Privacy Policy

Last updated: July 16, 2026

This Privacy Policy explains what information HeroID™ collects and how we use it. HeroID is based in the United States and this policy is written for visitors and customers in the United States. By using heroid.app (the "Service"), you agree to the practices described below.

1. Information We Collect

Category	What we collect	When
Story inputs	Child's first name, age, and superpower/quiz selections	Guest checkout or account use, provided by the purchasing adult
Account data	Email address, securely hashed password, language preference, saved stories	If you create a HeroID account
Google sign-in data	Email address and Google account identifier	If you sign in with Google
Payment data	Handled entirely by Stripe — HeroID never sees or stores your card details	At checkout
Audiobook data	The generated story text sent to our text-to-speech provider, your chosen narrator voice, and the resulting audio file	If you purchase the optional Audiobook Add-on
Technical/log data	IP address, browser type, request timestamps	Automatically, for security and abuse prevention
Cookies	A session cookie used only to keep you signed in	If you create an account and log in

We do not use advertising or third-party tracking cookies, and we do not collect precise geolocation or government ID numbers.

2. How We Use Your Information

To generate your personalised HeroID story, comic, and PDF
To operate your account and let you access and redownload saved stories
To deliver your HeroID by email, if you choose that option
To process payment via Stripe
To detect and prevent fraud, abuse, and unauthorized access

Guest quiz answers used to generate a story are not permanently stored beyond what's needed to complete and deliver that generation. An email provided only for delivery is used solely for that purpose and is not added to a mailing list.

3. Children's Privacy & COPPA

HeroID is purchased and operated by adults. It is not directed at children, and children do not interact with the Service or provide information to us directly — all information, including a child's first name and age, is entered by the purchasing parent or guardian.

This information is used solely to personalise the generated story. It is not compiled into a profile of the child, not used to contact or market to the child, and not shared with third parties for advertising. Parents may request deletion of this information at any time — see Section 7. If we learn that a child has submitted personal information directly and without parental involvement, we will delete it. This practice is intended to comply with the Children's Online Privacy Protection Act (COPPA).

4. Cookies & Tracking

HeroID uses a single functional session cookie to keep you signed in to your account. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. We use Google Fonts to display certain typefaces, which may involve a request to Google's servers to load font files.

5. Third Parties & Data Sharing

We use a small number of service providers strictly to operate the Service, and only share the data necessary for them to do so:

Stripe — payment processing. Stripe handles your card details directly; we never see or store them.
Google — optional sign-in. If you use "Sign in with Google," we receive only your email address and account identifier from Google. Our use of this data adheres to the Google API Services User Data Policy, including its Limited Use requirements, and is never used for advertising.
Text-to-speech provider — if you purchase the optional Audiobook Add-on, the generated story text and your chosen voice selection are sent to a third-party voice synthesis provider solely to produce your narrated audiobook file.
Email delivery providers — to send your HeroID PDF and account-related emails.
Hosting and database providers — to store account and story data securely.

We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing purposes.

6. Data Retention

Guest generations: quiz inputs are used to generate your story and are not permanently retained afterward.
Guest audiobooks: if you purchase the Audiobook Add-on without being signed in, the generated audio file is made available for download on the result page but is not saved to any account and may not be recoverable once you leave the page without downloading it — see our Terms & Conditions.
Accounts: your email, hashed password, preferences, saved stories, and any saved audiobook files are retained until you delete your account or request deletion.
Payment records: retained by Stripe per their own policies and as required for tax/accounting purposes.

7. Your Rights & Choices

Depending on where you live, you may have rights under U.S. state privacy laws (such as the California Consumer Privacy Act and similar laws in other states) to:

Request access to the personal information we hold about you
Request correction or deletion of your personal information
Opt out of any future marketing emails

HeroID does not sell or share personal information for cross-context behavioral advertising, so there is no "sale" to opt out of. To exercise any right above, email support@heroid.app and we will respond within a reasonable time. You can also delete your account and saved stories directly from your account settings.

8. Data Security

We take reasonable administrative and technical measures to protect your information, including hashed password storage, restricted database access, and secure handling of payment data via Stripe. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

    🌎 International visitors: HeroID's servers and data storage are located in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the United States.
  

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the Service after changes are posted constitutes acceptance of the revised policy.

10. Contact

Questions about this Privacy Policy or your data? Contact us at support@heroid.app.