Privacy Policy

Last updated: May 2026

1. About This Privacy Policy

StoryRadio ("we", "us", "our") is committed to protecting children's privacy and safety. This Privacy Policy explains how we collect, use, and protect information when you use the StoryRadio mobile application ("the App").

The App is designed for children aged 2-6 years old. We comply with:

  • The Children's Online Privacy Protection Act (COPPA) in the United States
  • The General Data Protection Regulation (GDPR) in the European Union
  • The Age Appropriate Design Code (AADC / Children's Code) in the United Kingdom
  • Apple App Store Kids Category requirements

2. Information We Collect

Information provided by the parent/guardian:

  • Child's age (2-6)
  • Child's gender (Boy/Girl)
  • Child's interests (selected from preset keywords)
  • Voice preference for story narration (Male/Female/Both)
  • Playback timer duration

Automatically generated information:

  • A randomly generated device identifier (UUID) — used solely to associate stories with a device for data deletion purposes
  • Generated story text and audio files — stored temporarily on our servers

3. Information We DO NOT Collect

  • Name, real name, or nickname of the child or parent
  • Email address or phone number
  • Physical address or precise location
  • Photos, videos, or voice recordings of the child
  • Browsing history or app usage analytics
  • Device advertising identifier (IDFA)
  • Any information from the device's contacts, calendar, or other apps

4. How We Use Information

All information collected is used for one purpose only: to generate personalized bedtime stories and convert them to audio narration.

Specifically:

  • Age, gender, interests, and voice preference are sent to our AI story generation service (DeepSeek) to create a personalized story
  • The generated story text is sent to Azure Text-to-Speech to convert into audio narration
  • Story audio files are stored on Cloudflare R2 for playback
  • The device identifier is used to enable the "Delete My Data" feature

We do NOT use any information for advertising, marketing, profiling, or automated decision-making.

5. Third-Party Services

We use the following third-party services to operate the App. Each processes data solely as instructed by us:

DeepSeek (AI Story Generation)

  • Receives: age, gender, interest keywords
  • Purpose: generate personalized story text
  • Data is NOT used to train DeepSeek's models

Azure Cognitive Services (Text-to-Speech)

  • Receives: generated story text
  • Purpose: convert text to spoken audio narration
  • Audio files are returned to our servers for playback

Cloudflare R2 (Audio Storage)

  • Receives: audio narration files
  • Purpose: store audio for playback in the App
  • Files are encrypted at rest and in transit

Railway (App Hosting)

  • Hosts the backend API and database
  • Story metadata and audio URLs are stored in a database

6. Data Retention

Audio files that have not been marked as a favorite are automatically deleted after 24 hours. Story records in our database are retained until the parent/guardian requests deletion via the "Delete My Data" feature in the App's Profile settings.

Information stored locally on the device (age, gender, interests, voice preference, playback duration) remains on the device and is not transmitted to our servers except during story generation requests.

7. Parental Rights

Under COPPA, GDPR, and UK AADC, parents and guardians have the right to:

  • Review the personal information we hold about their child
  • Request deletion of their child's personal information at any time
  • Withdraw consent for further collection or use of their child's information
  • Refuse to allow any further collection or use of their child's information

To exercise any of these rights, use the "Delete My Data" button in the App's Profile settings, or contact us at the email address provided in Section 11.

GDPR data subject rights (Articles 15-22) — including the right to access, rectification, erasure, restriction of processing, data portability, and objection — are fully supported for users in the EU and UK.

8. No Advertising & No Tracking

StoryRadio does not display advertisements of any kind. We do not use analytics SDKs, tracking pixels, or behavioral profiling. We do not share, sell, or rent any user data to third parties. The App contains no external links, social media integrations, or in-app purchases.

9. Parental Consent

The App is intended to be set up by a parent or legal guardian. By entering the child's information in the Profile settings, the parent/guardian confirms they have the authority to provide consent for the limited data processing described in this policy.

Under GDPR Article 8, the age of digital consent varies by EU member state (typically 13-16 years). Since StoryRadio is designed for children aged 2-6 and requires parent/guardian setup, the parent/guardian provides consent on behalf of the child.

10. Security

We implement appropriate technical and organizational measures to protect children's data, including:

  • Encryption of all data in transit (HTTPS/TLS)
  • Encryption of audio files at rest (Cloudflare R2 server-side encryption)
  • Minimal data collection — we only store what is strictly necessary to provide the service
  • Automatic deletion of un-favorited audio after 24 hours
  • Immediate data deletion upon parent/guardian request

11. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data rights, or have concerns about your child's privacy, please contact us at:

[email protected]

12. Changes to This Policy

We will notify users of any material changes to this Privacy Policy by updating the policy text within the App. The latest version will always be available in the App's Profile settings.