Privacy Policy

We collect the following categories of information when you use the Service:

• To provide the Service — authenticate your account, generate personalised stories, deliver audio narration, and maintain your story library.
• To personalise stories — your child's name, age group, and preferences are passed to our AI story generation system to create age-appropriate, personalised content.
• To improve the Service — anonymous usage patterns and error reports help us fix bugs and improve quality.
• To enforce limits — track daily and monthly story creation counts for free-tier rate limiting.
• To communicate with you — send magic-link sign-in emails or SMS OTP codes. We do not send marketing emails without your explicit consent.

We do not sell your personal information. We share data with the following service providers solely to operate the Service:

We may disclose information if required by law, to protect the rights and safety of our users, or in connection with a merger or acquisition (in which case you will be notified).

StoryCraft Audio is designed for parents and caregivers. We do not knowingly collect personal information directly from children under 13 years of age.

Parents create accounts and use the Service to generate stories for their children. The child's name and age group entered in the story wizard are used solely to personalise story content and are not used to identify or track the child.

If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@storycraftaudio.com and we will delete it promptly.

• Account data — retained while your account is active. Deleted within 30 days of account deletion.
• Stories — retained until you delete them or your account. You can delete individual stories from your library at any time.
• Voice samples — deleted from ElevenLabs within 24 hours of removing a Family Voice from your account.
• Error logs — retained for 90 days by Sentry.

Web application: We use a single session cookie set by Supabase to keep you signed in. This is a strictly necessary cookie — it is required for the Service to function and does not require your consent under applicable law. We do not use advertising, analytics, or tracking cookies.

Mobile application:We use your device's local storage (AsyncStorage) to store your session token and cached stories for offline playback. No cookies are used in the mobile app.

Depending on where you are located, you may have the following rights:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your account and associated data
• Portability — request your data in a machine-readable format
• Objection — object to processing of your data in certain circumstances

To exercise any of these rights, contact us at privacy@storycraftaudio.com. We will respond within 30 days.

European users (GDPR): Our legal basis for processing is performance of contract (account and story features), legitimate interest (error monitoring), and your consent (voice samples). You have the right to lodge a complaint with your local supervisory authority.

California users (CCPA): We do not sell personal information. You have the right to know what data we collect and to request deletion.

We implement appropriate technical and organisational measures to protect your data, including encrypted transmission (TLS), row-level security on our database, and time-limited signed URLs for audio files. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

Your data may be processed in countries outside your own, including the United States, where our service providers operate. We ensure appropriate safeguards are in place, including reliance on providers' Standard Contractual Clauses or Privacy Shield certifications where applicable.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on the Service or by email. Your continued use of the Service after the effective date of a change constitutes your acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at: