Privacy policy

1. Who is responsible

The service is operated by StoryMoon ("we"). Operator details will be updated upon company registration. For anything about your data, write to support@storymoon.com.

2. What we collect

We collect only what the books need.

• About you (the parent or guardian): your email address, the sign-in links we send you, your language, and your subscription status. Payments are handled by Lemon Squeezy; we receive the order and subscription details but never your card number.
• About your child: first name, pronouns, age band (2–4, 5–7 or 8–10), book language, a few appearance words (eye, hair and skin color, glasses), favorites you choose to add (a toy, an animal, a city, a pet's name), the optional note about the week, and up to three photos plus optional photos of favorite objects.
• What we create: the hero portraits, the books, songs and films, and the PDF files.
• Technical data: server logs (IP address, browser, time of request) kept for 30 days for security, and product events such as "book generated" or "error" that we record ourselves, without any third-party analytics.

3. Why we use it, and on what basis

• To draw the hero and produce the books, songs and films you subscribe to — performance of our contract with you.
• To process your child's photos and appearance details — your consent as parent or guardian, given during setup. You can withdraw it at any time by deleting the photos or the account.
• To send the emails the service needs: sign-in links, "your book is ready", the note before the next book, billing notices — performance of the contract.
• To keep the service secure and fix problems — our legitimate interest in running it safely.
• To keep invoices and payment records — legal obligations.

We do not sell data, we do not build advertising profiles, and we do not send marketing email unless you ask for it on the website.

4. Your child's photos

Photos are stored in a private area of our server that is not reachable from the web. They are used for one thing: drawing your child's hero. To do that we share them, through signed links that expire after 15 minutes, with an AI image-generation service that draws the hero and an AI vision service that checks that the drawing looks like your child. Neither receives your child's name or your email alongside the photos, and nothing is copied to a public location. Covers and book pages are drawn from the approved hero, not from the photos.

We never use your photos to train AI models, we share them with providers only to draw your child's hero, we never show them to other users and we never publish them. The sample children on our website are fictional.

We do not delete photos automatically. Once you have chosen the hero you can delete them in Settings → Photos: new books are drawn from the hero, and to draw it in another style you would add photos again. Deleting the account deletes them too.

5. Photos of family members and pets

In "My family" you can add the people and pets who appear in your child's books. Add a photo of another person only with that person's permission (for your other children, you give it as their parent or guardian); we ask you to confirm it before every upload. These photos are private, stored like your child's photos, and used for one thing only: drawing that person or pet in your family's books. They are never shown to other users, published or used to train AI models. You can delete a family member, with their photos and portraits, at any time, and everything is deleted with your account.

You can also add one photo of your child's favorite toy. We use it only to draw that toy into your child's books; it is stored privately like the other photos, is never shown to anyone else and never used to train AI. Replace or remove it any time in the child's profile — the photo and the drawn versions are deleted together.

6. Visual details that may relate to health

If you choose to add visual details such as a wheelchair, hearing aids, a prosthesis, noise-cancelling headphones or a communication device to your child's profile, we process them only with your explicit consent (GDPR Art. 9(2)(a)) and only to draw your child in their books. We do not collect diagnoses. We send illustration providers a short visual description, never a medical term. These details are not used for advertising, analytics or profiling, and you can delete them at any time; we delete them with the child's profile.

7. Who helps us process data

We use a small number of service providers, each only for the purpose listed. These are the categories of providers and what each receives:

• AI image-generation services — the hero, drawn from your child's photos; the page illustrations and the covers, drawn from the hero and the drawn references of the other characters (never from the original photos).
• AI music services — the song, from lyrics that include your child's name, and the timing of its words for the film subtitles.
• AI language and vision services — adapting the story text to your child (name, age band, the note about the week), the safety check of that note, the automated quality check of every image, and comparing the drawn hero with your child's photos to check the likeness.
• AI voice services — the read-aloud voice (text-to-speech of the book's text) and the speech recognition that times the highlighted words in read-along mode.
• An email delivery service — your email address and the content of our transactional emails.
• Lemon Squeezy — payments, invoices and subscription management, as merchant of record: your email and the payment details you give it.
• Our hosting provider, which runs the server the service lives on.

Several of these providers are based outside the European Economic Area (for example in the United States), so the data each one receives is processed there. If you want to know which provider handles a given task, write to support@storymoon.com.

8. How long we keep it

• Photos: while your account exists, unless you delete them earlier from Settings.
• Family members and pets: their names, descriptions, photos and portraits are kept while your account exists, unless you remove them earlier in "My family"; they are deleted with the account.
• Favorite-toy photo: the photo and its drawn versions are kept while the child's profile exists, unless you remove them earlier; they are deleted with the profile or the account.
• Heroes, books, songs, films and PDFs: while your account exists, so your library stays available.
• Account and child profile: until you delete the account. Deleting it in Settings removes it, with the photos, heroes and books, from the service straight away; if you ask us by email, we do it within 30 days. Copies of our database made before maintenance work may still hold the account's text records (never the photos or the books) until those copies are deleted.
• Invoices and payment records: as long as tax law requires, at Lemon Squeezy and in our records.
• Server logs: 30 days.

9. Children

StoryMoon has no child accounts. The account belongs to a parent or guardian, who creates the child's profile and gives consent for the photos. We do not knowingly collect information from children directly, and the reader is designed to be used together with an adult.

10. Your rights

Under the GDPR and similar laws you can:

• See what we hold about you and your child, and get a copy — ask us.
• Correct it — tell us and we fix it.
• Delete it — photos, the child profile or the whole account, from Settings, or by writing to us.
• Withdraw consent for the photos at any time; this does not affect processing that already happened.
• Object to processing based on our legitimate interests, and ask us to restrict processing.
• Complain to the data protection authority in your country of residence.

Write to support@storymoon.com from the email on your account and we will answer within 30 days.

11. Cookies

The app uses one cookie: the session cookie that keeps you signed in. There are no third-party analytics, no advertising trackers and no social-media pixels. The marketing site (this page) sets no cookies at all.

The site loads its fonts from Google Fonts, which means your browser requests the font files from Google's servers and sends its IP address to do so.

12. Security

Everything travels over HTTPS. Photos and generated files live in private storage; the only way to fetch them is through short-lived signed links issued to you or to a provider for a specific job. Access to the server is limited to the team that runs the service.

13. Changes to this policy

We will post changes here with a new date at the top. If a change matters to how we use your child's data, we will email you before it takes effect.