PlotTwist PRIVACY POLICY
PlotTwist PRIVACY POLICY
PlotTwist (“we,” “our,” or “us”) is committed to protecting the privacy of children who use our storytelling application. This Privacy Policy explains how we collect, use, disclose, and safeguard information in compliance with the Children’s Online Privacy Protection Act (COPPA) and other applicable privacy laws.
PlotTwist is designed with a local-first architecture. The vast majority of data associated with your child’s use of the app—including their name, story preferences, generated stories, and audio recordings—is stored locally on the device and is never transmitted to or accessible by PlotTwist. We do not have access to, and cannot view, this locally stored information.
The only information we collect and store on our servers is:
• Randomized payment identifiers (tokenized references processed securely through third-party payment processors, used to manage subscriptions; we do not collect or store actual credit card numbers, billing addresses, email addresses, or other financial account details)
The following information is stored only on the user’s device and is never transmitted to PlotTwist:
• Child’s first name (used only for story personalization)
• Story preferences and interests
• Generated stories and saved content
• Audio recordings of generated stories
• App settings and preferences
Because this data never leaves the device, PlotTwist cannot access, view, collect, or share it.
When the app generates stories or audio narration, data is sent directly from the device to third-party services for real-time processing. This data is processed transiently and is not stored by these services beyond what is needed to complete the request:
• Anthropic (Claude AI): Story prompts are sent for story generation. Anthropic processes these in real time and does not store or use them for training.
• ElevenLabs: Story text is sent for text-to-speech generation. Audio is generated on-demand and not retained by ElevenLabs beyond temporary processing.
We do not collect, store, or have access to:
• Email addresses
• Children’s names or any child-entered content
• Payment card numbers, billing addresses, or financial account details
• Social security numbers or government-issued identification
• Physical addresses
• Photographs or videos of children
• Geolocation information
• Social media information or contacts
• Persistent identifiers for advertising or cross-app tracking purposes
• Browsing history or activity on other apps
The limited information we collect (randomized payment identifiers) is used only to:
• Process payments and manage subscriptions
• Ensure compliance with our Terms and Conditions and applicable laws
We do NOT use any information for:
• Targeted advertising or marketing to children
• Creating behavioral profiles of any kind
• Selling or renting to third parties
We do not sell, rent, or share children’s personal information. Because we do not collect children’s personal information on our servers, there is minimal information to share. The limited sharing that occurs is described below:
• Payment Processors: Receive only randomized payment identifiers to process subscription transactions. They do not receive any children’s information.
• Anthropic (Claude AI): Receives story prompts directly from the device for real-time processing. Data is processed transiently according to Anthropic’s data policies, which do not use customer data for training without explicit consent.
• ElevenLabs: Receives story text directly from the device for text-to-speech generation. Audio is generated on-demand and not stored beyond temporary processing.
We may disclose information we possess if required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, protect user safety, investigate fraud, or comply with legal obligations. Because children’s data is stored locally on the device, we do not have access to it and therefore cannot disclose it.
In the event of a merger, acquisition, or sale of assets, any information we hold may be transferred. We will provide notice and obtain new parental consent if the new entity’s privacy practices differ materially from this policy.
Because children’s data is stored locally on the device, parents have direct control over it at all times. Parents can:
• View and manage: Access all of their child’s data directly on the device
• Delete: Delete stories, preferences, and all locally stored data at any time by deleting content within the app or uninstalling the app
• Account Management: Manage subscription and account settings through in-app parental controls
For questions about the randomized payment identifiers we hold, or to request their deletion, parents may:
• Contact us at support@trudgetheroadllc.com
• Contact support through the app
We will respond to verifiable parental requests within 10 business days.
We implement robust security measures to protect the limited information we hold:
We maintain a written information security program that includes:
• Designated security coordinator responsible for program oversight
• Annual risk assessments to identify security vulnerabilities
• Encryption of data in transit and at rest
• Access controls limiting who can view stored information
• Regular security testing and monitoring
• Secure authentication and authorization procedures
• Employee training on privacy and security requirements
• Regular evaluation and updates to security practices
Data stored locally on the device is protected by the device’s own security features (e.g., device encryption, passcodes). We recommend parents enable device-level security to protect locally stored data.
We require all service providers to maintain appropriate security measures and undergo regular compliance assessments.
• Randomized Payment Identifiers: Retained while the subscription is active. Upon cancellation, deleted within 30 days except as required for legal or accounting purposes.
• Locally Stored Data: Remains on the device under the parent’s control. Deleting the app or its data removes this information entirely. PlotTwist has no role in retaining or deleting locally stored data.
Before a child can use PlotTwist, we obtain verifiable parental consent through:
• Randomized payment verification (a small charge to verify parental authority)
• Knowledge-based authentication processes
We provide clear notice to parents about:
• What information we collect (and what we do not)
• How we use that information
• Our disclosure practices
• Parental rights
PlotTwist does not contain links to third-party websites or services. We do not integrate with social media platforms or allow sharing of children’s content outside the app. Any future integration with external services will require updated parental consent.
PlotTwist is operated in the United States and complies with U.S. privacy laws, including COPPA. If you access the app from outside the United States, please be aware that the limited information we collect may be transferred to, stored, and processed in the United States. Locally stored data remains on your device regardless of location. By using PlotTwist, you consent to such transfer and processing.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
• We will notify parents via in-app notification at least 30 days before changes take effect
• We will obtain new parental consent if changes expand the collection, use, or disclosure of children’s information
• We will update the “Effective Date” at the top of this policy
• We will maintain prior versions of the policy for reference
We encourage parents to review this Privacy Policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:
Email: support@trudgetheroadllc.com
Mailing Address:
TRUDGE THE ROAD LLC
d/b/a PlotTwist Studios
4319 S NATIONAL AVE #211
SPRINGFIELD, MO 65810
United States
Response Time: We respond to all privacy inquiries within 10 business days.
PlotTwist complies with the Children’s Online Privacy Protection Act (COPPA) and the COPPA Rule as amended in 2025. We do not knowingly collect personal information from children under 13 without verifiable parental consent. Our local-first architecture ensures that children’s personal data remains on the device and is not collected by PlotTwist. If we discover that we have inadvertently collected information from a child without proper consent, we will delete that information immediately.
Parents may report concerns about our practices to the Federal Trade Commission:
Federal Trade Commission
Consumer Response Center
600 Pennsylvania Avenue, NW
Washington, DC 20580
www.ftc.gov
* * *
Last Updated: April 11, 2026