Privacy Policy

Last updated: 9 November 2026

1. Who we are

Toonaweza Tales ("we", "us") runs toonawezatales.com. We decide how the personal data described here is used, so we are the data controller under Kenya's Data Protection Act, 2019. This policy explains what we collect, why we collect it, who sees it and the rights you have.

2. Children's data

Our site is made for children, and we take particular care with their information.

A parent or guardian must fill in the story form and give consent before we review or publish a child's story, name or photo.
Children should not send us personal information without the help of a parent or guardian.
We publish only what is needed to celebrate the child's work. A parent or guardian can ask us to publish just a first name, or no photo at all.
We do not publish a child's phone number or home address, or a parent's contact details.
We do not use children's personal data to target advertising, and we do not sell it.
A parent or guardian can withdraw consent at any time. We then remove the child's story, photo and any cartoon made from the story, normally within 7 days.

3. What we collect

Accounts: name, username, email address, phone number if you give it, and your password, which is stored in scrambled (hashed) form. If you use Google sign-in, we also receive your Google account ID, name, email and profile picture.
Profiles: any description or picture you add.
Story submissions: the child's name, age, school, class or grade, ambition, hobbies, photo, story and any audio recording, together with the parent or guardian's name and phone number.
Shop orders: what you bought, your delivery location and address, your phone number, and payment references and status. We do not see or store your card details or M-Pesa PIN.
Messages: your name, email and what you write when you contact us.
Activity on the site: comments, likes and quiz answers.
Technical data: your IP address, browser details and pages requested, which our servers record to keep the site running and secure.

4. Why we use it

To review and publish stories and make cartoons, based on the consent of the parent or guardian.
To run your account and fulfil your orders, including payment, delivery and downloads, because this is needed to perform our agreement with you.
To answer messages and give support, based on our legitimate interest in helping you.
To keep the site safe, including moderating comments and preventing abuse, based on our legitimate interests.
To meet legal duties, such as keeping tax and payment records.
To send you marketing, only where you have agreed. You can opt out at any time.

5. Who owns stories and cartoons

The child's family and, for school channel work, the school own a submitted story and any cartoon made from it. We show them to promote the child and the school. Full details are in section 5 of our Terms and Conditions.

We do not sell personal data. We share it only as needed with:

Paystack, to process payments;
Google, if you choose Google sign-in, and as our email provider for story submissions and messages sent to our team;
Bunny, which streams our videos;
our website hosting and email providers, which store and carry data for us;
delivery providers, which receive your name, phone number and delivery details;
schools, for stories published with a school or on its channel;
advertising partners, as described in section 8;
authorities or advisers, where the law requires it or to protect a child, our users or our rights.

Anything we publish with consent, such as a story or a child's first name, can be seen by the public.

7. Transfers outside Kenya

Some of our service providers store or process data outside Kenya. When this happens, we rely on the safeguards or the basis that the Data Protection Act allows, and we use providers that protect personal data appropriately.

8. Cookies and advertising

We use a small number of cookies that the site needs to work, such as those that keep you logged in, protect forms and remember your cart. Video and sign-in providers may set their own cookies when you use their features.

The site shows advertising. Ads we place directly do not need your personal data. Where an advertising network is used, it may set cookies or read technical data such as your IP address. We ask for ads on our site to be suitable for children and do not give advertisers children's names, photos or stories. You can block or delete cookies in your browser settings, though some parts of the site may stop working.

9. How long we keep it

Published stories and cartoons: until consent is withdrawn or we stop showing them.
Stories we do not publish: up to 24 months after they are submitted.
Accounts: while the account is open, and deleted within 30 days of closure unless we must keep something by law.
Orders and payment records: 7 years, for tax and accounting purposes.
Messages: as long as needed to deal with your request, and no more than 24 months.

10. How we protect it

We use encrypted connections, hashed passwords, restricted access to administration tools and trusted service providers. No system is completely secure. If a breach puts your rights at real risk, we will notify the Data Protection Commissioner and those affected as the law requires.

11. Your rights

Under the Data Protection Act, you have the right to be told how your data is used, to see the data we hold about you, to have it corrected or deleted, to object to its use, to withdraw consent and to ask for a copy in a form you can move elsewhere. A parent or guardian can use these rights for their child. To do so, email story@toonawezatales.com. We may need to confirm who you are first. We normally reply within 14 days, and there is no charge.

12. Complaints

Please tell us first so we can try to put things right. You can also complain to the Office of the Data Protection Commissioner of Kenya at www.odpc.go.ke.

13. Changes to this policy

We may update this policy from time to time. The "Last updated" date above will change, and important changes will be highlighted on the site.

14. Contact us

Toonaweza Tales, Fort Smith Road, Kabete, Kiambu
Email: story@toonawezatales.com · Phone: +254793677400