TaleLib · Terms of Use · 繁體中文

TaleLib Privacy Policy

Last updated: November 11, 2026. Effective: November 11, 2026.
This policy applies to TaleLib (聽庫) downloaded from App Stores outside mainland China, including Hong Kong, Macao, Taiwan, Singapore, Malaysia, Thailand, the Philippines, the United States, Canada, the United Kingdom, Australia and New Zealand. If this English version and the Chinese version differ, the Chinese version prevails.

1. Summary

• TaleLib shows no ads and uses no third-party analytics or crash reporting. We do not use your information for profiling or marketing.
• You can listen to the free chapters of the built-in books without an account. You need to sign in only to import your own books, to buy or restore a subscription, or to claim the free trial.
• Imported books stay on your phone. To generate English and read Chinese aloud, the text that needs processing is sent through TaleLib's server to language-model and voice services, and is not kept afterwards.
• TaleLib's servers are in mainland China. Your information is transferred to and processed in mainland China (section 7).
• Your child's name, age, listening history and saved sentences stay on your phone and are never uploaded.
• You can sign out or delete your account in the app at any time.

2. Who we are

This policy covers the TaleLib iOS app and the server and website that support it (talelib.openquestion.cn).

Data controller (operator): 俐桦（上海）影视工作室 (registered in Shanghai, China)
Address: 2F, 979 Yunhan Road, Lingang New Area, China (Shanghai) Pilot Free Trade Zone, China
Privacy contact and support: support@openquestion.cn

3. What we collect and why

3.1 Without an account

Browsing the shelf and listening to the free chapters of the built-in books needs no account and sends none of your personal information to our server. The Chinese narration of the built-in books ships with the app; English speech is synthesized on your phone.

3.2 Account and sign-in

You can sign in with Apple or Google. Each sign-in method is its own account; we do not merge them.

• Sign in with Apple: the user identifier Apple provides; the email address Apple provides if you choose to share it (it may be an Apple relay address); and a token, stored encrypted, used to revoke the authorization when you delete your account. We never receive your Apple ID password.
• Sign in with Google: the user identifier and email address Google provides. We do not receive your Google password, contacts or any other Google data.
• Staying signed in: after you sign in, the server issues a random session token, kept in your phone's Keychain; the server stores only its hash, together with the app version.
• Sign-in records: the time and method of each sign-in and a keyed hash of your IP address (the IP cannot be recovered from it), for account security, kept for 180 days.

Purposes: to create and recognize your account, keep you signed in, link your subscription and trial allowance, and keep your account secure. Legal basis: necessary to perform our contract with you, and your consent.

3.3 Subscriptions

Subscriptions are bought through Apple's in-app purchase and paid to Apple; we never see your card or payment details. To confirm your membership we process the transaction information Apple signs: transaction and original transaction IDs, the product (plan), purchase and expiry dates, refund or revocation dates, the environment, and the account identifier the app gives Apple at purchase (to bind the subscription to your account). For each subscription we also count the characters imported and read aloud each month (numbers only, no content).

3.4 Free trial

Once signed in, you can claim one import trial. To stop it being claimed twice we:

• record that your account claimed it and when, and keep a keyed hash of your sign-in identity (your Apple or Google identifier cannot be recovered from it);
• use Apple's DeviceCheck service to mark the device as having claimed it, at Apple. We never get a hardware identifier; Apple only tells us whether the device has claimed before.

3.5 Imported books and generating English

Imported books (TXT, EPUB, PDF, MOBI, pasted text, photographed pages) are stored only on your phone. When you generate English:

• the book's title and a short opening passage are sent to our server and passed to a language model to estimate the reading age and suggested level;
• the text of the chapters you choose is sent to our server and passed to a language model to rewrite it as graded English;
• when you ask to regenerate a sentence under "this translation isn't good", that sentence, a few sentences around it, its previous English and your comments are sent to our server and passed to a language model.

Chapter text is kept on the server only while it waits and is processed, and is deleted as soon as the chapter is generated. Results are deleted one day after the app collects them, or after seven days if never collected. So that the same chapter is not charged twice, the server keeps a hash of each chapter (no text) for the current month.

3.6 Reading imported books' Chinese aloud

When you play or export an imported book, the Chinese sentences to be read are sent through our server to Alibaba Cloud Model Studio (Bailian) for speech synthesis. The server returns the audio to the app and does not keep the sentences. The audio is cached on your phone. Without a network connection, the app uses iOS's built-in voice on the phone instead.

3.7 Photographing pages

When you photograph a book page, the photo is sent to our server and passed to a vision-capable language model to read the text; neither the photo nor the text is kept. If the server cannot read it, the app uses iOS's on-device text recognition instead.

3.8 Sentence feedback

Feedback you record under "this translation isn't good" stays on your phone. It leaves the phone only if you tap "Share" in Me and send the file through the system share sheet, to whomever you choose.

3.9 Security and abuse prevention

To prevent abuse, the server counts requests per minute by account and IP in memory, without writing them to disk, and keeps daily totals of requests and characters by type (no accounts, no content) for cost accounting. The server's access log records the time, IP address, request path and result, never request content, for troubleshooting and attack prevention; it rotates by size (at most five 10 MB files).

4. Information that stays on your phone

These stay on your phone and are never uploaded to our server: your child's name and age, imported books, listening progress and history, saved sentences, playback settings, sentence feedback and the voice cache. Deleting the app deletes them.

5. Third-party services and SDKs

We require these providers to process information only for these purposes. We do not sell your personal information or share it with anyone for advertising or marketing.

6. Device permissions

• Camera: requested only when you photograph a book page. You can turn it off in Settings at any time.
• Photos: choosing a page from your library uses the system photo picker, which gives the app only the photos you pick; no library permission is needed.

TaleLib does not ask for location, contacts, microphone or Bluetooth access, and does not read the clipboard (you paste text yourself).

7. International transfer, storage and retention

TaleLib's server is in mainland China (Tencent Cloud, Guangzhou), and so are the model and voice services above. When you use features that need an account or a connection, your information is transferred from where you are to mainland China and processed and stored there. Data protection law in mainland China may differ from where you live. We protect your information as described in this policy and under applicable law, transfer only what the service needs, and encrypt it in transit. If you do not agree, you can use only the features that need no account.

8. Your rights

Depending on where you live, you may have the right to access and get a copy of your personal information, correct it, delete it, restrict or object to its processing, withdraw consent, and receive it in a portable format. You can:

• see your sign-in method, email and membership in Me;
• delete the information on our server by deleting your account (section 9);
• remove TaleLib's access in your Apple ID settings or under "Third-party apps" in your Google Account;
• email us to exercise any other right.

We reply within 15 working days of receiving and verifying your request, or sooner where the law requires. You may also complain to your local data protection authority, such as the Privacy Commissioner for Personal Data in Hong Kong or the Information Commissioner's Office in the UK.

9. Deleting your account

In the app, go to Me → Account → Delete Account. After you confirm, deletion takes effect at once:

• your account, sign-in identity, all sessions and sign-in records are deleted; for Sign in with Apple the authorization is revoked with Apple, and for Google the connection to your Google Account is removed;
• your subscription is unlinked from the account and its transaction records are kept for 3 years (section 7); the trial claim keeps its hashed identity;
• imported books and listening history on your phone are unaffected (they were only ever on your phone).

Deleting your account does not cancel your subscription. Subscriptions are managed by Apple: cancel in Settings → your name → Subscriptions on your iPhone, or you will continue to be charged. Signing in again the same way creates a new account; use "Restore Purchases" in the app to link a subscription that is still active to it.

10. Children's privacy

TaleLib is made for families, and children are often the ones listening. We protect children's information this way:

• A parent or guardian should create and manage the account with their own Apple or Google account. Children below the age of digital consent where they live (for example under 13 in the United States, under 14 in mainland China) must not create an account themselves.
• We do not knowingly collect personal information directly from children. A child's name and age are used only on the phone for recommendations and are never uploaded.
• The parent or guardian chooses what is imported. Please do not import text or photos containing personal information about your child or others.
• A parent or guardian can delete the information on our server at any time by deleting the account, or by emailing us. If we learn that we collected a child's personal information without a parent's consent, we will delete it promptly.

11. AI-generated content

TaleLib's graded English, reading-age estimates and page text recognition are generated automatically by language models and may contain errors or inaccuracies; parents should keep this in mind. What you submit is used only to produce your results; we do not use it to train models. The model providers we use process request data under their own terms.

12. Security

All traffic between the app and the server is encrypted with HTTPS. The server accepts key-based logins only, and keys and credentials are never stored in code. Session tokens, sign-in identifiers and IP addresses are stored only as hashes. We collect the minimum needed and delete it on the schedule above. If a personal data breach occurs, we will notify you and the authorities as applicable law requires.

13. Changes to this policy

When we update this policy we change the date on this page. Significant changes, such as new kinds or uses of information, will be shown in the app, and we will ask for your consent again where required.

14. Contact

For any question about this policy or your personal information, email support@openquestion.cn.