Squibble

Privacy Policy

Last updated · version 2026-05-30

Squibble is built for families, so we collect as little as possible — especially about kids — and never run ads or sell data. Here's exactly what we do.

Draft — pending legal review. This is plain-language template copy to explain how Squibble works. It is not yet final and isn't legal advice; the binding version will be reviewed by counsel before launch.

1. What we collect

  • Parent account: your email (for sign-in and order updates), and — if you sell — payout details handled by Stripe.
  • Child profiles: a display name and an age band (year of birth only — never a full date of birth). Optionally, a sign-in email or a parent-set passcode if you enable a kid login.
  • Designs & usage: the artwork your child creates, related text (titles, captions, prompts), and basic usage records we use to run features and bill optional AI.
  • Orders: shipping address and order details when you buy something.
  • Technical: standard logs needed to keep the service secure and working. We do not use tracking or advertising cookies.

2. Children & COPPA

A grown-up always owns the account. We follow the U.S. Children's Online Privacy Protection Act (COPPA) for users under 13:

  • We collect the minimumneeded — a display name and an age band — and don't require a child to share more.
  • Before a child under 13 can sign in on their own, we obtain verifiable parental consent from you.
  • A child's designs and account are managed under your parent account; you can review or delete them at any time.
  • We never condition a child's participation on disclosing more than is reasonably necessary.

3. How we use it

  • To create designs and turn them into products.
  • To run moderation and your approval workflow (safety).
  • To process orders, payouts, and optional paid AI.
  • To send essential account and order emails (not marketing blasts).
  • To secure, debug, and improve the service.

4. No ads, no data sales

We do not show behavioral ads to children or anyone else, and we do notsell or rent personal information. We don't build advertising profiles.

5. Who we share with (sub-processors)

We use a small set of trusted providers, only to deliver the service:

  • Google Cloud / Vertex AI — hosting, image generation/embeddings, and content-safety checks.
  • Printful — printing and shipping made-to-order products (receives the design + shipping address for an order).
  • Stripe — payments and creator payouts.
  • SendGrid — sending sign-in and order emails.

We share only what each needs for its task, and we may disclose information if required by law.

6. Retention & deletion

We keep information while your account is active and as needed to provide the service. You can delete a design, product, or child profile from your dashboard. When you delete something we remove it, except for records we must keep for completed orders, accounting, fraud prevention, or legal reasons. You can ask us to delete your whole account by emailing us.

7. Your choices & rights

As the account holder you can access, correct, or delete your and your children's information, withdraw consent for a child login, and request a copy or full deletion. Email us and we'll help. Depending on where you live, you may have additional rights under laws like the GDPR or CCPA.

8. Security

We use industry-standard measures: encrypted connections, secrets kept in a managed secret store, a private database, and least-privilege access. No system is perfectly secure, but we work to protect your family's data.

9. Contact

Privacy questions or requests? Email privacy@squibble.shop. We're based in the United States.

Questions? Email hello@squibble.shop.