1. Information We Collect
When you create an account with StoryCraft, we collect your name, email address, and authentication details through our identity provider (Clerk). When you generate stories, we store story content, preferences, and usage data to improve our service.
2. How We Use Your Information
We use your information to:
- Provide and personalise story generation
- Manage your account and your story packs
- Process payments securely
- Improve our AI models and service quality
- Communicate important updates about the service
3. Data Storage & Security
Your data is stored securely using industry-standard encryption. Story content is stored in our database and images are hosted on secure cloud storage. We never sell your personal data to third parties.
4. Third-Party Services
We use the following third-party services to operate StoryCraft:
- Clerk — Authentication and user management
- OpenAI — Story text generation
- fal.ai — Story illustration generation
- Cloudflare — Image hosting
- Equity Bank / Finserve Africa (Jenga) — M-Pesa payment processing. Receives your phone number and the payment amount.
Each provider has their own privacy policy governing how they handle data.
5. Children's Privacy
StoryCraft is designed for use by parents and guardians on behalf of their children. We do not knowingly collect personal information directly from children under 13. Parent or guardian accounts are required to use the service.
Teenagers. A young person aged 13 or older may use StoryCraft with the consent of a parent or guardian, through that adult's account, using “For myself” on the create screen. The account belongs to the parent or guardian, who is responsible for how it is used, including by the young person. We do not offer separate accounts for teenagers. Everything in this policy about wishes, names and private stories applies in the same way when a young person makes a story for themselves.
6. “Make it yours” and Kenya's Data Protection Act 2019
When you create a story you may add a wish (what's on your child's heart, or, with “For myself”, what's on a young person's own heart) and a first name for the hero. Kenya's Data Protection Act 2019 treats children's data as sensitive, so here is exactly what happens to it:
- Who provides it: the account holder, who must be a parent or guardian, on the child's behalf; or a young person aged 13 or older using that adult's account with their consent.
- What we keep: never the words you type. Phone numbers, email addresses, links and payment codes are removed straight away. A safety check turns the rest into a short story idea with no personal details, which is all our story writer sees. We keep that story idea and the first name with the story, so you can read it again.
- Why: to write the story you asked for and to keep children safe.
- Who can see it: a story made with a wish or a name is private. Only the account it was made on can open it; it never appears in the public library. If you choose to share it by link, anyone you send the link to can read the story, with its names and pictures. You can stop sharing at any time, and the link stops working at once.
- When a wish is not accepted: if the safety check declines a wish, or it suggests a child may need help, we keep the cleaned text for 30 days so our team can check the decision was right. Only administrators can see it, and it is deleted automatically after 30 days. No story is made and no credit is used.
- How long: a private story, with its story idea and name, is kept until you ask us to delete it or your account.
7. Your Rights
You have the right to:
- Access and download your personal data
- Request correction of inaccurate data
- Request deletion of your account and data
- Opt out of non-essential communications
8. Contact Us
If you have any questions about this Privacy Policy, please contact us at hello@storycraftai.com.