Skip to content

Legal

Privacy Policy

Effective date: March 7, 2026

1. Overview

Sweet Story Studio ("we," "us," or "our") respects your privacy. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to all users of our website and services at sweetstorystudio.com.

By using the Service, you consent to the practices described in this policy. If you do not agree, please do not use the Service.

2. Information We Collect

Account information: When you create an account, we collect your name, email address, and password (stored as a cryptographic hash — we never store passwords in plain text).

Story inputs: Character names, pronouns, age bands, themes, lessons, story language preferences, dedication text, and any appearance descriptions you provide.

Photos: Images you upload for character reference. These may include photos of children for whom you are the parent or legal guardian.

Payment information: Billing details are processed and stored by our payment provider, Stripe. We do not store credit card numbers on our servers.

Usage data: Page views, feature usage, generation requests, error logs, IP addresses, browser type, and device information collected automatically for service operation and improvement.

3. How We Use Your Data

We use collected information to:

  • Authenticate your account and manage your session
  • Generate personalized storybooks based on your inputs
  • Process payments and manage your subscription
  • Provide customer support and respond to inquiries
  • Monitor service reliability, prevent abuse, and fix bugs
  • Send transactional emails (password resets, billing receipts)

We do not use your data for advertising, and we do not sell your personal information to third parties.

4. Photos & Children's Data

Sweet Story Studio is designed for adults (parents, guardians, educators) to create content for children. We do not knowingly collect personal information directly from children under 13 (or the applicable age in your jurisdiction).

Photos uploaded for character reference are processed by our illustration engine to generate storybook images. By uploading a photo of a child, you confirm that you are the child's parent or legal guardian and consent to the photo being used for storybook generation.

Photos are stored securely and are only used for the purpose of generating your storybooks. They are not shared with other users, used for training, or displayed publicly. You may delete your photos at any time through your account or by contacting support.

5. Third-Party Services

We share limited data with the following categories of service providers:

  • Authentication & database: Supabase (account data, session management)
  • Payment processing: Stripe (billing, subscription management)
  • Illustration engine: OpenAI (story text and image prompts — photos are sent for image generation only)
  • Hosting: Vercel (application hosting, edge delivery)
  • Print fulfillment: Lulu (if you order printed books — shipping address and book files only)

Each provider operates under its own privacy policy and data processing agreements. We only share the minimum data necessary for each provider to perform its function.

6. Cookies & Tracking

We use essential cookies to maintain your login session and remember your preferences. These cookies are necessary for the Service to function and cannot be disabled.

We do not use third-party advertising cookies or tracking pixels. We do not participate in cross-site tracking networks. Basic usage analytics may be collected for service improvement, but we do not build advertising profiles from your activity.

7. Data Security

We take reasonable measures to protect your data, including encrypted connections (HTTPS/TLS), hashed passwords, secure cloud infrastructure, and access controls that limit who can view user data.

No system is perfectly secure. While we strive to protect your information, we cannot guarantee absolute security. If we discover a data breach that affects your personal information, we will notify you and any applicable regulators as required by law.

8. Data Retention & Deletion

We retain your account data and generated storybooks for as long as your account is active. Uploaded photos are retained for the purpose of ongoing storybook generation and may be deleted by you at any time.

If you delete your account, we will remove your personal data, uploaded photos, and generated content within 30 days, except where retention is required by law (such as billing records for tax purposes, which may be retained for up to 7 years).

To request account deletion, contact sweetstorystudio@gmail.com.

9. Your Rights

Depending on your location, you may have the right to:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Ask us to correct inaccurate data
  • Deletion: Request that we delete your personal data
  • Portability: Receive your data in a structured, machine-readable format
  • Objection: Object to certain types of processing

To exercise any of these rights, contact sweetstorystudio@gmail.com. We will respond within 30 days.

10. GDPR & CCPA

For EU/EEA users (GDPR): We process your data based on contractual necessity (providing the Service), legitimate interest (security and improvement), and your consent (photo uploads). You may withdraw consent at any time by deleting your content or account.

For California users (CCPA): We do not sell personal information. You have the right to know what data we collect, request deletion, and opt out of any sale of personal information (though we do not sell data). California residents may contact us to exercise these rights.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the Service at least 14 days before the changes take effect. The "Effective date" at the top of this page indicates when the policy was last updated.