Privacy Policy

Clover Hoof Tales is operated by Clover Hoof Tales, LLC (“Clover Hoof Tales,” “we,” “us,” or “our”). We offer a parent-managed story membership with books, activities, and a protected Child Mode.

This policy applies to the Clover Hoof Tales website, parent account, Child Mode, and related membership services.

An adult parent or legal guardian creates and manages the family account. Children do not create independent accounts, make purchases, or provide contact information directly to Clover Hoof Tales.

Parents choose which child profiles to create and may contact us to review, correct, or request deletion of a child's information.

When a parent creates or uses an account, we may collect:

• First and last name, email address, and U.S. phone number.
• Street address, optional address line 2, city, state, and ZIP code.
• Account and authentication information, security settings, and session information.
• Membership plan, subscription, payment status, billing-support information, and transaction references.
• Messages and information a parent chooses to provide when contacting us.
• A separate record of optional marketing-text consent, if the parent affirmatively selects it.

Passwords are handled through Supabase authentication. Clover Hoof Tales does not receive or store a readable plaintext copy of a parent's password.

Parent Guide Preferences and Progress

When you use Clover Hoof Tales Parent Guides, we save your selected weekly intention and your Practice activity checkbox selections. These selections are associated with your parent account and saved as you check or uncheck activities, allowing you to return to your guide and continue where you left off.

Your responses to guided reflection questions are not saved to your account or stored in our database.

Your saved intentions and Practice selections are used to support your Parent Guide experience and are not shared with other families.

For a parent-created child profile, Clover Hoof Tales currently collects the child's first name, a broad age range selected by the parent, and the parent's optional choice of Clover Hoof Tales-provided avatar artwork. We do not ask for the child's exact birthdate, and we do not offer child photo uploads.

As reading and activity features are enabled, the service may associate limited information such as reading progress, book completion, activity progress, character unlocks, badges, and necessary product or security events with a child profile. We collect and use this information only when the corresponding feature is operating.

Child Mode also uses limited internal child and household identifiers and session timing information needed to provide the experience, maintain household separation, and protect parent-only areas.

Our current MVP is not designed to collect a child's email, phone number, home address, precise birthdate, photo, voice, contacts, free-form biography, child-to-child messages, precise location, or device fingerprint.

We use parent information to:

• Create, authenticate, secure, and manage the parent account.
• Administer memberships, payments, cancellations, and billing support.
• Provide customer service and respond to account or technical questions.
• Understand general customer geography, where memberships are purchased, and the effectiveness of our marketing.
• Improve the service and, where applicable in the future, support physical fulfillment or parent-directed mailings.
• Protect Clover Hoof Tales, our families, and others; prevent fraud or misuse; and comply with legal obligations.

We do not use a child's address or location for marketing. The mailing address associated with the account belongs to the adult account holder.

We use child-profile information to personalize the child's bookshelf and activities, display the selected avatar and first name, remember feature progress when that capability is enabled, protect the family's Child Mode, and operate and improve the service.

We do not sell children's personal information. We do not use children's personal information for targeted advertising, and Clover Hoof Tales does not currently include an advertising SDK or behavioral advertising SDK.

Clover Hoof Tales is being designed as a child-directed service. Before Checkout, the parent or legal guardian is shown a direct Children's Privacy Notice and must affirmatively accept it. Notice acceptance and payment-based parental verification are recorded separately.

Clover Hoof Tales uses a qualifying Stripe credit- or debit-card transaction that provides transaction notification as its payment-based parental-verification method. The parent must separately and affirmatively accept the current Children's Privacy Notice before payment; payment does not itself record notice acceptance.

A child profile and Child Mode remain unavailable until the current notice has been affirmatively accepted, parental verification is complete, and an active paid membership is present.

We seek to collect no more child information than is reasonably necessary to provide the child-facing experience.

A parent or legal guardian may request access to or correction of a child's information, request deletion of a child profile or account, or withdraw permission for future collection and use where applicable.

To request deletion of your account, submit an account-deletion request through the Privacy section of your Parent Account.

Submitting a request begins our review and identity-verification process; it does not immediately or automatically delete the account. We may need to verify the requester's identity and relationship to the account before acting.

Membership cancellation is separate from account deletion. Canceling or losing membership access does not automatically delete account, child, reading-progress, or Parent Guide information.

A parent phone number is required for legitimate account, billing, support, and security purposes. Providing a phone number does not enroll anyone in promotional text messages.

Registration includes a separate, optional, unchecked choice for possible future text reminders about new books, activities, and membership updates. Clover Hoof Tales does not currently operate a promotional SMS delivery service. If marketing texts are offered later, participation will remain optional and parents may withdraw their permission or opt out. Additional program-specific terms will be provided before such messages begin.

Supabase Auth sends necessary authentication-related emails such as password recovery and security notices. Parent signup does not require an email-confirmation link. We may also respond when a parent contacts us directly.

Email-list notice updated October 28, 2026. Adults may separately choose to provide an email address for Clover Hoof Tales Story Club announcements and occasional updates, including launch news and updates after launch. This signup does not create a family account, enroll a child, or purchase a membership.

We record the email address and consent time, and send a confirmation link through Resend, our email delivery provider. You must use the confirmation link before you are included in confirmed Story Club announcements and updates. We store hashed confirmation and unsubscribe tokens and the related confirmation, unsubscribe, and record timestamps. We do not collect children's information through this form.

We use email-list information to manage signup and confirmation, send Story Club announcements and occasional updates after confirmation, and handle unsubscribe and deletion requests. Supabase provides storage for email-list records. Resend receives recipient email addresses and email content to deliver our messages.

We use short-lived, hashed abuse-prevention counters to limit signup attempts. We do not store raw IP addresses in the email subscriber list. Our hosting and email providers may process necessary delivery and security information.

You can stop Story Club announcements and updates using the unsubscribe link in our emails, or request email-list deletion by emailing support@cloverhooftales.com. Rejoining after unsubscribing requires a new confirmation.

Unconfirmed requests and unsubscribed records become eligible for deletion after 30 days and are removed through retention cleanup. Confirmed Story Club announcement subscribers remain subscribed until they unsubscribe or request deletion. We remove expired or unnecessary tokens when they are no longer needed. Requests for deletion are handled manually. Limited copies may remain temporarily in provider logs and backups under their retention practices. These email-list rules are separate from membership and child-data retention.

Stripe hosts Checkout and the Customer Portal and processes subscription payments. Stripe may receive the parent's email, internal account and plan references, and the payment or billing information the parent provides to Stripe. Clover Hoof Tales does not intentionally send child-profile information to Stripe, and Stripe does not operate inside Child Mode.

We retain limited transaction, subscription, invoice, and entitlement records needed to administer the membership, provide support, prevent fraud, and meet legal or accounting obligations. We do not receive full payment-card details from Stripe.

We use service providers only as needed to operate Clover Hoof Tales:

• Supabase provides authentication, database, private file storage, session handling, and authentication-related email. It processes parent account information and child-profile information for these purposes.
• Stripe provides hosted Checkout, subscription payment processing, billing management, and verified payment notifications.

Website Fraunces and Nunito font files are packaged and served with the application. Confirmation emails may load these fonts through a Google Fonts stylesheet where supported; other email clients use fallback fonts. Email clients that load images or fonts contact the services hosting those resources.

We may also disclose information when required by law, to protect safety or legal rights, to investigate fraud or misuse, or as part of a business transaction subject to appropriate protections. We do not currently use third-party advertising, behavioral analytics, or error-monitoring SDKs in the application.

We use necessary authentication and security technologies—not advertising cookies—to keep parents signed in, process account recovery, protect Parent PIN recovery, and operate Child Mode.

Child Mode uses a signed, HttpOnly, SameSite=Strict cookie containing internal child and parent account identifiers and issued/expiration information. It expires after eight hours and is marked Secure in production. The production Child Mode path does not intentionally place child information in browser local or session storage.

We retain information for as long as reasonably necessary to provide and secure the service, administer the membership, meet legal and accounting obligations, resolve disputes, and enforce our agreements.

When a verified parent requests deletion, we intend to remove applicable child-profile and reading/progress information from active systems within 30 days, subject to information that must be retained for legal, security, fraud-prevention, transaction, backup, or other legitimate requirements. Deletion from active systems does not establish the removal date for any copies in provider logs or backups. Contact us for information about those copies when making a deletion request.

We use administrative, technical, and organizational measures appropriate to the nature of the service and information involved. These include separating parent and child experiences, limiting privileged access, and protecting sensitive operations on the server. No internet or storage system can guarantee absolute security.

Clover Hoof Tales is operated in Montana and is intended for families in the United States during the MVP. Privacy rights may vary by state. We will honor applicable rights and legal requirements, including rights that cannot be waived by this policy. Parents may contact us with a privacy request or question.

We may update this policy as Clover Hoof Tales changes. We will post the revised policy with a new effective date and provide additional notice when required by law or when a change materially affects how we handle children's information.

For privacy questions, parent requests, or support, contact: