Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Parent/Account Information: When creating an account, we collect email address and a password. If you choose to enable push notifications for bedtime reminders, we may collect time preferences.
• Child Profile Information: Parents can create profiles for each child, which may include a name and age range (to customize story content appropriately).
• Story Ratings and Feedback: Parents may rate stories and provide optional written feedback about their experience.

1.2 Information Collected Automatically

• Story Interaction Data: We log which stories are started, how long a session lasts, which story branches/choices children select, whether stories are completed or abandoned, and replay activity. This helps us understand which stories are engaging and where improvements are needed.
• Device and Usage Information: We collect device type, operating system, app version, and general usage timing (e.g., time of day stories are accessed) to improve performance and understand usage patterns.
• Analytics: We use first-party analytics (our own servers) to track the above events. We do not use third-party analytics services (Firebase, Mixpanel, Amplitude, etc.) that would transmit child-identifiable data to external vendors.

Important for Parents: Storeetime complies with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. All child interaction data is pseudonymous (linked to a child profile ID, not names or device identifiers) and stored on our secure servers.

2. How We Use Your Information

• Providing the Service: To deliver stories, track progress, enable ratings, and send bedtime reminder notifications (if you've enabled them).
• Improving the App: To understand which stories and branches are most engaging, identify abandonment points, and optimize story content and app performance.
• Troubleshooting: To diagnose technical issues and provide customer support.
• Compliance and Safety: To comply with legal obligations and protect the safety of our users.

We do not:

• Sell or share child data with advertisers, marketers, or third parties.
• Use child interaction data for behavioral profiling or targeted advertising.
• Share data with third-party analytics, advertising networks, or social media companies.
• Disclose child information unless required by law.

3. Data Storage and Security

We store all data on secure servers with industry-standard encryption (TLS in transit, AES-256 at rest). We implement access controls, regular security audits, and staff training to protect against unauthorized access.

However, no security system is perfect. While we work hard to protect your information, we cannot guarantee absolute security.

4. Data Retention

• Active Accounts: We retain story interaction data for as long as your account is active.
• Deleted Accounts: When you delete your account, we retain anonymized analytics data (which can no longer identify your child) for up to 90 days to allow for data recovery requests, then permanently delete it. Parent account information and child profile names are deleted immediately.

5. Your Rights and Parental Controls

5.1 Access and Deletion

Parents have the right to:

• Access all information we hold about their child.
• Request deletion of their child's data.
• Request we stop collecting data from their child.

To exercise these rights, contact us at the address below. We will verify you are the parent/guardian and respond within 30 days.

5.2 Parental Controls in the App

• Parents can disable push notifications at any time in app settings.
• Parents can delete individual child profiles, which removes associated data from the app interface.
• Parents have full visibility into story ratings and feedback they've submitted.

6. Third-Party Services

We may use the following services to support Storeetime:

• Cloud Hosting: Data is stored on secure cloud infrastructure with encryption and compliance certifications.
• App Stores: Apple App Store and Google Play Store may collect separate analytics per their privacy policies.

We do not use social media logins, ads, or third-party SDKs that would expose child data to external platforms. Any future integrations will maintain the same privacy standards outlined here.

7. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our practices. We will notify you of material changes by updating the "Last Updated" date and, for significant changes, by notifying you within the app or via email. Continued use of Storeetime after such notice constitutes acceptance of the updated policy.

8. Legal Compliance

• COPPA (Children's Online Privacy Protection Act): Storeetime complies with COPPA's requirements to protect children under 13. We do not collect personal information from children without verifiable parental consent, and parents can request access or deletion at any time.
• GDPR (General Data Protection Regulation): If you are a resident of the EU, UK, or other jurisdictions with similar laws, you have additional rights including access, rectification, erasure, and data portability. Contact us to exercise these rights.
• CCPA (California Consumer Privacy Act): If you are a California resident, you have the right to know, delete, and opt-out of the sharing of personal information. We do not "sell" data as defined by CCPA, but you may request deletion.

9. International Users

If you access Storeetime from outside the United States, your information will be transferred to, stored in, and processed in the United States. By using Storeetime, you consent to this transfer. We take all reasonable steps to ensure that such transfers comply with applicable privacy laws.

10. Contact Us

If you have questions about this Privacy Policy, wish to access or delete your child's data, or want to file a complaint, please contact us:

For GDPR inquiries, please email contact@storeetime.app and note "GDPR Request" in the subject line.

We will respond to all privacy requests within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.