Crafted StoriesCrafted Stories

Privacy Policy

Last updated: February 25, 2026

At Crafted Stories, we are committed to protecting your privacy as a parent using our app to create personalized stories for your children. This Privacy Policy explains how we collect, use, and safeguard information when you use our app.

1. Information We Collect

Account Information: Email address used for account creation and authentication

Child Information: Names, ages, and characteristics you provide about your children for story personalization

Photos: Images you upload of your children, which are securely uploaded to our servers for AI story and illustration generation

Story Preferences: Character details, themes, and art styles you select for your stories

Purchase Data: Subscription status and purchase history processed through Apple's StoreKit

Usage Data: Screen views, interactions, and feature usage for analytics and app improvement

Device Information: Basic device details for app functionality, crash reporting, and diagnostics

2. How We Use Information

We use the information we collect to:

• Create personalized stories featuring your children

• Generate custom illustrations using AI technology

• Provide text-to-speech narration of stories

• Save your stories and preferences for future story creation

• Process and manage your subscription

• Improve our app's functionality and user experience through analytics

3. Data Storage and Security

Your data, including photos, child profiles, and generated stories, is stored securely on our servers via Supabase, a cloud infrastructure provider. Photos are uploaded to our servers for AI processing and are associated with your account. Data is encrypted in transit and at rest.

• Photos and story data are stored on secure cloud servers tied to your account

• We use industry-standard encryption and security measures to protect your data

• Generated stories are saved and accessible from your account

• You can delete your account and all associated server-side data from the Settings screen within the app

4. Third-Party Services

We use the following third-party services to operate and improve Crafted Stories:

Supabase: Provides authentication (email), database storage, and photo/file storage for your account and content.

Google Vertex AI: Processes your child's information and photos to generate personalized stories and illustrations. Data sent to Google Vertex AI is used solely for content generation and is not retained for training purposes.

OpenAI: Provides text-to-speech narration for generated stories. Only story text is sent to OpenAI for audio generation.

Superwall: Manages subscription paywalls and processes subscription-related data through Apple's StoreKit.

5. Children's Privacy and COPPA Compliance

Crafted Stories is designed for parents to create stories about their children. The app is intended to be used by parents or guardians, not directly by children. We comply with the Children's Online Privacy Protection Act (COPPA).

• All information about children is provided and controlled by the parent or guardian

• We do not knowingly collect personal information directly from children

• Photos and child information are used solely for story generation

• We do not share children's information with third parties for marketing or advertising

• Parents can review, edit, and delete all of their children's information at any time

6. Data Retention

• Account data, photos, child profiles, and generated stories are retained for as long as your account is active

• When you delete your account, all associated personal data is permanently removed from our servers within 30 days

• Subscription and transaction records may be retained for up to 7 years for tax and legal compliance purposes

• Crash and diagnostic logs are retained for up to 90 days

• Analytics data is anonymized and retained for up to 24 months; it does not contain personally identifiable information

7. App Privacy Details

In accordance with Apple's App Privacy requirements, the following data types may be collected:

• Email address (for account creation)

• Photos (for story personalization)

• User ID (for account management)

• Purchase history (for subscription management)

• Usage data (for app improvement)

• Crash data (for diagnostics and stability)

8. Your Rights

You have the right to:

• Access your information stored in the app and on our servers

• Update or correct information

• Delete your account and all associated data via Settings in the app

• Refuse or withdraw consent for data processing at any time

• Request a copy of the data we hold about you by emailing craftedstoriesapp@gmail.com

• Lodge a complaint with a data protection supervisory authority in your country of residence if you believe your data rights have been violated (EU/UK users may contact their national data protection authority)

9. California Privacy Rights (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you

Right to Delete: You may request deletion of your personal information, subject to certain exceptions

Right to Opt-Out: We do not sell your personal information to third parties. We do not share your personal information for cross-context behavioral advertising

Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights

To exercise your California privacy rights, contact us at craftedstoriesapp@gmail.com with the subject line "California Privacy Request."

10. European User Rights (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

Contractual necessity: Processing your account information and photos to provide the story generation service you signed up for

Legitimate interests: Analytics and crash reporting to improve app performance and security

Legal obligation: Retaining transaction records as required by law

You have the right to access, rectify, erase, restrict, or port your personal data, and to object to processing based on legitimate interests. To exercise these rights, contact us at craftedstoriesapp@gmail.com.

You also have the right to lodge a complaint with your local data protection supervisory authority (e.g., the ICO in the UK or your national DPA in the EU) if you have concerns about how we handle your data.

11. Contact Us

If you have questions about this Privacy Policy or your child's privacy, please contact us at:

Email: craftedstoriesapp@gmail.com

By using Crafted Stories, you agree to this Privacy Policy. We may update this policy from time to time, and we will notify you of any significant changes.

Back to Home