1. Our commitment
StoryWell is committed to protecting your family's privacy. We handle personal information in line with the Privacy Act 1988 (Cth), including the Australian Privacy Principles (APPs). Where this policy uses "we", "us", or "StoryWell", it means the StoryWell service provider and its authorised service operators.
2. Who can use StoryWell
StoryWell is intended for children aged 3-12 and must be set up by a parent or legal guardian. Parents and guardians are responsible for giving consent, managing child profiles, and making privacy requests on behalf of their child where required.
3. Information we collect
We only collect information reasonably needed to provide, secure, and improve StoryWell.
- Account information: parent or guardian email address and basic account records.
- Child profile information: child first name or nickname, age or date of birth, and profile settings.
- Story information: generated stories, story choices, saved stories, and related metadata.
- Support and safety information: messages sent to us through support or contact forms, and reports submitted by users.
- Technical information: device and app diagnostics needed for security, performance, and reliability.
4. How we collect information
- Directly from parents or guardians during account setup and profile management.
- When stories are generated, saved, or reported through app features.
- Automatically through service logs and diagnostics needed to run the service.
5. Why we use information
- Provide age-calibrated story generation and the story library.
- Keep children safe through moderation, abuse prevention, and service controls.
- Authenticate parent access, maintain accounts, and provide customer support.
- Improve product quality, reliability, and security.
- Meet legal obligations, including complaints handling and safety investigations.
6. Children's data — our commitments
Data about children is handled under the parent or guardian's consent. We apply strict rules:
- No profiling: We do not build behavioural or interest profiles of children.
- No advertising: We do not use children's data for advertising or marketing targeting.
- No sale of data: We never sell children's personal information under any circumstances.
- Data minimisation: We collect only the child's first name (or nickname), age, and story preferences — nothing more than needed for the service.
- Story content: AI-generated story content is not retained beyond the session unless you choose to save it.
- Parent control: You can delete your child's profile and all associated data at any time via in-app Settings.
7. Direct marketing
We do not use your personal information — or your child's — for direct marketing. We will not send promotional emails, targeted ads, or marketing messages based on your data. Any emails we send are limited to essential service communications (for example, account or security notices).
8. Storage and service context
Data may be stored in multiple places depending on the feature used:
- On-device storage: some story/session information can be held locally on your phone or tablet.
- Service components: account details, child profile details, and generated content can be stored in secure cloud service components used to operate StoryWell.
- Operational backups and logs: limited records may be retained for resilience, fraud prevention, and incident response.
9. Disclosure and third parties
We do not sell personal information. We share data only with service providers needed to run StoryWell. These third-party processors are:
- Anthropic (United States) — story generation via their AI API. Covered by their Data Processing Agreement and standard contractual clauses (SCCs) or equivalent safeguards.
- Supabase (United States / European Union) — backend and database. SOC 2 certified; data processing governed by contractual safeguards including SCCs where applicable.
- fal.ai (United States) — illustration generation. Governed by their terms and privacy policy; we use contractual safeguards for any personal data processed.
Apple App Store and Google Play are used for app distribution only; we do not share personal data with them beyond what is required for your purchase.
10. Overseas disclosure
Some of our service providers (Anthropic, Supabase, fal.ai) store or process information outside Australia. Where overseas disclosure occurs, we take reasonable steps to ensure recipients handle personal information in a manner consistent with Australian privacy requirements — including standard contractual clauses or equivalent safeguards. By using StoryWell, you acknowledge that some processing may occur overseas to deliver the service.
11. Access, correction, and deletion
Parents and guardians may request access to, correction of, or deletion of personal information linked to their account or child profile, subject to legal limits.
- Access: request a copy or summary of personal information we hold.
- Correction: request updates where information is inaccurate or out of date.
- Deletion: request deletion of account and child profile data, including associated story data where applicable.
To make a request, email us at privacy@storywell.app with your name, account email, and what you need (access, correction, or deletion). We may need to verify your identity before actioning requests. We aim to respond within 30 days.
12. Security and retention
We use technical and organisational controls designed to protect personal information from misuse, interference, loss, and unauthorised access, modification, or disclosure. We retain information only for as long as reasonably needed for service operation, legal compliance, and legitimate business purposes, then delete or de-identify it where practical.
13. Complaints
If you have a privacy concern, contact us first so we can investigate and respond. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
14. Policy updates
We may update this policy from time to time. The latest version will always be available on this page with a revised "Last updated" date.
15. Contact details
Privacy Officer, StoryWell [ABN: TBC] [Registered address: TBC]
Privacy requests: privacy@storywell.app
General support: support@storywell.io
Contact form: storywell contact page