1. Introduction
Welcome to Santuri Stories! We care deeply about the privacy and safety of the families who use our app. This Privacy Policy explains what information we collect, how we use it, and your rights.
2. Information We Collect
We collect only what is necessary to provide our magical service:
- Account Information: Parent's email address (for login and account management).
- Child Profiles: Names/nicknames and ages of children (used purely to personalise stories).
- Story Content: The text and audio prompts you provide, and the stories/illustrations generated by our AI.
- Technical data: Device type, operating system, and anonymised usage logs for app performance and error monitoring. We do not use this data to identify you personally.
- Purchases: Transaction records processed via Stripe. We do not store payment details.
3. Children's Privacy (COPPA & GDPR-K)
Santuri Stories is designed for use by parents and guardians with their children. Account holders must be adults aged 18 or over.
- We do not knowingly collect personal contact information directly from children under 13.
- Child profile data (name/nickname and age) is provided by the parent and used solely to personalise story generation.
- Before creating a child profile, we require you to confirm you are the parent or legal guardian of that child. This constitutes our verifiable parental consent mechanism under COPPA.
- Parents have the right to review, correct, or delete their child's data at any time. See Section 8 for how to exercise these rights.
- If we discover we have inadvertently collected personal information from a child without parental consent, we will delete it promptly. Please contact us at support@santuri-stories.com.
- We do not share personal information with third parties for marketing purposes.
4. How We Use Your Information
We use your information to:
- Provide and personalise the Santuri Stories service
- Generate AI stories and illustrations based on your prompts
- Maintain and improve app performance
- Communicate important updates about the service
Legal basis for processing (UK GDPR / GDPR): We process your data on the basis of contractual necessity (to deliver the service you signed up for) and, where required, your explicit consent. We do not rely on legitimate interests as a basis for processing children's data.
5. How We Use Artificial Intelligence
We use third-party AI providers (such as Google and Anthropic) to generate story text and images.
- Your prompts are sent to these providers solely to generate the content.
- We configure our AI partners not to train their models on your personal data where possible.
- Your prompts are transmitted to these providers solely for the purpose of generating content.
- We have configured our agreements with these providers to prevent your personal data from being used to train their AI models.
- These providers are based in the United States. By using Santuri Stories, you acknowledge that your prompt data may be transferred to and processed in the US. We rely on Standard Contractual Clauses (SCCs) and our providers' data processing agreements to ensure this transfer meets UK/EU adequacy standards.
6. Data Sharing
We do not sell your personal data. We do not share your data with third parties for marketing purposes. We may share data with:
- AI providers (Google, Anthropic) — as described above, solely to generate content
- Infrastructure providers — for hosting and storage (e.g. Vercel, Supabase), under data processing agreements
- Legal obligations — if required by law, court order, or to protect the safety of users
7. Cookies & Analytics
We use a minimal number of cookies to keep Santuri Stories working properly and to monitor app performance. For more details, please see our Cookie Policy.
8. Data Retention
Account and profile data is retained for as long as your account is active.
Story content is retained until you delete it or close your account.
Technical/usage logs are retained for a maximum of 90 days.
When you delete your account via Settings, all associated personal data is permanently deleted from our servers within 30 days.
9. Security
We take reasonable technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest. No system is completely secure; if you have concerns, contact us immediately at hello@santuri-stories.com.
10. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you or your child
- Correct inaccurate data
- Request deletion of your or your child's data
- Object to or restrict certain processing
- Withdraw consent at any time
To exercise any of these rights, contact us at hello@santuri-stories.com. We will respond within 30 days.
11. Changes to This Policy
We may update this policy as our service evolves. We will notify you of material changes via email or in-app notice at least 14 days before they take effect. Continued use of the app after that date constitutes acceptance.
12. Contact Us
If you have any questions about this policy, please contact us at hello@santuri-stories.com.