Privacy Policy

1. Introduction

StoryNest ("we," "our," or "us") is committed to protecting the privacy of our users and their families. This Privacy Policy explains how we collect, use, and safeguard information when you use our personalized children's story generation service. Because our service involves children's content, we take extra care to handle data responsibly.

2. Information We Collect

Account Information

• Email address (for authentication and account recovery)
• Password (stored securely via Supabase Auth, never in plain text)

Child Profile Data

To personalize stories, parents voluntarily provide information about their children:

• Name, age, and gender
• Personality traits, interests, and preferences
• Physical appearance details (for illustration personalization)
• Photos (optional, used only for AI illustration reference)
• Comfort objects, fears, and life situations (for therapeutic storytelling)

Generated Content

• Stories created through the service
• AI-generated illustrations
• Audio narrations

3. How We Use Information

• To generate personalized stories, illustrations, and audio narrations
• To maintain character consistency across stories and series
• To improve story quality through preference learning
• To enable profile sharing with family members (only when explicitly initiated by the parent)
• To send transactional emails (account verification, password reset)

4. Third-Party Services

We use the following third-party services to provide our product:

• Supabase - Database and authentication
• Anthropic (Claude) - AI story generation
• Replicate (Flux) - AI illustration generation
• ElevenLabs - Text-to-speech narration
• Resend - Transactional email delivery
• Vercel - Application hosting

Child profile data is sent to AI services only for the purpose of generating personalized content. We do not sell or share personal data with advertisers or data brokers.

5. Data Retention

• Account data is retained as long as your account is active
• Stories and illustrations are stored indefinitely for your access
• Uploaded photos are stored in secure cloud storage and can be deleted at any time
• You may delete your child profiles, stories, and account data at any time

6. Children's Privacy (COPPA)

StoryNest is designed for use by parents and guardians, not by children directly. All child profile data is entered and managed by the parent account holder. We do not knowingly collect information directly from children under 13. If you believe a child has provided us with personal information without parental consent, please contact us and we will promptly delete such information.

7. Data Security

We implement industry-standard security measures including encrypted connections (HTTPS), secure authentication via Supabase Auth, row-level security policies on all database tables, and rate limiting on API endpoints. Photos and generated media are stored in access-controlled cloud storage.

8. Your Rights

• Access your personal data through your account dashboard
• Update or correct your information at any time
• Delete child profiles, stories, and your account
• Request a copy of your data by contacting support

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at support@storynest.app.