Privacy Policy

Storyloom (“Storyloom,” “we,” “us,” or “our”) makes an iOS app that creates personalized, animated, narrated bedtime stories for children ages 4–12. A signature part of the app lets a parent or loved one record their own voice so that stories can be narrated in a voice the child knows and trusts.

This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have. It applies to the Storyloom mobile app, our website at storyloomhq.com, and the brand social accounts we operate (collectively, the “Services”). It does not apply to any third-party product or service that links to or integrates with the Services but is governed by its own privacy policy.

Storyloom is designed to be set up and operated by a parent or legal guardian on behalf of a child. By using the Services, you confirm that you are an adult and that you have authority to provide any information about a child in your care. If you do not agree with this policy, please do not use the Services.

We collect only what we need to create stories and run the app. Specifically:

• Account email. The email address of the parent or guardian who creates and manages the account. We use it to sign you in, send essential service messages, and provide support.
• Child personalization details.A child’s first name and age (or age range), provided by the parent. We use these solely to personalize stories — for example, to name the hero or to match a story’s tone and vocabulary to the child’s age. We do not ask for a child’s last name, address, school, or other identifying details, and you should not provide them.
• Voice recordings.Audio you choose to submit for the narration feature — a recording of a parent or loved one’s voice that is used to narrate stories. See Section 4 for how this voice data is handled, stored, and deleted.
• Stories and content you create. The stories generated in the app, along with the choices that shape them (hero, companion, world, themes, prompts) and the narrated audio produced for them.
• Usage and device analytics.Information about how the app is used — such as which screens are opened, which features are used, session timing, crash and error diagnostics, app version, device type, operating-system version, and general (non-precise) region. We use this to keep the app stable and to improve it.
• Purchase information. Records of credit purchases and subscription packs. Payments are processed by Apple and/or our payment processor; we receive confirmation of a transaction and your purchase history, but we do not collect or store full payment-card numbers.

We do not require precise location, contacts, photos, or microphone access beyond what is needed to record a voice you intentionally submit for narration.

We use the information described above to:

• Generate and narrate personalized stories— using the child’s first name and age to shape the story, and the submitted voice to narrate it.
• Operate, maintain, and secure the app— including authenticating accounts, syncing a child’s stories, preventing abuse, and diagnosing crashes and errors.
• Improve the Services— using aggregated and usage analytics to understand what works, fix problems, and develop new features.
• Process payments— to sell and apply credits and subscription packs and to maintain a record of your purchases.
• Provide customer support— to respond to your questions and requests, including requests to access or delete data.
• Communicate with you— to send essential service and account notices. We do not use a child’s information for marketing, and we do not serve targeted or behavioral advertising to children.

We do not use voice recordings, story content, or a child’s personalization details to train general-purpose AI models for unrelated purposes.

Voice is at the heart of Storyloom, so we treat voice recordings with particular care and explain them separately here.

• Why we collect it.We collect a voice recording for one purpose: to narrate your child’s stories in a voice you have chosen — typically a parent, grandparent, or loved one. You decide whose voice to submit, and you confirm you have that person’s permission to use it.
• How it is stored. Voice recordings and the voice profile derived from them are stored on our cloud infrastructure and transmitted using encryption in transit. Access is restricted to the systems and personnel that operate the narration feature.
• How long we keep it. We retain a voice profile for as long as it is in active use for narration in your account. If a voice has not been used to generate a story for an extended period, or if you remove it, we delete the underlying recordings and derived profile. When you delete a voice or your account, the associated voice data is deleted from active systems promptly, with any residual copies in encrypted backups removed on our normal backup-rotation cycle.
• How you delete it. You can delete a stored voice at any time from within the app, or by emailing hello@storyloomhq.com. Deleting a voice removes it from future narration. You can also delete your entire account, which removes all associated voice data.
• What we do not do. We do not sell voice recordings, we do not share them with third parties except the processors that operate the narration feature on our behalf, and we do not use them to create voices for anyone other than your account.

Storyloom is a product for children, so protecting children’s privacy is central to how we built it. This section reflects the principles of the U.S. Children’s Online Privacy Protection Act (COPPA) and the European Union’s rules for children’s data (often called GDPR-K), in plain language.

• Built for parents, used on a child’s behalf. The app is intended to be set up and operated by a parent or legal guardian. The adult creates the account, provides any child details, and controls the experience.
• Verifiable parental consent.We rely on a verifiable parent or guardian to provide consent before any child personalization details or a child-directed voice are used. Providing a child’s first name and age in the app constitutes the parent’s consent for us to use that information to personalize stories.
• No behavioral or targeted advertising to children.We do not show third-party behavioral or targeted advertising to children, and we do not build advertising profiles of children. We do not sell a child’s personal information.
• No child-created accounts. We do not knowingly allow children to create their own accounts, make purchases, or independently submit personal information. Accounts and purchases are reserved for the parent or guardian.
• Parental review and deletion.A parent can review the personal information associated with their child, refuse to permit its further use, and request its deletion at any time — from within the app or by emailing hello@storyloomhq.com.
• Data minimization. We collect only the limited child information needed to personalize stories (first name and age), and nothing more.

If you believe a child has provided us information without a parent’s involvement, contact us at hello@storyloomhq.com and we will delete it.

Storyloom maintains its own brand presence on social media, including a TikTok account (@storyloomhq). To publish our own marketing content there, we integrate with TikTok’s Content Posting API. We want to be completely clear about the narrow scope of this integration:

• We use TikTok’s Content Posting API solely to publish our own content to our own @storyloomhq account.
• We do not collect, access, request, or store the data of any TikTok users.The integration does not read other people’s profiles, videos, comments, followers, or any other TikTok user data.
• The only TikTok-related data involved is our own brand account’s OAuth access token and open_id, which we use exclusively to authenticate as our own account and publish our own posts.
• This integration has nothing to do with the Storyloom app accounts, your child’s data, or your voice recordings. It is entirely separate from the personal information described elsewhere in this policy.

In short: the TikTok integration is a one-way publishing tool for our own marketing channel, and it touches no third-party user data.

We do not sell personal information. We share information only with the categories of third-party service providers (“processors”) that we rely on to operate the Services, and only as needed for them to perform their function on our behalf. These categories are:

• Cloud hosting and infrastructure providers— to store data and run the app’s servers.
• AI model providers— the services that generate story text, imagery/animation, and narrated audio, including the providers that power the voice-narration feature.
• Analytics providers— to measure app stability and usage so we can improve the product.
• Payment processors— including Apple and/or our payment processor, to handle credit and subscription purchases.

These providers are bound to use the information only to provide their services to us. We may also disclose information if required by law, to enforce our terms, to protect the rights and safety of our users or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will notify affected users and this policy will continue to govern transferred information).

We keep personal information only for as long as it is needed for the purposes described in this policy, or as required to meet legal, accounting, or reporting obligations.

• Account and personalization data is retained while your account is active.
• Stories and narrated content are retained so they remain available to you in the app, until you delete them or close your account.
• Voice data is retained as described in Section 4 and deleted when a voice or account is removed.
• Usage and diagnostic analytics are retained in aggregated or limited form for as long as they are useful for product improvement and security.

When you delete your account, we delete or de-identify your personal information from our active systems promptly, and remove residual copies from encrypted backups on our normal backup-rotation cycle. We may retain a minimal record of transactions where required for legal or accounting purposes.

We take reasonable and appropriate technical and organizational measures to protect your information, including encryption of data in transit, access controls that limit who can reach sensitive data such as voice recordings, and monitoring for unauthorized access. No method of transmission or storage is perfectly secure, so while we work hard to protect your information, we cannot guarantee absolute security. If we become aware of a breach that affects your personal information, we will notify you and the appropriate authorities as required by law.

We operate from the United States, and the providers we use may process and store information in the United States and other countries. If you use the Services from outside the country where our systems are located, your information may be transferred to, stored in, and processed in a country whose data-protection laws differ from those of your own. Where required, we use appropriate safeguards for such transfers. By using the Services, you understand that your information may be processed in the United States and other jurisdictions.

Depending on where you live, you may have rights over your personal information, including the right to access the information we hold about you, to correct inaccurate information, and to request that we delete it. Parents and guardians have these rights with respect to their child’s information as well.

You can exercise many of these choices directly in the app — for example, editing personalization details, deleting a stored voice, deleting individual stories, or deleting your account. For any request you cannot complete in the app, email us at hello@storyloomhq.com and we will respond within a reasonable time and as required by applicable law. We may need to verify your identity (and your relationship to a child, where relevant) before acting on a request. We will not discriminate against you for exercising these rights.

We may update this Privacy Policy from time to time to reflect changes to the Services, our practices, or the law. When we make a material change, we will update the “Last updated” date at the top of this page and, where appropriate, provide a more prominent notice in the app or by email. Your continued use of the Services after an update takes effect means you accept the revised policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your information, please reach out. We read every message.

Storyloom
Email: hello@storyloomhq.com
Web: storyloomhq.com

This Privacy Policy is governed by the laws of the United States, without regard to conflict-of-laws principles.