Skip to main content
Select language

Privacy Policy

Last updated: February 2026

AIStorinha is built for families. We take your privacy seriously, especially when it comes to children. This policy explains what data we collect, how we use it, and the rights you have.

Introduction

AIStorinha ("we", "us", or "our") provides an AI-powered platform where parents and educators create personalized, illustrated stories for children. We take your privacy seriously, especially when it comes to children. This Privacy Policy describes our practices regarding the collection, use, and protection of personal information when you use our services.

Data We Collect

Account Information

  • Email address and display name (from registration or Google sign-in)
  • Authentication tokens stored in secure, httpOnly cookies
  • Account preferences and language settings

Children's Profiles

  • Child's first name and age (minimum required for personalization)
  • Preferred themes, sensitivities, and language settings
  • Reading history and story preferences

Story Content

  • Story metadata (title, theme, visual style, creation date)
  • Story text content and AI-generated illustrations
  • Export history and format preferences

Usage Analytics

  • Agent execution traces (model used, tokens consumed, duration)
  • Anonymized usage patterns for platform improvement
  • No personally identifiable information is stored in analytics logs

How We Use Your Data

Story Generation

Your child's name, age, and preferences are used to create unique, age-appropriate stories tailored specifically for them.

Personalization

We use your preferences to adapt story themes, vocabulary complexity, safety filters, and visual styles to your family's needs.

Platform Improvement

Anonymized usage data helps us refine our 9 specialized AI agents to produce better stories, illustrations, and safety checks. Your personal data is never used for model training.

AI Processing Disclosure

All stories, illustrations, and audio content on AIStorinha are generated by artificial intelligence. We use Google Gemini AI models for text generation (story writing, editing, safety analysis) and image generation (illustrations).

API data is NOT used for model training

Google's API terms explicitly state that data sent through the paid Gemini API is not used to train their models. Your stories and your children's information remain private.

Audio assets (background music and sound effects) are pre-generated using ElevenLabs and served as static files. No real-time audio generation involves your personal data.

Children's Data Protection

AIStorinha is designed with children's privacy as a core principle:

  • Parent-only accounts -- Only adults (18+) can create accounts. Children access stories exclusively through parent or educator accounts and never have their own credentials.
  • Minimal data collection -- We only collect a child's first name and age -- the minimum required to personalize stories with appropriate vocabulary and themes.
  • Audio processed in RAM only -- During Live Story Mode, voice input is processed entirely in memory. Audio data is never written to disk or stored on our servers.
  • PIN-protected parental controls -- Safety settings are behind a parental gate (math puzzle) to prevent children from changing content filters.

Data Retention

Active account

Your data is retained while your account is active. You can modify or delete your data at any time from the Settings page.

Account deletion

When you request account deletion, all personal data -- including stories, child profiles, and preferences -- is permanently removed within 30 days.

AI interaction logs

Anonymized after 90 days. After anonymization, logs cannot be traced back to any individual user or child.

Audio data

Never persisted. Voice input from Live Story Mode is processed in real-time and discarded immediately after transcription.

Your Rights (LGPD/GDPR)

Under the LGPD (Lei Geral de Protecao de Dados) and GDPR, you have the following rights over your personal data:

Access

View a summary of all data associated with your account

Export / Portability

Download your data in a machine-readable format

Deletion

Permanently delete your account and all associated data

Rectification

Correct or update your personal information at any time

Consent Management

Update your consent preferences from the Settings page at any time

How We Protect Your Data

We employ industry-standard security measures to safeguard your data:

  • Encryption in transit -- All data transmitted between your device and our servers is encrypted using TLS 1.3
  • Authentication -- JWT-based authentication with secure, httpOnly cookies and regular token rotation
  • PII redaction -- Personal information is automatically redacted from application logs to prevent accidental exposure
  • IP hashing -- IP addresses are hashed before storage, making them irreversible and anonymous
  • Audit trail -- All administrative actions and data access events are logged in an immutable audit trail

Third-Party Services

We use the following third-party services to operate AIStorinha:

Google Gemini API

AI processing for story generation, illustration, and safety analysis. Data is not used for model training.

SendGrid

Transactional email delivery (account verification, password reset, notifications).

Google Cloud Platform

Infrastructure hosting, database services, and content delivery.

Contact & Data Protection Officer

If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, contact our Data Protection Officer:

privacy@aistorinha.app

Changes to This Policy

We may update this privacy policy from time to time. When we make significant changes, we will notify you via email and an in-app banner. Continued use of AIStorinha after changes take effect constitutes acceptance of the updated policy.