STORYCRAFT KIDS
Privacy
Controller and contact
The controller is Antonio Martinez Guerola, a self-employed person in Spain. A postal address is not published. For access, rectification, deletion and other applicable privacy requests, write to privacy@storycraft.kids. The Spanish Data Protection Agency (AEPD) is the relevant supervisory authority. This policy is effective 17 September 2026. Processing for the app is needed to provide the service (accounts, stories, characters, credits and purchases). Hosting and security logs are processed as required to operate the website and backend. Photo-based character creation is offered only after a parental gate in the app. Providers in other countries (including Firebase, OpenAI, RevenueCat, Amplitude and PostHog) may process data under their terms; this policy does not claim specific transfer clauses or Zero Data Retention.
Website and app
This website has no contact form, accounts, advertising or analytics scripts. The privacy address above is an email alias, not a form. Hosting infrastructure processes technical request information. The mobile app separately uses Firebase for accounts and data, OpenAI for generated content, RevenueCat for purchase management, and Amplitude and PostHog for analytics. Analytics fields, consent, retention and identity settings remain under review and must not be read as a finished child-privacy programme.
Photos and characters
Photo-based character creation is behind a parental gate. The app sends a compressed photo to our backend and an AI image service. The original photo is not stored in Firebase Storage or Firestore by this flow; temporary backend files are removed after processing. The generated clay-style image is stored in Firebase Storage and currently has a public URL. This is not a promise that the AI provider retains no input data.
Stories, purchases and deletion
Stories, characters and credit records are associated with an account in Firebase. Purchases are handled through the app stores and RevenueCat. Account deletion in the app starts cleanup of known user records and stored files. Nested data, operational logs, backups and provider retention are not fully verified; this policy does not state a deletion deadline.
Children and parental involvement
Storycraft Kids is designed for family use. The app includes parental gates for selected actions; a gate alone is not described here as verified legal consent. Adults should supervise use and should not supply photos or personal details without the necessary permission.
Your privacy requests
Use privacy@storycraft.kids for privacy requests. We will use that channel to handle applicable rights. Until a request is completed, you can also delete the app account from the parental area.
Provider information
Provider processing must be checked against the current service configuration and agreements. Review notes and official source links are maintained with this website’s documentation. This policy describes the current implementation and does not claim certification or full legal compliance.