Privacy Policy

1. Introduction

At StoryStory ("we," "our," or "us"), we are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, mobile application, and services (collectively, the "Service").

We understand that children's privacy is especially important, and we comply with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws.

By using our Service, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Profile Information: Optional profile details like age range preferences
• Story Content: Text prompts, story ideas, and preferences you provide
• Communication: Messages you send to our support team
• Payment Information: Billing details for subscription services (processed securely by third-party payment processors)

2.2 Information Automatically Collected

• Usage Data: How you interact with our Service, features used, and time spent
• Device Information: Device type, operating system, browser type, and IP address
• Log Data: Server logs, error reports, and performance data
• Cookies and Similar Technologies: Essential cookies for functionality and optional analytics cookies

2.3 Information from Third Parties

• Social Login: Basic profile information when you sign in with Google or other providers
• Analytics Services: Aggregated usage statistics from analytics providers

3. Children's Privacy (COPPA Compliance)

We take children's privacy seriously and comply with COPPA requirements:

• Parental Consent: We require parental consent before collecting personal information from children under 13
• Limited Collection: We only collect information necessary to provide our storytelling service
• No Behavioral Advertising: We do not use children's information for targeted advertising
• Parental Rights: Parents can review, delete, or refuse further collection of their child's information
• Safe Environment: All generated content is filtered for age-appropriateness

Parental Controls: Parents can contact us at parents@storystory.com to exercise their rights regarding their child's information.

4. How We Use Your Information

We use your information to:

• Provide Services: Generate personalized stories, illustrations, and audio narration
• Account Management: Create and maintain your account, process payments
• Improve Our Service: Analyze usage patterns to enhance features and performance
• Customer Support: Respond to questions, issues, and feedback
• Safety and Security: Protect against fraud, abuse, and security threats
• Legal Compliance: Meet legal obligations and enforce our terms
• Communication: Send service updates, newsletters (with consent), and important notices

AI Content Generation: Your story prompts are processed by our AI systems to create personalized content. This processing is temporary and focused solely on generating your requested stories.

5. How We Share Your Information

We do not sell your personal information. We may share your information only in these limited circumstances:

• Service Providers: Trusted third parties who help us operate our Service (cloud hosting, payment processing, customer support)
• Legal Requirements: When required by law, court order, or to protect rights and safety
• Business Transfer: In connection with a merger, sale, or acquisition (with user notification)
• With Consent: When you explicitly agree to share information
• Public Stories: Stories you choose to publish publicly (without personal information)

Data Processing: We use Google Cloud Platform and Firebase for secure data storage and processing. These services comply with industry-standard security practices.

6. Data Security

We implement comprehensive security measures to protect your information:

• Encryption: Data is encrypted in transit and at rest
• Access Controls: Limited access to personal information on a need-to-know basis
• Regular Audits: Security assessments and monitoring for vulnerabilities
• Secure Infrastructure: Enterprise-grade cloud hosting with security certifications
• Employee Training: Staff training on privacy and security best practices

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining industry-standard protections.

7. Data Retention

We retain your information only as long as necessary:

• Account Data: While your account is active and for a reasonable period after closure
• Story Content: As long as you choose to keep stories in your account
• Usage Data: Aggregated analytics data for service improvement (anonymized)
• Legal Requirements: As required by applicable laws and regulations

You can delete your stories and account at any time. Upon account deletion, we will remove your personal information within 30 days, except where retention is required by law.

8. Your Rights and Choices

You have the following rights regarding your information:

8.1 Account Controls

• Update your profile and account information
• Delete stories and account data
• Control privacy settings and preferences
• Download your data (data portability)

8.2 Communication Preferences

• Opt out of marketing emails (unsubscribe links)
• Manage notification preferences
• Contact customer support for assistance

8.3 Legal Rights (where applicable)

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Restriction: Limit how we process your information
• Objection: Object to certain processing activities

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Essential Cookies: Enable core functionality (login, preferences)
• Analytics Cookies: Understand how you use our Service (with consent)
• Security Cookies: Protect against fraud and security threats

You can control cookies through your browser settings. Note that disabling essential cookies may limit Service functionality.

10. International Users

StoryStory is based in [Your Country]. If you use our Service from outside this jurisdiction, your information may be transferred to, stored, and processed in [Your Country] and other countries where our service providers operate.

We ensure appropriate safeguards are in place for international data transfers in compliance with applicable laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our website
• Sending email notifications to registered users
• Displaying a prominent notice in the Service

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights, please contact us:

13. Compliance and Certifications

StoryStory is committed to privacy compliance:

• COPPA: Children's Online Privacy Protection Act compliance
• GDPR: General Data Protection Regulation (for EU users)
• CCPA: California Consumer Privacy Act (for California residents)
• SOC 2: Security and availability controls certification
• Google Cloud: Enterprise-grade security and privacy standards

We regularly review and update our privacy practices to maintain compliance with evolving privacy laws and regulations.