Last updated: June 23, 2026
This Privacy Notice for HeroBind ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services").
Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at hello@herobind.app.
This summary provides key points from our Privacy Notice. See the full notice below for details.
Only adults aged 18 or older may create a HeroBind account. By registering, you represent and warrant that you are the parent or legal guardian of any child profile you create within the Services. We do not permit children to register for accounts directly.
We collect the absolute minimum information needed to provide the Service. Child profiles contain only:
We do NOTcollect a child's real name, age, birthdate, grade level, location, device identifier, photo, or any other personal information beyond the above.
In compliance with the Children's Online Privacy Protection Act (COPPA), we obtain verifiable parental consent before creating any child profile. During account registration, parents must confirm: "I am 18 or older and am creating this account as the parent or legal guardian of the child profiles I create." We record the timestamp of this confirmation as our consent record.
As the parent or guardian, you may at any time:
To exercise any of these rights, visit your account settings in the app or contact us at hello@herobind.app.
We do not display third-party advertisements within HeroBind. We do not use child profile data or child-generated content for advertising, marketing profiling, or behavioral tracking purposes. No child profile data is shared with any third-party advertising network or data broker.
Story text and image generation within child profiles is powered by third-party AI providers (Anthropic and Black Forest Labs). Story content is transmitted to these providers solely to generate the requested output and is not retained by those providers for model training purposes, consistent with our data processing agreements with each provider. We do not store the raw prompts sent to AI providers after generation is complete.
If you believe we have inadvertently collected personal information from a child without proper parental consent, please contact us immediately at hello@herobind.app. We will promptly investigate and delete such information.
In Short: We collect personal information that you — as a parent or guardian — provide to us.
We collect personal information that you voluntarily provide when you register for an account or contact us. The personal information we collect from parent/guardian accounts includes:
Sensitive Information. We do not process sensitive information such as racial or ethnic origin, political opinions, religious beliefs, health data, biometric data, or financial account details.
Payment Data. All payment processing for subscriptions is handled by Apple (for in-app purchases). We store only your subscription status and period — never your payment instrument number or security code. You may review Apple's privacy practices at: Apple Privacy Policy.
In Short: Some technical information is collected automatically when you use our Services.
We automatically collect certain technical information when you use the Services, including device type, operating system, app version, and general usage patterns. This information is linked only to your parent account — never to child profiles. It is used solely to maintain service security, diagnose technical issues, and improve the app experience.
To monitor service costs and prevent abuse, we also record metadata about AI feature usage — such as the AI model used, token counts, approximate cost, and daily illustration counts — linked to your parent account. This data is used solely for service operation, cost management, and security.
Our website (herobind.app) uses cookies for session management and analytics. You can find more about this in our Cookie Notice: herobind.app/cookies. The HeroBind mobile app displays our website within the app and uses the same strictly necessary session cookies described in our Cookie Notice (such as keeping a parent signed in). The mobile app does not use advertising cookies or behavioral tracking.
In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
We process your personal information for the following reasons:
In Short: We only process your personal information when we have a valid legal reason to do so.
We process your information based on the following legal grounds: (1) your consent — for parental consent to create child profiles and for marketing communications; (2) contract performance — to deliver the subscription services you have purchased; (3) legal obligation — to comply with COPPA and applicable data protection laws; and (4) legitimate interests — to maintain service security and prevent fraud, where those interests are not overridden by your rights.
If you are located in Canada, we may process your information based on express or implied consent. You may withdraw consent at any time by contacting us at hello@herobind.app.
We do not currently direct our Services to users in the European Union or United Kingdom.
In Short: We share information only with service providers necessary to operate the Services. We do not sell your personal information.
We may share your personal information with the following categories of third parties:
We do not sell, rent, or share your personal information with third parties for their own marketing or advertising purposes. We have not done so in the preceding twelve months and have no intention to do so.
In Short: Our website uses cookies for session management. Our mobile app does not use advertising trackers or behavioral tracking.
Our website (herobind.app) uses cookies and similar technologies to maintain your session, remember your preferences, and measure website performance. Full details are available in our Cookie Notice: herobind.app/cookies.
The HeroBind mobile app does not display third-party advertisements and does not use third-party behavioral advertising trackers. We do not permit any third-party advertising technology to access child profile data or child-generated content. Parent account usage data collected within the app is limited to service analytics (PostHog) as described in Section 5.
In Short: We use AI to power story writing assistance and image generation. Child story content is processed only to generate the requested output and is not used for AI training.
HeroBind's core features — story writing assistance and scene image generation — are powered by third-party AI providers: Anthropic (Claude, for story text) and Black Forest Labs (FLUX, for images).
When a child (with a parent's account) creates a story, the story inputs (theme, characters, setting, problem) are transmitted to these providers to generate the story and images. The following protections apply:
You must not use HeroBind's AI features to submit personal information about real individuals, or in any way that violates the terms or policies of Anthropic or Black Forest Labs.
In Short: We keep your information only as long as necessary. Child data is deleted immediately upon parent request.
Stories that a child marks as hidden (soft-deleted) remain restorable by the parent for 30 days, after which they are permanently purged from our systems automatically.
In Short: We implement technical and organizational measures to protect your information, though no system is perfectly secure.
We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process, including row-level security policies that enforce strict data access boundaries between parent accounts and child profiles. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. We cannot promise that hackers or cybercriminals will not be able to defeat our security measures. You should only access the Services within a secure environment.
Under COPPA, parents and legal guardians have the right to: (1) review the personal information collected from their child; (2) request correction or deletion of their child's personal information; (3) refuse to permit further collection or use of their child's information; and (4) withdraw consent for our collection and use of their child's information.
You may exercise all of these rights directly within the HeroBind app through your account settings, or by contacting us at hello@herobind.app. We will respond to verifiable parental requests within 30 days.
In Short: Depending on your location, you may have rights that allow you greater access to and control over your personal information.
In some regions (including Canada and certain US states), you have rights under applicable data protection laws including: (i) the right to access and obtain a copy of your personal information; (ii) the right to request rectification or erasure; (iii) the right to restrict processing; (iv) the right to data portability; and (v) the right not to be subject to automated decision-making.
If we rely on your consent to process your personal information, you have the right to withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.
To review, change, or delete your account, you can use the account settings within the app or contact us at hello@herobind.app.
Upon your request to terminate your account, we will delete your account and associated information from our active databases. We may retain anonymized deletion event records and billing records as described in Section 8.
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. Because no uniform technology standard for DNT has been finalized, we do not currently respond to DNT signals. If a standard is adopted that we are required to follow, we will update this Privacy Notice accordingly. California law requires us to disclose this position.
In Short: Residents of certain US states have additional privacy rights regarding their personal information.
If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to, correct, or delete the personal information we maintain about you.
The table below shows the categories of personal information we have collected in the past twelve (12) months:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Email address, account ID | YES |
| Personal records | Subscription status and billing period | YES |
| Commercial information | Purchase history, subscription tier | YES |
| Internet / network activity | App usage events (parent account only), device type, OS version, AI usage metadata | YES |
| User-generated content | Child story text, hero names (parent-controlled, see Section 1) | YES |
| Inferences drawn from above | Subscription conversion patterns (aggregated, anonymized) | YES |
| Sensitive personal information | Race, health, biometrics, financial account details | NO |
| Geolocation data | Precise physical location | NO |
| Child personal information | Display name/nickname, avatar, stories (see Section 1) | YES — parent-controlled only |
We have not disclosed, sold, or shared any personal information to third parties for a business or commercial purpose in the preceding twelve (12) months. We will not sell or share personal information belonging to users, visitors, or consumers.
You have the following rights under applicable US state laws: the right to know, right to delete, right to correct, right to opt-out of sale/sharing, and right to non-discrimination. To exercise these rights, submit a data subject access request, email hello@herobind.app, or visit herobind.app/contact.
If we decline to take action on your request, you may appeal by emailing hello@herobind.app. If your appeal is denied, you may submit a complaint to your state attorney general.
In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.
We may update this Privacy Notice from time to time. The updated version will be indicated by an updated date at the top of this notice. If we make material changes, we will notify you either by prominently posting a notice within the app or by sending you a direct notification. We encourage you to review this Privacy Notice periodically.
If you have questions or comments about this notice, you may email us at hello@herobind.app or contact us by post at:
HeroBind
Princeton, New Jersey
United States
Based on applicable laws, you may have the right to request access to, correct, or delete the personal information we collect from you. To request to review, update, or delete your personal information, please submit a data subject access request.
Parents and guardians may also manage and delete all child profile data directly within the HeroBind app without needing to contact us.