SoriStory ("we," "our," or "us") is committed to protecting the privacy of our users, including children. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the SoriStory mobile application and website.
1. Information We Collect
1.1 Account Information
When you create an account, we collect:
- Email address
- First name (given name) and Last name (family name)
- Password (stored encrypted)
1.2 Family and Child Profile Information
To personalize stories and manage family features, you may provide or create:
- Child or family profile first names or nicknames
- Age or age range
- Interests and preferences (e.g., themes like space, animals, princesses)
- Family membership, invitation, role, and sharing metadata
- Profile-specific library, recommendation, reading, listening, and content visibility choices
We do not collect any information directly from children. All child profile data is entered and managed by the parent or guardian.
1.3 Voice Data
If you use our voice cloning feature, we collect audio recordings of your voice. Depending on your choices in the app, voice data may include original raw recordings, cleaned or prepared audio samples, generated voice model identifiers, and technical metadata such as provider identifiers, sample counts, cleanup version, and recording quality metrics. This voice data is:
- Used solely for generating AI voice models for story narration
- Used to restore or re-create your voice clone if you switch devices or if we change voice providers, only when you enable cloud voice backup
- Stored securely and encrypted at rest
- Shared only with service providers that process or store the data on our behalf to provide the Service
- Deletable at any time through your account settings
Cloud voice backup is optional. The first recording flow asks for your consent before storing voice samples for future restoration or provider migration. You can turn future voice sample backups on or off in the app's Voice Privacy settings.
1.4 Usage Data
We automatically collect:
- Device type and operating system
- App usage analytics (stories created, listening time)
- Crash reports and performance data
1.5 Story, Translation, and Sharing Data
When you create, listen to, translate, or share content, we may process:
- Story prompts, generated stories, diary entries, collections, and story metadata
- Selected narration and caption languages, translated captions, translated story text, and related cache metadata used to make playback faster
- Sharing choices, shared-by attribution, selected recipients, family profile visibility, and timestamps for shared stories, collections, or eligible voices
1.6 Website Analytics
Our website at soristory.com uses Google Analytics 4 to understand how visitors find and use the site. This is separate from the app and from your SoriStory account: no account, profile, story, or voice data is involved, and we cannot connect a website visit to a specific user.
Google Analytics sets first-party cookies and collects:
- Pages viewed, time on page, and how you moved through the site
- Approximate location derived from your IP address (Google truncates the address; we never receive the full one)
- Device type, browser, operating system, and screen size
- The site or campaign link that brought you here, including any campaign tags on links we post in our social profiles
We use this only to see which pages and which channels are working. We do not use it to build advertising profiles, and we do not sell it. You can opt out using Google's browser add-on at tools.google.com/dlpage/gaoptout, or by blocking cookies for this site in your browser.
Analytics collected inside the app are described in section 1.4 and are kept separately from website analytics.
2. How We Use Your Information
We use the collected information to:
- Create and personalize stories for your children
- Maintain family profiles, profile-specific libraries, recommendations, histories, and sharing controls
- Share or unshare stories, collections, and eligible voices with the family members or profiles you choose
- Generate and maintain AI voice models
- Restore or re-create voice clones when you have enabled cloud voice backup
- Provide translated narration, translated captions, and cached read-along experiences
- Improve our app and services
- Send important service notifications
- Provide customer support
3. Children's Privacy (COPPA Compliance)
SoriStory is designed for use by parents, guardians, and educators on behalf of children. We comply with the Children's Online Privacy Protection Act (COPPA):
- We do not knowingly collect personal information directly from children under 13
- All child-related data is collected from and managed by the parent or guardian
- Parents can review, modify, or delete their child's information at any time
- We obtain verifiable parental consent before collecting any child-related data
4. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information. We may share data with:
- Service providers: Google Cloud and other AI providers (AI story generation, text-to-speech, translation, and voice processing), Firebase (authentication, cloud storage, sync, and crash reporting), and Apple (subscription payment processing), all bound by strict data processing agreements
- Family sharing: When you choose to share stories, collections, or eligible voices with family members or family profiles, the selected recipients may see or play that content along with related attribution and sharing metadata
- Legal requirements: When required by law, court order, or governmental authority
- Safety: To protect the safety and security of our users
5. Data Security
We implement industry-standard security measures including:
- AES-256 encryption for data at rest
- TLS 1.3 encryption for data in transit
- Regular security audits and penetration testing
- Access controls and authentication requirements
6. Data Retention and Account Deletion
We retain your data only as long as necessary to provide our services. Subscription and payment data is managed entirely by Apple through the App Store and is subject to Apple's Privacy Policy.
Recently Deleted and Restore Windows: Some in-app deletion actions are designed with a short recovery period. Deleted stories, custom voices, child profiles, and profile-owned stories may be hidden from normal use but kept in a user-visible Recently Deleted or restore area for up to 30 days before permanent removal. This helps families recover content deleted by mistake.
Account Deletion (Hard Wipe): You can request the deletion of your account at any time through the app's Settings or by contacting us at delete@soristory.com. When you delete your account, we perform a strict, non-recoverable "Hard Wipe" of your data. This means:
- All user-created stories are permanently erased.
- All custom collections are permanently erased.
- All cloned voice models, raw voice samples, cleaned/prepared voice samples, and voice backup metadata are permanently purged from our servers.
- Your personal profile metadata and authentication identity are completely destroyed.
Except for the user-visible Recently Deleted and restore windows described above, we do not "soft delete" or secretly retain your personal data for convenience. Account deletion is different from deleting an individual story, voice, or child profile. If you choose to return to SoriStory after deleting your account, you will start with a completely blank slate, and none of your previous data will be recoverable.
7. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data in a portable format
- Opt out of non-essential communications
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy in the app and sending an email notification.
9. Contact Us
If you have questions about this Privacy Policy, please contact us at:
support@soristory.com