StoryBean Privacy Policy

1. Introduction

Welcome to StoryBean (the "App"). We are committed to protecting your privacy and the privacy of your children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (encrypted)
• Account creation date

2.2 Profile Information

To personalize stories, we collect:

• Character Information: Names, ages, gender, physical descriptions, and interests of children
• Supporting Character Information: Names and relationships (e.g., siblings, parents, pets)
• Family Configuration: Relationships between characters for story personalization

2.3 Story Data

• Stories you generate or request
• Story preferences (themes, worlds, settings)
• Audio narration preferences (voice selection, speed settings)
• Interactive story choices and progress
• Bookmarked or favorited stories

2.4 Usage Information

• App interactions and feature usage
• Story generation requests and history
• Error logs and crash reports
• Device information (type, operating system, app version)
• Session data and timestamps

2.5 Subscription and Payment Information

• Subscription tier and status
• Payment processing is handled by third-party payment processors (Stripe, Apple App Store, Google Play Store)
• We do NOT store credit card information on our servers
• Transaction IDs and dates for record-keeping

2.6 Technical Data

• IP address
• Device identifiers
• App performance metrics
• Audio playback statistics

3. How We Use Your Information

We use collected information to:

3.1 Provide Core Services

• Generate personalized bedtime stories
• Create audio narrations
• Save and retrieve your story library
• Manage your account and subscriptions

3.2 Personalization

• Customize story content based on character profiles
• Adapt story complexity to age ranges
• Remember user preferences and settings

3.3 Service Improvement

• Analyze usage patterns to improve features
• Debug and fix technical issues
• Develop new features and content

3.4 Communication

• Send service-related notifications
• Respond to customer support inquiries
• Provide account and subscription updates

3.5 Security and Compliance

• Detect and prevent fraud or abuse
• Enforce our Terms of Service
• Comply with legal obligations

4. Data Sharing and Disclosure

4.1 Third-Party Services We Use

4.2 When We May Disclose Information

We may share your information when:

• Required by law or legal process
• To protect our rights, property, or safety
• To prevent fraud or abuse
• With your explicit consent
• In connection with a business transfer or acquisition

4.3 What We Will NEVER Do

• Sell your personal information to third parties
• Share children's information for advertising purposes
• Use your data to train AI models (except as noted by specific AI providers in their policies)

5. Children's Privacy (COPPA Compliance)

StoryBean is designed for families with children. We take special precautions:

• Parental Consent: Parents/guardians must create accounts for children
• Minimal Collection: We only collect information necessary for story personalization
• No Advertising: We do not serve targeted ads to children
• No Third-Party Marketing: Children's information is never shared for marketing
• Parental Controls: Parents can review, modify, or delete character information at any time

6. Data Security

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• Secure authentication with Supabase Auth
• Regular security audits
• Access controls and authentication
• Secure password storage (hashed and salted)

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Control

You have the right to:

• Access your personal information
• Update or correct your information
• Delete your account and associated data
• Export your data
• Opt-out of communications

7.2 How to Exercise Your Rights

• In-App: Use account settings to modify profiles and preferences
• Email: Contact us at privacy@storybean.app
• Account Deletion: Request full account deletion through app settings

7.3 Data Retention

• Active accounts: Data retained while account is active
• Inactive accounts: May be deleted after 2 years of inactivity (with notice)
• Deleted accounts: Data permanently deleted within 30 days
• Backups: May persist in backups for up to 90 days

8. Cookies and Tracking

8.1 Web Application

• Essential Cookies: Session management, authentication
• Analytics: Usage statistics (anonymized)
• Preferences: User settings and preferences

8.2 Mobile Application

• We use local storage for session management
• No third-party advertising trackers
• Analytics for app improvement (anonymous)

You can control cookie preferences in your browser settings.

9. International Data Transfers

StoryBean operates primarily in the United States. If you access our service from outside the U.S., your information may be transferred to and stored on servers in the U.S. or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers.

10. California Privacy Rights (CCPA)

California residents have additional rights:

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of sale (Note: We do NOT sell personal information)
• Right to non-discrimination

To exercise these rights, contact us at privacy@storybean.app.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be posted with a new "Last Updated" date. Continued use of the App after changes constitutes acceptance.

For material changes affecting children's information, we will provide prominent notice and may require renewed parental consent.

13. Consent

By using StoryBean, you consent to this Privacy Policy and agree to its terms.