• Printful — printing and shipping made-to-order products (receives the design + shipping address for an order).
• Stripe — payments and creator payouts.
• SendGrid — sending sign-in and order emails.

We share only what each needs for its task, and we may disclose information if required by law.

We keep information while your account is active and as needed to provide the service. You can delete a design, product, or child profile from your dashboard. When you delete something we remove it, except for records we must keep for completed orders, accounting, fraud prevention, or legal reasons. You can ask us to delete your whole account by emailing us.

As the account holder you can access, correct, or delete your and your children's information, withdraw consent for a child login, and request a copy or full deletion. Email us and we'll help. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA.

We use industry-standard measures: encrypted connections, secrets kept in a managed secret store, a private database, and least-privilege access. No system is perfectly secure, but we work to protect your family's data.

Squibble is operated by Squibble LLC, a Maryland limited liability company in the United States. We are the operator responsible for the information described in this policy.

For privacy questions, or to review, correct or delete your child's information, reach us at:

A parent can contact us by any of the above. We'll respond to requests about a child's information as described in Your choices & rights.