Privacy Policy

1. Introduction

Welcome to StoryPals, operated by StoryPals LLC ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services (collectively, the "Service").

StoryPals is designed for families with children. We take special care to comply with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws. Please read this policy carefully to understand our practices regarding your information.

2. Information We Collect

2.1 Personal Information You Provide

• Account Information: When you create an account, we collect your email address, name, and password.
• Profile Information: You may provide additional information such as your child's age range to personalize the experience.
• Content You Create: Stories, characters, character descriptions, story prompts, preferences, and any images you upload.
• Payment Information: Processed securely through Apple's App Store or Google Play. We do not store your payment card details.
• Communications: When you contact our support team, we collect your name, email, and message content.

2.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, mobile network information.
• Usage Data: App features used, stories created, time spent in app, crash reports, performance data.
• Analytics Data: Collected through Firebase Analytics (only with your consent).
• Location Data: We do NOT collect precise location data. General location may be inferred from IP address for service delivery.

2.3 Information from Third Parties

We may receive information about your subscription status from RevenueCat (our payment processor) to manage your access to premium features.

3. How We Use Your Information

We use the information we collect to:

• Provide the Service: Generate personalized stories, create custom characters, deliver daily bedtime stories.
• Manage Your Account: Authenticate users, manage subscriptions, process payments.
• Personalization: Customize content based on age preferences, story genres, and character preferences.
• Improve Our Service: Analyze usage patterns, fix bugs, develop new features (only with analytics consent).
• Customer Support: Respond to inquiries, troubleshoot issues, provide technical assistance.
• Security: Detect and prevent fraud, abuse, and security incidents.
• Legal Compliance: Comply with legal obligations and enforce our Terms of Service.
• Communications: Send service-related notifications, subscription updates, and support messages.

4. Third-Party Services

We use the following third-party services to provide and improve our Service:

5. Children's Privacy (COPPA Compliance)

StoryPals is designed for use by parents and guardians to create content for their children. We do NOT knowingly collect personal information directly from children under 13 without verifiable parental consent.

5.1 Parental Control

• Parents control the account and all content creation
• Parents can review and delete all stories and characters at any time
• Parents must approve all content before children view it
• No direct communication with children through the app

5.2 What We Collect About Children

We only collect information necessary to provide the Service:

• Age range (not specific birthdate) - to customize story complexity
• Character names and descriptions provided by parents
• Story preferences selected by parents
• No photos of real children are stored (character images are AI-generated)

5.3 Parental Rights

Parents have the right to:

• Review all information collected about their children
• Request deletion of their child's information
• Refuse further collection of their child's information
• Contact us at support@storypals.io to exercise these rights

6. Data Security

We implement appropriate technical and organizational security measures to protect your information:

• Data encryption in transit (HTTPS/TLS) and at rest
• Firebase Security Rules to restrict unauthorized access
• Regular security audits and updates
• Secure authentication through Firebase Auth
• Limited employee access to personal data (only when necessary for support)
• Regular backups and disaster recovery procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes outlined in this policy:

• Account Data: Retained while your account is active
• Stories & Characters: Retained until you delete them or close your account
• Analytics Data: Aggregated and anonymized data may be retained indefinitely
• Support Communications: Retained for up to 2 years for customer service purposes

8. Your Rights and Choices

8.1 Access and Control

• Account Settings: Update your profile information anytime
• Data Export: Request a copy of your data by contacting support
• Delete Content: Delete individual stories and characters within the app
• Account Deletion: Delete your entire account and associated data through Settings

8.2 Analytics and Tracking

• Analytics Consent: You can opt in or out of analytics tracking in Settings
• Crashlytics: Can be disabled in Settings (may impact our ability to fix bugs)
• Push Notifications: Can be disabled in device settings or app settings

8.3 Your Legal Rights (GDPR & CCPA)

If you are located in the European Economic Area (EEA), United Kingdom, or California, you have additional rights:

• Right to Access: Request access to your personal data
• Right to Rectification: Correct inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent for data processing

To exercise these rights, email us at support@storypals.io

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws different from your jurisdiction. We use Firebase (Google Cloud Platform) which has appropriate safeguards in place, including Standard Contractual Clauses approved by the European Commission.

10. Do Not Track

Some browsers include a "Do Not Track" (DNT) feature. Our Service does not currently respond to DNT signals. However, you can control analytics tracking through our in-app consent settings.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Updating the "Last Updated" date at the top of this policy
• Sending you a notification through the app or email
• Displaying a prominent notice in the app

Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

13. Additional Information for California Residents

Under the California Consumer Privacy Act (CCPA), California residents have specific rights regarding their personal information:

• Right to Know: What personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise your rights, email support@storypals.io