Privacy Policy

Storyou Storybooks

Last updated: 01.06.2026

We are Storyou Storybooks, based in Slovenia. Company registration is in progress, operating the Storyou service. We built this App to create personalized children's stories using a psychology-informed questionnaire and AI. Because that means we handle sensitive information about children and families, we want to be fully transparent about what we collect, why we collect it, and what we do — and don't do — with it.

This policy applies to parents and guardians who use our App to create stories for their children. It covers both our website and the App itself. GDPR applies to all users. If you are based in the United States and your child is under 13, COPPA also applies — we explain our COPPA commitments in Article 10.

If you have any questions after reading this, please contact us at support@storyou-storybooks.com.

1. Who We Are and What We Do

The App works like this: a parent or guardian fills out a questionnaire about their child — their personality, temperament, emotional patterns, and developmental stage. We use that information to build a psychological profile of the child. An AI System created by us, then uses that profile to write a personalized story where the child is the main character. The finished story is delivered as a digital book.

Because the questionnaire touches on a child's psychology and behavior, the information you give us is more sensitive than a typical personalization service. We take that seriously. This policy is written to reflect that.

2. What Information We Collect

2.1 Information you give us directly

  • Account information: Your name and email address when you register.
  • Questionnaire responses: Your answers about your child's personality, temperament, attachment style, emotional challenges, and developmental stage. This is the core of our service. These responses are used to create a psychological profile of your child that informs the story.
  • Child's name, age, description of their visual appearance: Used to personalize the story.
  • Optional photo of your child: You may upload a photo to help describe your child's appearance. The photo is processed by our AI system solely to generate a written description of your child's appearance, which is then used to personalise the story. The photo is deleted once the description is generated.
  • Story preferences: Any choices you make about themes, characters, or narrative direction.
  • Payment information: Handled entirely by our payment provider Stripe. We never see or store your card details.
  • Communications: Anything you send us by email or through the App.

2.2 Information collected automatically

  • Technical data: IP address, browser type, device type, operating system.
  • Usage data: Which pages you visit, how long you spend on them, clicks and navigation patterns.

We collect this through cookies and similar technologies. See Article 6 for details on how to control this.

2.3 Information we do NOT collect

We do not collect personal data directly from children. The questionnaire is filled out by the parent or guardian, about the child. We do not have a user-facing interface for children to use.

3. Why We Collect This Information and Our Legal Basis

We only process your information when we have a legal reason to do so under GDPR. Here is what we collect and why:

To provide the service (legal basis: performance of a contract, Art. 6(1)(b) GDPR):

  • Processing your account and payment confirmation.
  • Using questionnaire responses to generate the psychological profile and the personalized story.
  • Delivering the finished story to you.

Child-specific data (child's name, appearance, and personality traits) is processed on the basis of explicit parental consent (Art. 6(1)(a) GDPR). You give this consent when you complete the registration and the questionnaire on your child's behalf.

With your consent (legal basis: consent, Art. 6(1)(a) GDPR):

  • Sending you marketing emails about new features or offers. You can unsubscribe at any time.
  • Placing non-essential cookies for analytics and marketing purposes.

You can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of any processing that happened before you withdrew it.

To comply with the law (legal basis: legal obligation, Art. 6(1)(c) GDPR):

  • Keeping financial records for the legally required period.

For legitimate interests (legal basis: legitimate interest, Art. 6(1)(f) GDPR):

  • Preventing fraud and misuse of the platform.
  • Improving the App based on how people use it (using aggregated, anonymized data).
  • Maintaining the security of our systems.

4. The Psychological Profile — How It Works and What It Means

The questionnaire asks about things like your child's temperament, how they respond to new situations, what emotional challenges they face, and how they relate to others. This isn't casual personalization — it's a psychology-informed assessment designed to produce a story that genuinely resonates with your child.

Here is what happens with those responses:

  • Your answers are processed by our AI system specialized to build story narratives tailored to your child's profile.
  • The profile is used solely to write the story. It is not used to score, classify, or make any decisions about your child beyond the story content.
  • We do not share the psychological profile with third parties for any purpose other than generating the story.
  • We do not use the profile to build advertising segments or infer anything beyond what is needed for the story.

We want to be clear about what this is and what it isn't: it is a creative personalization tool, not a clinical assessment. The output is a story, not a diagnosis or report. If you have concerns about your child's development, we encourage you to speak with a qualified professional.

5. How We Share Your Information

We do not sell your information. We do not share it for advertising purposes. We only share information where it is necessary to deliver the service:

AI Provider:

The questionnaire responses and child profile are sent to our AI system to generate the story text. The inputs are not used to train future ai models.

Payment Provider (Stripe):

Handles payment processing. We receive only a confirmation that payment succeeded. Your card details are never stored by us.

Hosting and Infrastructure:

Our App is hosted on cloud infrastructure located within the EU. Personal data does not leave the EU for hosting purposes. Our hosting providers are bound by Data Processing Agreements and GDPR-compliant transfer mechanisms.

Legal requirements:

We will share information with authorities if required by law.

AI Provider:

Questionnaire responses and child profile data are sent to our AI system to generate the story text. The inputs are not used to train future AI models.

6. Cookies and Tracking

Cookies are small files stored on your device. We use them as follows:

Necessary cookies:

Required for the App to function — keeping you logged in, maintaining your session. These don't require your consent.

Analytics:

We use Vercel Analytics to understand how the App is used. This tool does not use cookies and does not store personal data at the individual level. No consent is required for this tool.

Marketing cookies:

We do not currently use marketing cookies.

You can control cookies at any time through your browser settings. Blocking session cookies may affect how the App works.

7. How Long We Keep Your Data

  • Account data: For as long as your account is active, or until you ask us to delete it.
  • Questionnaire responses and psychological profile: For as long as the profile is active, or until you decide to delete it.
  • Finished story (the book itself): Stored for as long as your profile is active, so you can re-download it.
  • Order and payment records: Retained for 7 years to meet tax and accounting obligations.
  • Uploaded child photos: Deleted immediately after the AI appearance description is generated.
  • Support communications: Up to 2 years after your query is resolved.

8. Your Rights

Under GDPR, you have the following rights. To exercise any of them, contact us at support@storyou-storybooks.com. We will respond within one month (we may extend this by two months for complex requests and will tell you if we do).

  • Access: Request a copy of the data we hold about you and your child.
  • Correction: Ask us to correct inaccurate or incomplete data.
  • Deletion: Ask us to delete your data ('right to be forgotten'). We must comply unless we have a legal obligation to keep it (e.g. financial records).
  • Restriction: Ask us to pause processing your data in certain circumstances.
  • Portability: Request your data in a structured, machine-readable format. To do so, contact us at support@storyou-storybooks.com and we will fulfil your request within one month.
  • Object: Object to processing based on legitimate interests, including any direct marketing.
  • Withdraw consent: Where processing is based on consent, you can withdraw it at any time.

If you believe we have mishandled your data, you can lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, ip-rs.si) or the data protection authority in your country of residence.

9. AI-Generated Content — What the AI Does and Doesn't Do

The story is written by our AI System, based on the profile generated from your questionnaire answers. Here is what you should know:

  • The AI uses your questionnaire responses to shape the story's themes, tone, and character traits. It does not have access to any data about your child beyond what you provide.
  • We do not use your data to train AI models.
  • It is recommended that you review the story for quality and safety before using it with your child.
  • The story is a creative work. It is not a psychological assessment, diagnosis, or clinical output of any kind.
  • We filter story inputs to prevent harmful or inappropriate content from being incorporated into stories.

10. Children's Privacy (GDPR and COPPA)

10.1 How we handle children's data under GDPR

Our App is used by parents and guardians to create stories for their children. Children do not use the App directly. All questionnaire responses are provided by the parent or guardian, who is the account holder and the person responsible for giving consent.

We do not knowingly collect personal data directly from children. The child's name and information in the story are provided by the parent. If you believe a child has submitted data to us directly without parental oversight, please contact us immediately at support@storyou-storybooks.com.

10.2 COPPA (US users with children under 13)

The Children's Online Privacy Protection Act (COPPA) applies to US users where the child involved is under 13. Our commitments under COPPA:

  • We do not knowingly collect personal information from children under 13 directly.
  • All data is collected from the parent or guardian, who gives verifiable parental consent by creating a verified account (email verified) and completing the questionnaire on the child's behalf.
  • We do not share a child's personal information for advertising purposes.
  • We do not condition a child's participation in a service on the collection of more personal information than is reasonably necessary.
  • Parents can request deletion of their child's data at any time by contacting support@storyou-storybooks.com.

11. Beta Period — What This Means for Your Data

The App is currently in early beta. This means:

  • You are testing a product that is not yet fully complete. Features, including privacy controls, may change.
  • We may contact you for feedback on your experience.
  • We may review anonymized, aggregated usage data more closely than we would in a production service, to understand how the App performs.
  • We will not use beta testing to process your or your child's data in ways beyond what is described in this policy.

When we move out of beta, we will notify users of any material changes to how we handle data.

12. Security

We use encryption (HTTPS/TLS) for all data in transit. Data at rest is stored on secured, access-controlled servers. We limit who on our team can access personal data, and especially data relating to children.

No security system is perfect. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant supervisory authority within the timelines required by law.

13. Changes to This Policy

We may update this policy as the App develops. If we make significant changes — especially changes that affect how we process children's data — we will notify you by email before the changes take effect and give you the opportunity to review them. We will not notify you for minor updates (like fixing a typo or clarifying language).

The date at the top of this policy always reflects when it was last updated.

14. Contact

For questions, complaints, or data requests:

Email: support@storyou-storybooks.com

Website: storyou-storybooks.com

Storyou Storybooks

Slovenia