Privacy Policy

1. Introduction

This Privacy Policy explains how Storli ("we," "us," or "our") collects, uses, stores, and protects personal data when you use the Storli mobile application(s), website(s), and related services (collectively, the "Service").

We are committed to protecting the privacy of all our users, especially children. We designed Storli with privacy as a core principle: we collect only the minimum data necessary to deliver our Service, and we take special care to comply with the Children's Online Privacy Protection Act (COPPA) and other applicable privacy laws.

By using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

2. Owner & Data Controller

Storli App
Email: privacy@storli.app
General contact: hello@storli.app

3. What Data We Collect

Storli is designed with a minimal data collection approach. We only collect information that is necessary to provide and improve the Service.

3.1 Information You Provide

Data Category	Description	Required?
Email address	Used for account creation, authentication, and communication (e.g., password resets, support).	Required for account registration
Child's name	Used to personalize stories. The name appears within generated story content only.	Optional — you may use a nickname or fictional name
Story preferences	Theme selections, character preferences, and language choices used to generate stories.	Optional

3.2 Information Collected Automatically

Data Category	Description	Purpose
Device information	Device type, operating system, app version.	App compatibility and troubleshooting
Usage data	App feature interactions (e.g., stories generated, features used). No direct child identifiers included.	Service improvement and analytics
Crash and diagnostics	Error logs and performance data.	Bug fixing and stability

3.3 Information We Do NOT Collect

Storli does not collect any of the following:

• Physical address, phone number, or government identifiers
• Photos, videos, or audio recordings of children
• Precise geolocation data
• Biometric data
• Contact lists or social media accounts
• Browsing history outside of the Service
• Advertising identifiers (IDFA, Google Advertising ID) for tracking
• Financial information (payments are handled entirely by Apple/Google)

4. How We Use Your Data

We use the data we collect for the following purposes only:

• Providing the Service: Authenticating your account, generating personalized stories using names and preferences you provide, and delivering content.
• Personalization: Using the child's name (when provided) to create personalized story content within the app.
• Communication: Sending essential service emails (e.g., password reset, account notifications). We do not send marketing emails unless you opt in.
• Service improvement: Analyzing aggregated and pseudonymized usage patterns to improve app features, performance, and content quality.
• Safety & quality: Reviewing AI-generated content traces to ensure stories are appropriate and safe for children.
• Legal compliance: Complying with applicable laws, regulations, and legal processes.

5. Children's Privacy (COPPA Compliance)

5.1 Parental Consent

Storli is intended to be set up and managed by a parent or legal guardian. Only adults (18+) may create accounts. Children under 13 may use the Service only under the direct supervision of their parent or guardian.

By creating an account and providing a child's name for story personalization, the parent or guardian provides verifiable parental consent for the limited collection and use of that information as described in this policy.

5.2 Minimal Collection from Children

Storli collects only the minimum information necessary to deliver personalized stories:

• A child's first name or nickname (provided by the parent) — used solely for story personalization within the app.
• No other personal information is collected directly from children.
• Children do not interact with account registration, email, or payment features.

5.3 No Behavioral Advertising

We do not serve behavioral or targeted advertising to children. We do not use children's information for any advertising purpose. We do not use advertising SDKs, tracking pixels, or cross-app tracking technologies.

5.4 Parental Rights

Parents or legal guardians have the right to:

• Review the personal information we have collected about their child.
• Request deletion of their child's personal information.
• Refuse further collection of their child's information.
• Revoke consent at any time by contacting us.

To exercise any of these rights, please contact us at privacy@storli.app. We will respond within 30 days.

5.5 Data Not Conditioned on Activity

We do not condition a child's participation in any activity on the disclosure of more personal information than is reasonably necessary to participate in that activity.

6. Where Data Is Stored

Your data is stored using industry-standard cloud infrastructure:

• Authentication data (email, account credentials): Stored securely via our authentication provider with encryption at rest and in transit.
• User profiles and story data (names, preferences, generated stories): Stored in secure cloud databases.
• Diagnostic data: Processed and stored by our crash reporting and analytics providers.

We use service providers that maintain appropriate security certifications and data protection measures. Data may be processed in the United States and/or the European Union.

7. Third-Party Service Providers

We share data only with service providers who help us operate the Service. We do not share data with advertisers or data brokers.

Provider	Purpose	Data Used
Authentication provider	Account sign-in and security	Email address, account identifiers
Cloud database	Storing user profiles and story data	Names, preferences, generated stories
AI service providers	Story and illustration generation	Story prompts (names, themes) — processed transiently
Crash reporting	App stability and bug fixes	Device info, error logs (no personal identifiers)
App Store / Google Play	Payment processing (subscriptions, purchases)	Handled entirely by Apple/Google — we do not receive payment details

All third-party providers are contractually required to protect your data, use it only for the specified purposes, and comply with applicable privacy laws.

8. Data Retention

We retain your data only as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account data (email): Retained while your account is active. Deleted within 30 days of account deletion request.
• Child's name and preferences: Retained while your account is active. Deleted upon account deletion or upon parent's request.
• Generated stories: Retained in your account library while your account is active. Deleted upon account deletion.
• Diagnostic and crash data: Retained for up to 90 days for troubleshooting, then automatically purged.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate data.
• Deletion: Request deletion of your personal data and account.
• Data portability: Request your data in a portable format.
• Withdraw consent: Withdraw consent at any time where processing is based on consent.
• Objection: Object to processing of your data in certain circumstances.

To exercise any of these rights, contact us at privacy@storli.app. We will respond within 30 days (or sooner if required by applicable law).

Account Deletion

You may delete your account and all associated data at any time by using the in-app account deletion feature or by emailing privacy@storli.app. Upon deletion:

• Your email, child profiles, preferences, and saved stories will be permanently removed.
• Deletion will be completed within 30 days.
• Some anonymized, aggregated data may be retained for analytics purposes (this data cannot identify you or your child).

10. Cookies & Tracking Technologies

The Storli mobile app does not use cookies. Our website (storli.app) may use essential cookies required for basic website functionality (e.g., language preference). We do not use:

• Third-party tracking cookies
• Cross-site tracking technologies
• Advertising pixels or beacons
• App Tracking Transparency (ATT) for cross-app tracking on iOS
• IDFA or Google Advertising ID

11. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Access controls limiting data access to authorized personnel only
• Regular security reviews and updates
• Incident response procedures

While we take reasonable measures to protect your information, no method of electronic transmission or storage is 100% secure. If you become aware of a security vulnerability, please contact us immediately at security@storli.app.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify you via email or in-app notification for significant changes.
• Obtain fresh parental consent if changes affect how we handle children's data under COPPA.

Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

• Privacy inquiries: privacy@storli.app
• General contact: hello@storli.app
• Security issues: security@storli.app
• Content safety reports: safety@storli.app

We aim to respond to all inquiries within 30 days. For urgent child safety concerns, we prioritize response within 72 hours.