← Nooodle home

Privacy Policy

A plain-English description of what data we collect, why, and what we do with it.

Last updated: April 21, 2026

1. Who This Policy Covers

This Privacy Policy describes how Nooodle Inc. ("Nooodle," "we," "our," or "us") collects, uses, and handles information from the parent or legal guardian who creates a Nooodle account ("you") and any young creators who use the account under your supervision.

The short version: accounts are created and managed by a parent or guardian aged 18+. We collect the minimum data needed to run the service. We do not sell data. We do not show advertising.

2. Information We Collect

2.1 From Parents

  • Email address — used for account login (magic-link authentication), billing receipts, and important service communications.
  • Payment information — handled entirely by Stripe, our payment processor. Nooodle never stores credit card numbers.
  • Subscription status— which plan you're on, renewal dates, and credit balance.
  • Account preferences — video quality settings and other account-level settings you configure.

2.2 From Creator Profiles (inside the Parent Account)

  • Display name / nickname — a nickname picked by the parent or creator. We do not ask for — and ask you not to enter — a real name.
  • Creative works — images, videos, and text prompts created through the space. These are stored to display them inside the account and, if the parent chooses to publish, in the Gallery.
  • Activity data — number of generations, last active date, credit usage. This is shown only to the parent in their dashboard.
  • Filter events — if a prompt is blocked by the content filter, the event is logged for parental review.

2.3 Automatically Collected

  • Usage logs — which features are used and when, for debugging and improving the service. No advertising profiles are built from this data.
  • Vercel Analytics— we use Vercel's first-party, cookie-less analytics to measure aggregate page views and basic performance. It does not track individuals across sites and does not build advertising profiles.
  • Session cookie — a secure, HTTP-only cookie used to keep you signed in. It contains a session identifier, not personal information.

3. How We Use Your Information

  • Providing, operating, and improving the Nooodle service
  • Processing payments and managing subscriptions through Stripe
  • Sending service-related emails (receipts, security alerts, important updates)
  • Enabling parents to monitor and manage their child's activity
  • Enforcing our safety policies and Terms of Service
  • Responding to support requests

We do notuse your information to: show targeted advertising, build behavioural profiles, train AI models on your family's creations, or sell data to third parties.

4. AI Model Processing

When your child creates an image or video, the text prompt and settings are sent to our AI providers for processing:

  • fal.ai — used for image and video generation. fal.ai processes prompts on their infrastructure. We do not pass personally identifying information to fal.ai alongside prompts.
  • OpenAI— used for certain image styles. Prompts are processed under OpenAI's API terms and Usage Policies.

All prompts pass through Nooodle's own content filter before being sent to any AI provider. Prompts that fail our filter are not forwarded.

5. Sharing Your Information

We share data only with trusted service providers who help us deliver the service, under strict data processing agreements:

  • Stripe — payment processing
  • fal.ai / OpenAI — AI generation (prompts only, no PII)
  • Neon / PostgreSQL — database hosting
  • Vercel — application hosting and deployment

We do not share information with advertisers, data brokers, social media platforms, or any other third parties not listed above. We will disclose information if required by law or to protect the safety of users.

6. Accounts and Young Creators

Nooodle is not directed to children under 13 as an operator; accounts are created and controlled by a parent or legal guardian aged 18 or older. Creator profiles live inside the parent's account and do not have their own logins. We do not ask the creator for their real name, age, or other personal information.

As the parent account holder, you can at any time:

  • Review the information associated with any creator profile in your account
  • Delete a creator profile and its data
  • Delete your account entirely, which removes all creator profiles and their data
  • Contact us at legal@nooodle.ai with any privacy request

We aim to respond to privacy requests within 5 business days.

7. Data Retention

We keep your account data for as long as your account is active. When you delete your account:

  • All creator profiles, canvases, and generated content are permanently deleted within 30 days
  • Payment records may be retained for up to 7 years as required by tax law
  • Filter event logs may be retained for up to 12 months to help us improve the filter, after which they are anonymised
  • Published Gallery works are removed from public view immediately; storage copies within 30 days

8. Security

We take security seriously. Measures we use include:

  • HTTPS encryption for all data in transit
  • HTTP-only, Secure session cookies (not accessible to JavaScript)
  • No passwords stored (magic-link / OTP authentication only)
  • Database encryption at rest
  • Principle of least privilege for all internal systems

No system is perfectly secure. If you believe your account has been compromised, contact us immediately at legal@nooodle.ai.

9. Your Rights (GDPR / California)

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email legal@nooodle.ai. We will respond within 30 days. California residents may also have additional rights under the CCPA.

10. Cookies

Nooodle uses a session authentication cookie to keep you signed in. We do not use advertising cookies, and we do not use cross-site tracking cookies. Aggregate performance measurement is handled by Vercel Analytics, which is cookie-less.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email at least 14 days before they take effect. The "Last updated" date at the top of this page will always reflect the current version.

12. Contact Us

Privacy questions or data deletion requests: legal@nooodle.ai
General questions and support: hello@nooodle.ai
Nooodle Inc., 1209 Orange Street, Wilmington, DE 19801, United States.