Privacy Policy

This Privacy Policy (the "Policy") explains how Tenderwave ("we", "us"; operator details in Section 19) collects, processes, uses, shares and protects personal data when you use the Tenderwave website, web application, story-listening share pages, related APIs and customer-support channels (together, the "Service"). This Policy is made under Article 8 of Taiwan's Personal Data Protection Act (the "PDPA") and related regulations.

In this Policy:

• Parent: the adult user who registers an account (the account holder).
• Child: the minor for whom the Parent schedules stories.
• Family member: another person the Parent invites into the same family account (for example another parent, a grandparent or a caregiver).
• Listening guest: a person who opens a playback page through a link the Parent shared, without logging in.
• Voice twin: a voice model built with speech-synthesis technology from a voice sample recorded by the Parent or a family member, capable of reading stories aloud.
• Voiceprint data: recordings, acoustic features extracted from them, voice models and their derivatives.

By using the Service you confirm that you have read and understood this Policy. This Policy applies together with the Terms of Service; this Policy describes our data practices, while contractual matters such as the scope of the content license, AI training, disclaimers and limitation of liability are governed by the Terms of Service.

Under Article 8 of the PDPA, we collect the following categories of personal data (category codes follow the Ministry of Justice's "Specific Purposes and Categories of Personal Data"):

Where an item is marked "Required", not providing it means the account or the corresponding feature cannot be created or used; other data is optional for core functionality, but personalization, sharing or feedback features may be unavailable without it.

• Provided directly by you: registering, entering your child's details, recording a greeting, scheduling stories, inviting family members, contacting support.
• Provided by family members: invited family members recording their own voice, binding devices, pinning stories on the playback page.
• Collected automatically: recorded by our servers, cookies and similar technologies, and SDKs while you use the Service.
• Provided by third parties: Google login (email, name, avatar), the payment processor (payment results), advertising and analytics platforms (attribution, audience data).

When you provide another person's personal data (for example your child's name, a family member's email, or a recording of a family member's voice), you represent that you are entitled to do so and have obtained that person's consent (or, for a minor, the consent of their legal guardian).

We process personal data for the following specific purposes (Ministry of Justice codes) and on the following legal bases:

We will not use personal data for purposes clearly unrelated to those above without first informing you and obtaining your consent.

A voice is a biometric that can identify an individual, so we handle it to the standard for sensitive personal data under Article 6 of the PDPA. The points in this section are shown to you again in summary before you record your first greeting, and recording starts only after you check the consent box.

5.1 What we do

• Upload your recording to our private storage.
• To build your voice model and generate story audio, your recording sample and the resulting voice model are sent, depending on system load and availability at the time, either to processing nodes we operate ourselves or through a hosting provider (these may be on-premises machines or cloud servers), or to our speech-synthesis technology partner's cloud service. Processing nodes can fetch your files only through time-limited authorized links; temporary files are deleted once the job completes, and we do not keep your recordings on processing nodes.
• Use that model to generate narration audio for stories in the library, for playback by your family account and by listening guests you share a link with.
• For quality control, our staff or automated systems may spot-check recordings and generated audio; human review is limited to personnel bound by confidentiality obligations.

5.2 What we do not do

• We do not let other users select your voice twin in their accounts, and we do not publicly post recordings that identify you or sell them to data brokers.
• We do not use your voice twin outside your family account to generate content unrelated to the Service (for example external advertising); the license granted under Section 2.2 of the Terms of Service is used to provide, maintain, improve and promote the Service.

5.2a AI model training and irreversibility

Under Section 2.3 of the Terms of Service, we and our speech-technology partners may use your recordings and voiceprint features to develop, train, fine-tune and improve speech-synthesis models. Once data has been used in model training, it becomes de-identified network weights and parameters that cannot technically be traced back, separated out or erased; therefore, after you withdraw consent or delete your account, we delete the recordings that identify you, your dedicated voice model and generated audio, but models already trained and anonymized training results are unaffected.

5.3 Your representations

• The recording is of your own voice; if you help a family member (for example a grandparent) record, you represent that you have that person's explicit consent and that they are an adult.
• You will not upload or imitate the voice of any third party (including public figures and minors).
• You understand that a voice twin is machine-generated, may differ from the real voice, and is not guaranteed to generate in real time on every device or network.

5.4 Withdrawal and deletion

You can re-record or delete at any time under "My Voice Twins", or delete your entire account. After you withdraw consent, we delete the recordings that identify you and your dedicated voice model within 30 days and ask our technology partner to delete its copies; story audio already generated and still in the family account is deleted as well. Records we must keep by law (such as accounting records) and the trained models and anonymized results described in Section 5.2a are excluded. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.

5.5 Retention

Voiceprint data is kept until you delete your account, withdraw consent, or the account has had no login or playback activity for 24 consecutive months, whichever comes first; at that point we notify you by email and delete the data 30 days after that.

The scope of the voice-twin license, ownership of intellectual property and liability for misuse are set out in the Terms of Service.

• The users of the Service are Parents; children do not open accounts or log in, and we do not collect any data directly from children.
• We store only the child's name or nickname that the Parent chooses to provide (used in greetings and inside stories); we do not ask for the child's birthday, photos or school.
• Playback history (which story, how many times, when) is linked to the family account and used to order "Recently played" and to show Parents statistics; it is not used to target ads at children or to build behavioral profiles of them.
• The Storytime playback page contains no advertising, no external links, and asks for nothing from the child.
• Parents can correct or delete their child's data at any time; it is deleted together with the account.

We and our partners use cookies, pixels, local storage and similar technologies on the website and marketing pages:

In regions where the law requires it, non-essential cookies are enabled only after you consent. You can block or delete cookies in your browser settings, use the opt-out mechanisms offered by analytics providers, or adjust personalized advertising in your social and ad platform account settings. After opting out you may still see ads, just less relevant ones. The Storytime playback page loads no analytics or advertising tracking.

• Under Section 1.3 of the Terms of Service, by registering an account you agree to receive our communications by email, LINE official account, in-app push and announcements, including marketing content such as product news, new story releases, offers and events.
• Notices related to operating the Service (verification emails, billing, security alerts, service changes) are not marketing and cannot be unsubscribed from.
• Every marketing email includes an unsubscribe link; the LINE official account can be blocked; you can also adjust "Settings → Notifications" or email us to stop. We process requests within 10 business days.
• We may send personalized reminders based on your usage (for example a trial about to expire, or no story scheduled for a while); these can be unsubscribed from in the same way.

We do not sell personal data. We share it within the following limits:

We enter into data-processing agreements with our service providers requiring them to process data only on our instructions and to apply appropriate security measures.

• A Parent's share link is equivalent to a playback authorization: anyone holding the link can open the playback page and see the child's name, scheduled stories and playback history. Share it only with people you trust; if you suspect it has leaked, make a new link under "Listen Link" and the old one stops working immediately.
• The first device to open a link gets a randomly generated device identifier bound to the family account; we record the device type, last use and playback time to enforce the plan's binding and concurrent-playback limits. Parents can unpair any device under "Devices".
• Listening guests do not need to log in or provide any personal data; the Storytime page contains no analytics or advertising tracking.
• If an invited family member records their voice, Section 5 applies to them equally; the Parent account holder can manage, disable or remove family members.

To provide the Service, your data may be stored or processed outside Taiwan, including: database and file storage (Asia-Pacific), web hosting and content-delivery nodes (United States and worldwide), speech-synthesis processing (where our technology partner is located, mainly the United States), and analytics and advertising platforms (United States, Japan and others). Under Article 21 of the PDPA we confirm that such transfers do not violate restrictions imposed by the competent authority, and we contractually require overseas processors to provide protection no lower than this Policy. By using the Service you acknowledge and agree to these international transfers.

Retention may be extended where required by law, or where necessary to handle a dispute or prevent abuse.

• All transmission is encrypted with TLS; databases and file storage are encrypted at rest; passwords are stored as irreversible hashes.
• Voiceprint data is kept in non-public storage accessible only through short-lived authorization; access controls ensure users can read and write only their own family's data.
• Voice-processing nodes obtain jobs from us with a dedicated key and never connect to the database directly; recordings and generated files exist on a node only in temporary storage and are deleted when the job completes or fails.
• Access is granted on a least-privilege basis; employees and processors are bound by confidentiality.
• We keep our security measures up to date, but no method of transmission or storage over the internet is 100% secure. To the extent permitted by law, we are not liable for unauthorized access not caused by our willful misconduct or gross negligence; if a data breach affects your rights, we will notify you and the competent authority as required by law.
• Keep your password and share links safe, and contact us right away if you suspect your account has been compromised.

Under Article 3 of the PDPA you have the following rights regarding your personal data, and these rights cannot be waived in advance or limited by contract:

• to inquire about or request access to it;
• to request a copy (available via export in "Settings", or by email);
• to request supplementation or correction;
• to request that collection, processing or use be stopped;
• to request deletion.

In addition you can: withdraw consent for your voice twin (Section 5.4), unsubscribe from marketing, turn off personalized ads (Section 7), unpair devices, and remove family members.

How to exercise them: most of these you can do yourself under "Settings" in your account; for the rest, email the contact address in Section 19 with your request. To protect your data we may ask you to write from your registered email or to verify your identity. We respond within 15 days (extendable by 15 days where necessary, with reasons given); where the law allows us to charge necessary costs we will tell you in advance. If we refuse a request on lawful grounds (for example a statutory retention duty, or harm to a third party's material interests), we will explain why.

If you believe our processing violates the PDPA, you have the right to complain to us and may also file a report with the Personal Data Protection Commission or another competent authority.

You can delete your account yourself under "Settings → Security → Delete account". After deletion: the account, family, child data, schedules, pins, device bindings, recordings and voice models, and generated audio are removed from production systems within 30 days, and backup copies are rotated out within 90 days; we also request deletion of voice-model copies held by our technology partner. Accounting records, unsubscribe records and data we must retain by law are excluded. Once the account is deleted, share links stop working immediately and listening guests can no longer play stories.

The Service is available only to Parents who are at least 18 years old (or have full legal capacity under the law where they live). If we unknowingly obtain data provided directly by a minor, we delete it as soon as we become aware. A child's data may be provided and managed only by their parent or legal guardian.

The Service may link to third-party websites or integrate third-party services (Google login, LINE, payment pages). These third parties have their own privacy policies, and we are not responsible for their content or conduct. When you log in with Google, Google processes your data under its own policy.

We may revise this Policy as the Service, technology or regulations change. Material changes (for example new data categories, changed uses of voiceprint data, or new recipients) are announced at least 14 days before they take effect by email or in-app notice, and the date at the top of this page is updated; where a change affects the use of sensitive data, we obtain your consent again. Other changes take effect on publication. Continuing to use the Service after a change takes effect means you have understood the revised Policy.

Operator: Tenderwave (the registered company name and tax ID will be added to this section after incorporation; website tenderwave.ai).
Privacy contact: privacy@tenderwave.ai
Support: hello@tenderwave.ai, LINE official account

We respond to complaints within 15 days of receipt.

This Policy governs the collection and use of personal data and your data-protection rights; account rules, the scope of the license to user content and voiceprints, AI training, intellectual property, service availability, disclaimers, limitation of liability, indemnification, governing law and jurisdiction are set out in the Terms of Service. Checking the consent box at registration means you accept both documents.