What we keep
Your email address, and for each child you add: a first name, an age, a reading level and a language. Nothing else about a child is required.
How Hikaya handles your family's data
Plain language, no lawyers. This page describes what the app actually does today.
Photos
An uploaded photo is sent to our AI provider to describe a cartoon hero. Hikaya saves the description and generated character assets, not the original photo in its database or media storage. This does not describe the provider's retention terms.
Who can see it
You can. A teacher sees your child only after you enrol them in their class: first name, age, reading level, language and avatar, plus reading progress and quiz answers on the stories that teacher shares, and the notes you and the teacher exchange. Class stories can draw on your child's interests and reading needs, and the teacher can read those stories. If your child's school sponsors your membership, the school administrator also sees your child's first name and class. To make stories, pictures and narration, the details needed are sent to our AI providers. Nothing is sold or handed to advertisers.
Deleting it
You can delete a child's profile, and everything made from it, at any time from My space. Deleting your account removes your profile, your children's profiles and the stories, pictures and narration made from them from Hikaya's database and media storage. Books kept on a device for offline reading are removed when you sign out on that device, or the next time the app reaches Hikaya. A few technical records that hold no profile or story, such as sign-in attempt counters, may remain. Copies held by the services we use, such as our AI and payment providers, follow those services' own terms.
Support requests and usage measurement
When you send a request, we store your email, message and the school details or story reference you choose to provide so we can handle it. Do not include private child information. Only the platform owner can read these requests. You can ask for deletion through Contact.
We collect daily counts of selected adult actions and sample opens, without names, account identifiers or story content. We honor Do Not Track and Global Privacy Control. Child sessions do not send these events.