Privacy Policy (App)

Privacy Policy for the StoryTales App

1. Controller

Robin Wettstädt Softwareentwicklung

Plönzeile 38

12459 Berlin, Germany

Email: hello@storytalesapp.com

2. What data do we collect?

Registration & Login:

When registering and logging in, your email address and other authentication data are processed by the service provider Clerk, regardless of whether you use email/password or Google login.

Profile:

Display name (freely chosen), profile picture (optional, uploaded by the user)

Image Upload:

Uploaded images (usually drawings)

AI-generated content:

Images and texts generated by the app (e.g. character descriptions, stories)

Moderation data:

All user input (images, names, descriptions) is checked by the OpenAI Moderation API before further processing to prevent inappropriate content.

Payment data:

Payments are processed exclusively via the App Store/Play Store – we do not store any payment data.

3. Purpose of processing

  • Providing app features (registration, login, profile management)
  • Storing and processing uploaded images and texts
  • Analyzing and generating content using AI services (OpenAI, Google Gemini)
  • Moderation to prevent inappropriate content
  • Managing premium memberships and in-app purchases

4. Storage location and sharing with third parties

Storage location:

Images are stored on AWS S3 servers.

All other data and content is stored in a database of Supabase.

To provide our services, we use various third-party providers. The services we employ and their sub-processors are, to the best of our knowledge, designed to meet the requirements of the GDPR. Where data transfers occur to countries outside the European Union (e.g., to services like RevenueCat), we rely on Standard Contractual Clauses (SCCs) approved by the EU Commission to ensure an adequate level of data protection.

Sharing with third parties:

  • OpenAI and Google Gemini (for AI analysis and generation)
  • OpenAI Moderation API (for content moderation)
  • Clerk (for registration and login)
  • RevenueCat (for payment processing and premium memberships)
  • App Store/Play Store (for final payment processing)

Note:

We cannot fully prevent users from uploading personal data (e.g. photos of real people). We explicitly ask users to only upload their own drawings and not to upload sensitive content.

5. Legal basis

  • Art. 6 (1) (b) GDPR (performance of a contract)
  • Art. 6 (1) (a) GDPR (consent, e.g. for registration by minors with parental consent)

6. User rights

  • Access to stored data
  • Correction of incorrect data
  • Deletion of data ("Delete Account" function in the app)
  • Restriction of processing
  • Objection to processing
  • Data portability
  • Right to lodge a complaint with a supervisory authority

7. Contact for privacy inquiries

If you have questions or wish to exercise your rights, please contact:

Email: hello@storytalesapp.com

8. Special notice for children and parents

The app is also intended for children. Users under 16 may only use the app with parental consent. We obtain this consent during registration.

9. No social features

Your data and content are not published or shared with other users.

10. Payment processing

Payments are processed exclusively via the App Store or Play Store. We do not store any payment data.

11. Changes to this privacy policy

We reserve the right to change this privacy policy. The current version is available in the app and on the website.

Last updated: May 1, 2025