Privacy Policy

⚠️ Draft — pending legal review. This document is a working draft and does not yet constitute StoryCave's final, legally-reviewed privacy policy. It must be reviewed by qualified counsel before public launch.

StoryCave ("StoryCave", "we", "us") provides a subscription reading app for children in which stories are personalized using details supplied by a parent or guardian. This policy explains what information we collect, how we use it, and the choices you have. It is written for the parent or guardian who holds the account — children do not interact with account, billing, or privacy settings.

Information we collect

• Parent account information — the email address you sign up with (or that we resolve from Sign in with Apple / Google), your name if you provide it, and a securely hashed password if you use email sign-in.
• Child profile information — the profile name and the personalization details you choose to enter (for example a first name, a favourite place, or similar attributes) so that stories can be written about your child. You decide what to enter; you can edit or delete it at any time.
• Reading activity — which stories a profile has opened and reading progress, so a child can resume where they left off and so we can surface popular stories.
• Subscription status — whether your account has an active subscription and its current period, reported to us by the App Store or Google Play. We never receive or store your full payment card details.
• Limited technical data — information needed to operate the service securely (such as authentication tokens and error logs). We do not use third-party advertising or behavioural-analytics trackers.

How we use information

• To personalize and deliver stories to your child.
• To create and secure your account, and to gate parent-only actions behind your credentials.
• To provide and manage your subscription and entitlement.
• To respond to your support requests.
• To maintain, secure, and improve the service.

We do not sell personal information, and we do not use children's information for behavioural advertising.

Children's privacy

StoryCave is designed to be operated by a parent or guardian on a child's behalf. Child profiles — including any personalization details — are created and controlled by the account-holding adult. We rely on the parent's consent, given when they create a profile, as the basis for processing that child's information, and we process it only to provide the reading experience. Consistent with the U.S. Children's Online Privacy Protection Act (COPPA) and the "children" provisions of the EU/UK GDPR, we minimise the data we collect about children, do not require a child to disclose more than is reasonably necessary, and do not condition participation on disclosing unnecessary information. A parent can review, edit, or delete a child's profile and its data at any time in parent mode, or by contacting us.

How information is shared

We share information only with service providers who process it on our behalf and under contract, including: cloud hosting and database providers that run our backend, a content-delivery provider, and an email provider used for account and transactional messages. Subscription billing is handled by the App Store and Google Play under their own privacy policies. We may disclose information if required by law or to protect the rights, safety, and security of our users and service. We do not sell personal information.

Data retention & deletion

We keep account and profile information for as long as your account is active. You can delete a child profile at any time, and you can request deletion of your account and associated data by contacting us. We may retain limited records where necessary to comply with legal obligations or resolve disputes.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or port your information, to object to or restrict certain processing, and to withdraw consent. As the account-holding adult you can exercise these rights on behalf of your child's profiles. To make a request, email us at contact@storycave.app. We will respond within the timeframe required by applicable law.

Security

We use industry-standard measures to protect information, including encryption in transit, hashed passwords, and least-privilege access to our systems. No method of transmission or storage is perfectly secure, but we work to protect your information and to promptly address any issues.

International transfers

We may process and store information in countries other than your own. Where we do, we take steps to ensure an appropriate level of protection consistent with applicable law.

Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

Contact us

Questions about this policy or your data? Email contact@storycave.app.