Last updated: July 5, 2026.
This Privacy Policy explains how Dindili collects, uses, stores, shares, and protects personal data on https://dindili.com/, in the family dashboard, payment flows, e-mail, WhatsApp, and Kindle deliveries, and in the generation of stories, images, illustrations, audio, EPUB/PDF files, and other current or future service features.
By creating an account, subscribing to a plan, buying credits, registering a child, configuring delivery channels, or requesting the generation of stories and media, you represent that you have read this Policy and that you have authority to provide the registered data, especially when it involves data about children or other family members.
1. Data controller
For purposes of the Brazilian General Data Protection Law (Law No. 13,709/2018 - LGPD), Dindili acts as the controller of the personal data needed to provide the platform. When we use providers for infrastructure, payments, e-mail, storage, analytics, AI, WhatsApp, Kindle, or similar services, those providers may act as processors or independent controllers, depending on the case and their own terms.
The main channel for privacy matters is [email protected]. You may also use the contact page: https://dindili.com/contact/.
2. Data we may collect
We collect only data reasonably necessary to operate, protect, and improve Dindili. This may include:
- Parent or guardian data: name, e-mail, phone number, photo, language, location, login credentials, access codes, social login identifiers, communication preferences, and delivery data.
- Child data: name, date of birth or age, gender when provided, photo, delivery time, location when needed for weather context, characteristics, free-form description, interests, personality, values, developmental prompts, family goals, and other information the parent or guardian chooses to provide to personalize stories.
- Family and administrator data: invitations, invited e-mails, permissions, relationship between account owner and participants, invitation acceptance or refusal, and shared use of the family plan and credits.
- Subscription, credit, and usage data: contracted plan, subscription term, status, credits purchased, granted, or consumed, payment history, extra story requests, cover, illustration, audio, complete package requests, ratings, processing status, and reading history.
- Payment data: transaction identifiers, status, amount, currency, payment platform, receipts, webhook events, and antifraud records. Full card data is normally handled directly by payment gateways such as Stripe, Mercado Pago, Pix, or other providers shown at checkout.
- Delivery data: delivery e-mail, WhatsApp number, Kindle/Amazon e-mail, delivery preferences for site, e-mail, WhatsApp, and Kindle, and EPUB/PDF files or links required for delivery.
- Technical data: IP address, browser, device, session identifiers, pages accessed, cookies, security events, error logs, usage metrics, campaign source, and conversion events.
- Generated or submitted content: prompts, stories, titles, summaries, images, illustrations, audio, files, ratings, support messages, and other content created, requested, or uploaded on the platform.
3. Children’s data
Dindili is designed for families, but the account must be created, managed, and paid for by an adult parent or guardian. Children’s data is processed to create a personalized, safe, and age-appropriate experience, always based on information provided or authorized by the parent or guardian.
Please do not register sensitive data, diagnoses, documents, full addresses, overly detailed routines, or any information that is not necessary for the story. When sensitive information is useful for personalization, provide only the minimum necessary and avoid details that expose the child.
We do not sell children’s data. We also do not use child profiles for behavioral advertising directed at children. We may use aggregated, non-identifiable metrics to understand product performance, story quality, and technical stability.
4. How we use data
We use personal data to:
- create and maintain accounts, authenticate access, and protect sessions;
- allow registration of children, additional guardians, and family settings;
- generate personalized stories based on age, interests, values, personality, daily prompts, weather, language, schedule, and indicated preferences;
- generate covers, illustrations, audio, EPUB/PDF files, and other formats requested by the user;
- deliver stories and files on the site, by e-mail, WhatsApp, and Kindle, according to account settings;
- process subscriptions, credits, payments, cancellations, refunds, and receipts;
- send transactional communications, access codes, production notices, family invitations, support, and service-related messages;
- prevent fraud, abuse, misuse, unauthorized access, and security incidents;
- comply with legal, regulatory, tax, accounting obligations and orders from competent authorities;
- improve the experience, fix errors, test features, measure performance, and understand how the service is used.
5. Use of artificial intelligence
Dindili uses artificial intelligence models and automated services to create stories, themes, narrative profiles, summaries, images, illustrations, audio, and derivative files. To do this, some information provided by the parent or guardian may be sent to AI and infrastructure providers, always limited to what is necessary to execute the request.
Prompts may include, for example, the child’s first name, age, language, characteristics, interests, values, daily prompts, approximate location when used for weather, narrative preferences, and story excerpts. We avoid using complete data when a reduced version is sufficient for the purpose.
AI-generated content may contain inaccuracies, repetitions, unsuitable wording, or unexpected interpretations. The parent or guardian should review content before sharing it broadly or using it in sensitive contexts. The service does not replace medical, psychological, educational, legal, or professional guidance.
6. Sharing with third parties
We may share personal data with third parties only when necessary for the service to work, to comply with the law, or based on a request/setting made by the user. This includes:
- hosting, database, cache, S3/CDN storage, and technical processing providers;
- AI, image, audio, automation, and file generation providers;
- payment gateways, banks, acquirers, antifraud providers, Pix, and billing platforms;
- e-mail, WhatsApp, Kindle/Amazon, and messaging services used to deliver stories and notifications;
- analytics, conversion measurement, security, and customer support tools;
- other administrators invited by the family account owner, to the extent needed for shared account use;
- authorities, courts, regulators, auditors, accountants, and advisors when there is a legal obligation or defense of rights.
Links to external sites, gateways, and third-party platforms have their own policies. Dindili does not fully control those pages, cookies, or external practices.
7. Cookies, metrics, and advertising
We use cookies and similar technologies to maintain login and session, remember preferences, measure performance, protect against abuse, understand navigation, improve pages, and, when applicable, measure campaigns or display relevant communications. Cookies may be first-party or third-party.
You may block cookies in your browser, but some areas may stop working properly, including login, checkout, preferences, and dashboard features. When advertising or analytics tools are used, they may receive technical events such as page viewed, plan viewed, checkout started, or purchase completed, as permitted by applicable law.
8. Security
We adopt reasonable technical and administrative measures to protect data against unauthorized access, loss, misuse, alteration, and improper disclosure. This includes access controls, credentials, logs, secure connections when available, protected storage, and limited internal access.
No system is absolutely invulnerable. If we identify a relevant incident that may create risk or harm to data subjects, we will take appropriate steps, including assessment, containment, communication when required, and cooperation with competent authorities.
9. Retention and deletion
We keep data for as long as necessary to provide the service, preserve account history, allow file reprocessing, comply with legal obligations, resolve disputes, prevent fraud, and defend rights. Payment data and tax records may be kept for statutory periods. Stories, files, and media may remain available while the account is active or while needed for delivery and user history.
When deletion is requested, we may anonymize, delete, or restrict data, except when there is a legal obligation, need to preserve evidence, security, fraud prevention, pending contractual performance, or another legitimate legal basis.
10. Data subject rights
Under the LGPD, you may request confirmation of processing, access, correction, anonymization, blocking, deletion, portability, information about sharing, review of automated decisions when applicable, withdrawal of consent, and objection to irregular processing.
To protect the account and registered children, we may request identity confirmation before responding to requests. Requests should be sent to [email protected] or through https://dindili.com/contact/.
11. International transfer
Some providers used by Dindili may operate outside Brazil or store/process data in other countries. When this occurs, we will adopt legal bases and measures compatible with the LGPD, considering contracts, security policies, operational need, and adequate data protection.
12. Changes to this Policy
We may update this Policy to reflect changes in the product, providers, legislation, or privacy practices. The current version will be published on this page with an update date. Material changes may be communicated by e-mail, site notice, or dashboard notification.
If you continue using Dindili after an update, we will understand that you are aware of the new version, without prejudice to rights guaranteed by law.
