Last updated: February 2026
AIStorinha is built for families. We take your privacy seriously, especially when it comes to children. This policy explains what data we collect, how we use it, and the rights you have.
Introduction
AIStorinha ("we", "us", or "our") provides an AI-powered platform where parents and educators create personalized, illustrated stories for children. We take your privacy seriously, especially when it comes to children. This Privacy Policy describes our practices regarding the collection, use, and protection of personal information when you use our services.
Data We Collect
Account Information
- Email address and display name (from registration or Google sign-in)
- Authentication tokens stored in secure, httpOnly cookies
- Account preferences and language settings
Children's Profiles
- Child's first name and age (minimum required for personalization)
- Preferred themes, sensitivities, and language settings
- Reading history and story preferences
Story Content
- Story metadata (title, theme, visual style, creation date)
- Story text content and AI-generated illustrations
- Export history and format preferences
Usage Analytics
- Agent execution traces (model used, tokens consumed, duration)
- Anonymized usage patterns for platform improvement
- No personally identifiable information is stored in analytics logs
How We Use Your Data
Story Generation
Generation receives only the story briefing needed for the requested feature, such as the child's first name or nickname, age, language/locale, theme, style, reading preferences, sensitivities, and textual context you provide. CPF, phone, fiscal data, billing data, and contact data are not sent for story generation.
Personalization
We use your preferences to adapt story themes, vocabulary complexity, safety filters, and visual styles to your family's needs.
Platform Improvement
During beta, AIStorinha uses aggregated or anonymized usage, quality, reliability, and safety signals to improve the product. After beta, product improvement is limited to aggregated/anonymous metrics or specific consent. Identifiable account, child, story, fiscal, support, and billing data is used only for the requested feature, security, fraud prevention, support, billing, or legal obligations. Your personal data is not used to train provider foundation models.
AI Processing Disclosure
All stories, illustrations, and audio content on AIStorinha are generated by artificial intelligence. We use approved AI providers for text generation (story writing, editing, safety analysis), image generation (illustrations), narration, and voice transcription.
API data is NOT used for model training
AIStorinha uses paid provider API paths configured for the service. Under those paid API service terms, submitted API content is not used to train provider foundation models unless the account explicitly opts in or gives permission. Providers may process and retain request data for abuse prevention, security, legal compliance, or service operation according to their applicable terms and configured controls. We minimize prompts and files to what is needed for the requested feature and use zero-data-retention or request-response-logging-disabled controls where they are contractually available and configured; we do not promise zero retention for every provider or endpoint.
Background music and sound effects are served as static application assets. Saved narration uses the approved speech-provider stack configured for the session; providers receive only the text needed for that feature, not account profile data.
Children's Data Protection
AIStorinha is designed with children's privacy as a core principle:
- Parent-only accounts -- Only adults (18+) can create accounts. Children access stories exclusively through parent or educator accounts and never have their own credentials.
- Minimal data collection -- We collect the minimum child profile data needed to personalize and safeguard stories, such as first name, age, language, themes, sensitivities, and reading preferences. We do not ask for documents, contact details, precise location, school data, or unrelated identifiers for child profiles.
- Audio processed in RAM only -- When a family uses voice conversation, audio input is processed in memory to produce a safe transcript. Audio data must not be written to disk or stored on our servers.
- Parental Gate with math challenge -- You can optionally enable the Parental Gate (math puzzle) before sensitive settings. Content safety remains active even when the gate is off, and child sensitivities are configured per profile.
Data Retention
Active account
Your data is retained while your account is active. You can modify or delete your data at any time from the Settings page.
Account deletion
When you request account deletion, the production product schedules a reversible safety window before final removal. After that window or when hard deletion runs, we remove direct account data such as stories, child profiles, and preferences. Minimal anonymized audit, fraud-prevention, or compliance records may remain when legally required.
AI interaction logs
Anonymized after 90 days. After anonymization, logs cannot be traced back to any individual user or child.
Audio data
Never persisted. Voice input is discarded after the transcript needed for the story is produced.
Your Rights (LGPD/GDPR)
AIStorinha is governed primarily by Brazilian law and is designed to support LGPD rights. Where GDPR applies to your use, we also apply its relevant data-protection principles and rights. You have the following rights over your personal data:
Access
View a summary of all data associated with your account
Data Summary
View the account data summary currently available from the Settings page
Deletion
Permanently delete your account and all associated data
Rectification
Correct or update your personal information at any time
Consent Records
Review the current status and record new acceptances from the Settings page
How We Protect Your Data
We employ industry-standard security measures to safeguard your data:
- Encryption in transit -- All data transmitted between your device and our servers is encrypted using TLS 1.3
- Authentication -- JWT-based authentication with secure, httpOnly cookies and regular token rotation
- PII redaction -- Personal information is automatically redacted from application logs to prevent accidental exposure
- IP hashing -- IP addresses are hashed before storage, making them irreversible and anonymous
- Audit trail -- All administrative actions and data access events are logged in an immutable audit trail
Third-Party Services
We use third-party services to operate AIStorinha, including infrastructure, AI, transactional email, authentication, support, observability/analytics with consent when applicable, payments, and fiscal services when those features are enabled:
Approved AI providers
AI processing for story generation, illustration, narration, voice transcription, and safety analysis. Provider processing is limited to the data needed for the requested feature.
SendGrid / Resend
Transactional email sub-processors for account verification, password reset, notifications, delivery-status webhooks, bounce/complaint handling, and suppression lists. They may process recipient email addresses, message metadata, delivery events, and suppression status only for sending and deliverability operations.
Google Cloud Platform
Infrastructure hosting, database services, and content delivery. Primary application runtime and database infrastructure is configured in Brazil where available, while some infrastructure, security, delivery, provider, or support services may process data in other regions under their applicable terms and safeguards.
Privacy Contact
If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, contact our privacy channel. AIStorinha has designated CVO Alliance as its LGPD Encarregado/Data Protection Officer contact for privacy and data-rights requests:
cvoalliance@cvoalliance.com.brChanges to This Policy
We may update this privacy policy from time to time. When we make significant changes, we will notify you via email and an in-app banner. Continued use of AIStorinha after changes take effect constitutes acceptance of the updated policy.