Tale Ember Privacy Policy
This policy is a pre-launch draft under legal review.
ERDCLOUD, INC., a Delaware corporation ("we", "us", or the "Tale Ember team"), processes your personal information as described in this policy when providing Tale Ember (the "Service"). Contact: support@erdcloud.com
1. Information we process
We collect only the minimum information we need.
| Category | Items | How we collect it |
|---|---|---|
| Account | Social account unique ID (Google, Apple), email (if your social account provides it), display name, language setting | Social sign-in |
| Age | Birth year and month (not the day) | Entered before sign-up |
| Consent records | Version and time of your consent to the Terms, the Privacy Policy and AI data transfer | Consent screen |
| Device | Device platform (iOS, Android, etc.), app version and distribution channel | Sent automatically by the app |
| Usage content | Stories and chat messages, personas, characters, plots and lorebooks you create, images you upload or generate, reports and blocks, app settings | Using the Service |
| Ember and purchases | Records of Ember grants, usage and refunds; in-app purchase records (store transaction ID, product, time) | Using the Service; the stores |
| Ads | Records of rewarded ads watched and rewards | Using the Service |
| Technical | Access logs (IP address, request time, etc.), AI usage records | Generated automatically |
| Safety | Whether there are signals that you are a minor, app-store age-signal results (age range only), moderation decisions | Generated automatically; the stores |
- Payment information (such as card numbers) is handled by the App Store and Google Play; we do not receive it.
- We do not collect ID documents, face photos or your exact date of birth. If we introduce age verification in the future because the law requires it, we will store only the result and never ID or selfie images.
- If you are below the minimum age, we do not store your birth year and month, only a record that use is restricted.
2. Purposes
- Identifying you and signing you in, managing your account, and preventing duplicate accounts across servers (zones)
- Providing the Service, including AI chat, stories and image generation
- Granting, charging, verifying purchases of and refunding Ember, and granting rewarded-ad rewards
- Providing age-appropriate features (minimum age, Adult mode eligibility)
- Safety — screening inappropriate content, handling reports, enforcement and preventing abuse
- Improving quality, analyzing errors, and cost and usage statistics
- Meeting legal obligations and handling disputes
3. AI processing and data transfer
- To generate AI responses we send story text and the persona and plot content you create to AI providers. We do not send your email, account name or sign-in connection details, and we replace your user ID with a pseudonym (hash).
- For image generation we send prompts such as a character’s appearance (without character names or user identifiers) and images to be edited. We do not store the original prompt text.
- We ask for separate consent to AI data transfer, and ask again if a new AI provider is added. If you do not consent or withdraw consent, you cannot use the AI chat features.
4. Service providers and international transfers
The following companies process personal information to provide the Service, mostly outside Korea (mainly in the United States). Transfers happen over the network (encrypted) when you use the Service. You may refuse international transfers, but you will then be unable to use the related features (AI chat, images, purchases, ads, etc.).
| Recipient | Country | Items | Purpose | Retention |
|---|---|---|---|---|
| DeepInfra Inc. | United States | Chat and story text (including embedding inputs for search), persona and plot content you create, a pseudonymous user ID | Generating AI responses (default LLM provider) and embeddings | Per the provider’s policy (configured not to retain data after processing) |
| Google LLC (Gemini API, paid tier) | United States | Copies of uploaded or generated images that the first-stage check could not clearly classify | Second-stage review of potentially inappropriate images | Per the provider’s policy (paid-tier API) |
| DeepInfra Inc. (image generation), Bria (background-removal model hosted on DeepInfra) | United States | Image-generation prompts (e.g. a character’s appearance — without character names or user identifiers), generated images and images sent for background removal | Generating character, cover, background and icon images and removing backgrounds | Per the provider’s policy (we do not store the original prompt text) |
| Cloudflare, Inc. (R2) | Depends on the storage region setting | Images (images we provide, and images you upload or generate) | Storing and delivering images | Until the image or the account is deleted |
| MongoDB, Inc. (Atlas) | The hosting region of the server (zone) you chose | All service data (account, settings, stories, messages, plots, Ember records, etc.) | Database hosting (stored only on the server you chose) | As described under “Retention” (fully deleted within 30 days after account deletion; backups rotate every 35 days) |
| Google LLC / Apple Inc. | United States | Sign-in identifiers (your social account’s unique ID, and email if provided) | Social sign-in | Until the account is deleted |
| Google LLC (Cloud Vision) | United States (regional endpoints selectable) | Copies of uploaded or generated images for checking (may contain personal information) | Automatic screening of inappropriate images | Per the provider’s policy |
| RevenueCat, Inc. | United States | Internal user ID, Ember purchase records (App Store and Google Play receipts) | Verifying in-app purchases of Ember | Per the provider’s policy (purchase records for the period required by law) |
| Google LLC (AdMob) | United States | Advertising ID and device information (sent directly by the in-app ad SDK; non-personalized ads for users under 18), internal user ID and a one-time reward token for reward verification | Showing rewarded ads and verifying rewards | Per the provider’s policy (our ad records are kept for 90 days) |
| Other Tale Ember servers (zones) | The hosting region of each server (zone) | A pseudonymous identity hash at sign-up (duplicate-account check); all of your data if you request a server transfer | Preventing duplicate accounts across servers; server transfers you request | Data on the original server is deleted after the transfer completes |
- Contact support@erdcloud.com to learn the actual hosting region of the server (zone) you chose.
- Further details about each company and the time and method of transfer are available on request, together with each company’s policies.
5. Retention and deletion
| Information | Retention |
|---|---|
| Account, stories, messages, your content | Until you delete it or delete your account |
| Image-generation candidates you did not choose | Deleted after 30 days |
| Originals of uploaded images rejected by screening | Deleted after a 30-day appeal period |
| AI usage records (linked to you) | 90 days (after that only daily statistics that cannot identify you) |
| Access logs | 30 days |
| Ad records | 90 days |
| Ember ledger | Until the account is deleted |
| Purchase and refund records | For the period required by law (tax, e-commerce, etc.) — pseudonymized after account deletion |
| Deleted accounts | Fully deleted within 30 days of the request |
| Backups | Rotated and deleted every 35 days |
- After account deletion we keep a pseudonymized identity hash so that the sign-up Ember grant is not given again if the same social account signs up again (this value cannot directly identify you).
- When a retention period ends we delete the information without delay in a way that cannot be recovered.
6. Account deletion
- In the app: Settings > Account > Delete account (after confirming a recent sign-in)
- If you cannot use the app: request it on the web or by email as described on the Support page
- When you request deletion, sign-in is blocked immediately and your account information is anonymized; data is fully deleted within 30 days. Remaining Ember is forfeited (you can request a refund of purchased Ember before deletion — see Section 6 of the Terms of Service).
- If other users are playing a plot you published, a read-only copy without your name may remain so their stories do not break.
7. Advertising
- We show only rewarded ads that you choose to watch when you run low on Ember. There are no ads while you have enough Ember, and no ads inside Adult mode conversations.
- Ads are provided by Google AdMob; the ad SDK sends the advertising ID and device information directly to AdMob. We request non-personalized ads for users under 18. You can change personalized advertising in your device settings (reset advertising ID, opt out of personalized ads), and in regions where the law requires it the app asks for ad consent.
8. Your rights and how to exercise them
You (or your legal guardian if you are under 14) may at any time:
- Access and correct your information — via the profile and settings screens in the app, or by email
- Delete — using the delete features for stories and content, or account deletion (Section 6)
- Restrict processing or withdraw consent — by email (if you withdraw consent to AI data transfer, you cannot use AI chat)
- Move your data — transfer your account to another server (zone) in the app settings
Send requests to support@erdcloud.com. We will verify your identity and respond within the period required by applicable law. Where the law of your region (for example the EU/UK GDPR or the California CCPA) gives you additional rights, we will honor them.
9. Children
- Children under 13 may not use the Service. If the birth year and month entered before sign-up show an age under 13, use is blocked before sign-in, so we do not receive personal information.
- If you are below a server’s minimum age (14 by default), use of the account is restricted and your birth year and month are not stored.
- If we learn that we have collected information from a child under 13, we delete it without delay.
10. Cookies
- This website (taleember.com) does not use cookies and does not use analytics or tracking tools.
- The web page for requesting account deletion outside the app uses only a short-lived, strictly necessary cookie to continue the request.
11. Security measures
- Encryption in transit (HTTPS); encrypted storage of secret keys and external service credentials
- Access control and access logging for administrators; least privilege
- Conversation text is not written to logs
12. Privacy officer
- Privacy officer: Jang SungYong (CEO)
- Contact: support@erdcloud.com
- Local representative (Korea): not applicable — our place of business is in the Republic of Korea
Users in Korea may also contact the Personal Information Infringement Report Center (privacy.kisa.or.kr, call 118) or the Personal Information Dispute Mediation Committee (www.kopico.go.kr, 1833-6972).
13. Changes to this policy
If we change this policy we will announce it in the app or on this website at least 7 days before it takes effect (30 days for significant changes). The document has a version (revision date), and after a significant revision the app asks for your consent again.
Effective date: October 4, 2026