Privacy Policy

Data collected: Authentication is managed through Clerk (https://clerk.com). We collect: Email address (required), Name (optional but recommended), Password (hashed, never stored in plain text), Profile picture (optional), Account creation timestamp, Last login timestamp, IP address (for login history), Device and browser information (for technical support).

Purpose: User identification and authentication, Account security (password recovery, suspicious activity detection), Communication when necessary (notifications, support).

Retention: As long as your account is active. You can delete your account at any time.

Third parties: Clerk (https://clerk.com) - Authentication service provider. Data processing: EU/US (see Clerk's Privacy Policy). Privacy Shield / Standard Contractual Clauses.

Data collected: We collect: Clerk Organization ID (automatically generated), Family name, Family description (optional), Creation timestamp, Membership relationships (who belongs to which family).

Purpose: Grouping family-specific content, Enabling access control (only family members see content).

Retention: As long as the family organization exists. The family owner can delete the family at any time.

Data collected: We collect: Name (required), Description (optional, e.g., '6-year-old boy who loves dinosaurs'), Birth year (optional), Birth month (optional, 1-12), Gender (optional: boy, girl, other, prefer not to say), Family role (optional: parent, child, grandparent, aunt/uncle, godparent, other), Hobbies (optional list), Toys (list: name, description), Friends (list: name, description), Reference image (optional, stored in Supabase Storage), Voice profile ID (optional, ElevenLabs voice ID).

Purpose: Creating personalized stories, Visual consistency of characters in stories, Selecting voice profiles.

Retention: As long as the family exists. The family owner can delete members at any time.

Third parties: Supabase (https://supabase.com) - Image storage. Data processing: EU (Frankfurt data center). GDPR-compliant. OpenRouter/Google Gemini - Avatar image generation. Images sent to AI temporarily, not permanently stored on AI side. See OpenRouter and Google privacy policies.

Data collected: We collect: Animal species (e.g., 'dog', 'cat'), Name, Description (optional), Reference image (optional, stored in Supabase Storage).

Purpose: Including pets as characters in stories.

Retention: As long as the family exists.

Data collected: We collect: Name, Description, Reference image (optional, stored in Supabase Storage).

Purpose: Adding fictional characters to stories.

Retention: As long as the family exists.

Data collected: We collect: Date, Free-text description of daily events, 0-5 images (stored in Supabase Storage), Creator's user ID (Clerk User ID), AI-cleaned version of text (optional, created only on user request), Reference to created story (if story created from diary entry).

Purpose: Storing user notes, Facilitating story creation (user can select diary events as story basis).

Retention: As long as the family exists. Users can delete individual entries.

Third parties: OpenRouter/OpenAI GPT-4o - Text 'cleaning' (optional feature). Text sent to AI temporarily, not permanently stored on AI side.

Data collected: We collect: Title, Language (fi/en), Story type (real/fiction), Main character (reference to family member/pet), Supporting characters (references to family members/pets/friends), Events (3-5 user-written descriptions, if real story), Lesson/moral (optional), Theme (if fiction story), Characters (snapshot of character data at story creation time), 8 scenes, each containing: Title, Text, References to characters in scene, Image generation prompt (in English), Image key (Supabase Storage), Cover image (Supabase Storage), AI-generated audio track (Supabase Storage), Timing file (JSON, Supabase Storage), Audio duration in seconds, User-recorded audio tracks (list): Narrator name, Audio file (Supabase Storage), Audio duration, Recording timestamp, Creator's user ID, Favorite flag (boolean), Moderation (isBanned, bannedReason, bannedAt), Credit charge information (periodKey, source, chargedAt).

Purpose: Storing and playing stories, Maintaining story library, Tracking credits.

Retention: As long as the user wants (can delete individual stories).

Third parties: OpenRouter/OpenAI GPT-4o - Story text generation. OpenRouter/Google Gemini - Image generation. ElevenLabs (https://elevenlabs.io) - Audio generation (Text-to-Speech). Data processing: see ElevenLabs Privacy Policy. Supabase - Image and audio storage.

Data collected: We collect: Same as regular stories, plus: Always 2 characters (protagonist + supporting), Theme (e.g., 'friendship', 'fear', 'new situation'), Moral/lesson, Always 8 scenes, 2 interactive dialogues: Location in story (middle and end), Scene context, Focus character (whose emotions are discussed), Main question, Emotion options (2-4, e.g., 'happy', 'sad', 'scared'), Follow-up questions for adults.

Purpose: Supporting socio-emotional learning, Interactive storytelling between parent and child.

Retention: Same as regular stories.

Data collected: We collect (in MongoDB): Subscription type (none, mini, basic, pro), Subscription status (none, incomplete, active, past_due, canceled, unpaid), Billing provider (stripe), Stripe Customer ID, Stripe Subscription ID, Stripe Price ID, Stripe Product ID, Billing period start and end dates, Period key, Credits used (storiesUsed, subscriptionCreditsLeft), Extra credits (extraCredits.stories). NOTE: Actual payment cards and payment history are stored in Stripe, not on our server.

Purpose: Managing subscriptions, Tracking and resetting credits, Enabling billing.

Retention: As long as the family exists. Stripe retains payment history according to their policies.

Third parties: Stripe (https://stripe.com) - Payment processing. Data processing: EU/US (see Stripe Privacy Policy). PCI DSS compliant. Stripe Customer Portal for customers to manage subscriptions.

Data collected: We collect: IP address (short-term, for security only), Device and browser (User-Agent), Operating system, Screen size (for responsive design optimization), Language settings (fi/en), Timestamps (createdAt, updatedAt), Error logs (only for troubleshooting technical issues).

Purpose: Technical maintenance of the Service, Security monitoring (detecting suspicious activity), Improving user experience.

Retention: Technical logs: maximum 90 days. User-Agent and language settings: session duration.

Third parties: Vercel Analytics (https://vercel.com) - Analytics. Data processing: EU/US. Anonymous analytics, no cookies.

Data collected: We collect: 4-digit PIN code (stored in family in MongoDB), Child lock state (localStorage on user's device).

Purpose: Restricting children's access to settings and billing information, Parental assistance tool.

Retention: PIN code: as long as the family exists (can be reset). Child lock state: localStorage (parent can remove anytime). NOTE: PIN code is stored in plain text (not hashed) as it is only a UI protection, not a security mechanism.