Privacy Policy

1. Introduction

Welcome to StoryVerse ("we," "our," or "us"). We are committed to protecting your privacy and the privacy of children who use our service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services.

For Parents: StoryVerse is COPPA compliant and takes children's privacy seriously. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

2. Information We Collect

2.1 Information You Provide

• Account Information: Email address, name (optional), password
• Family Account Information: Child profile names, ages, content preferences
• Payment Information: Processed securely through third-party payment processors (we do not store credit card information)
• Communication: Support requests, feedback, and correspondence

2.2 Information Collected Automatically

• Usage Data: Stories played, chapters completed, listening progress, favorites
• Device Information: Device type, operating system, app version, unique device identifiers
• Analytics: App performance, crash reports, feature usage (anonymized)

2.3 Information We Do NOT Collect

• Location data
• Contact lists or phonebook
• Photos or media from your device
• Social media connections
• Browsing history outside the app

3. Children's Privacy (COPPA Compliance)

We are committed to complying with the Children's Online Privacy Protection Act (COPPA):

• No Direct Collection from Children Under 13: We do not collect personal information directly from children under 13
• Parental Consent: Parents must create Family Accounts to provide access to children under 13
• Limited Data Collection: Child profiles only collect: profile name, age range, listening progress, and content preferences
• No Social Features: Children cannot communicate with other users or share information publicly
• Parental Controls: Parents can review, modify, or delete child profile data at any time
• Age-Appropriate Content: Automatic filtering ensures children only access age-appropriate stories

4. How We Use Your Information

We use your information to:

• Provide and maintain the StoryVerse service
• Process purchases and manage your account
• Save your listening progress and preferences
• Recommend stories based on age and preferences
• Send important service updates and notifications
• Improve app performance and user experience
• Prevent fraud and ensure platform security
• Comply with legal obligations

5. How We Share Your Information

We do NOT sell your personal information. We may share information with:

• Service Providers: Payment processors, cloud hosting, analytics (all COPPA-compliant)
• Legal Requirements: When required by law, court order, or to protect rights and safety
• Business Transfers: In the event of a merger, acquisition, or sale of assets (with user notification)

6. Data Security

We implement industry-standard security measures including:

• Encrypted data transmission (SSL/TLS)
• Secure password hashing (Argon2)
• Regular security audits and updates
• Limited employee access to personal data
• Secure cloud infrastructure

However, no method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

7. Data Retention

• Account Data: Retained while your account is active
• Purchase History: Retained for legal and tax compliance (typically 7 years)
• Usage Data: Anonymized and aggregated after 90 days
• Deleted Accounts: Personal data deleted within 30 days of account deletion

8. Your Rights and Choices

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails (service emails required)
• Parental Access: Review and delete child profile data

To exercise these rights, email us at privacy@storyverse.app

9. International Users (GDPR)

For users in the European Economic Area (EEA), United Kingdom, and Switzerland:

• We process data based on consent, contract performance, and legitimate interests
• You have additional rights under GDPR including data portability and right to object
• You can lodge a complaint with your local data protection authority
• Data may be transferred to the US with appropriate safeguards

10. Third-Party Services

StoryVerse uses the following third-party services:

• Payment Processing: Stripe (PCI-DSS compliant)
• Cloud Hosting: AWS/Google Cloud (SOC 2 certified)
• Analytics: Privacy-focused analytics (no personal data shared)
• AI Content Generation: OpenAI, Anthropic (no user data shared)

These services have their own privacy policies. We recommend reviewing them.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via:

• Email notification (for material changes)
• In-app notification
• Updated "Last Updated" date at the top of this policy

Continued use of StoryVerse after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions or concerns about this Privacy Policy: