Privacy Policy

AIStorinha ("we", "us", or "our") provides an AI-powered platform where parents and educators create personalized, illustrated stories for children. We take your privacy seriously, especially when it comes to children. This Privacy Policy describes our practices regarding the collection, use, and protection of personal information when you use our services.

Story Generation

Generation receives only the story briefing needed for the requested feature, such as the child's first name or nickname, age, language/locale, theme, style, reading preferences, sensitivities, and textual context you provide. CPF, phone, fiscal data, billing data, and contact data are not sent for story generation.

Personalization

We use your preferences to adapt story themes, vocabulary complexity, safety filters, and visual styles to your family's needs.

Platform Improvement

During beta, AIStorinha uses aggregated or anonymized usage, quality, reliability, and safety signals to improve the product. After beta, product improvement is limited to aggregated/anonymous metrics or specific consent. Identifiable account, child, story, fiscal, support, and billing data is used only for the requested feature, security, fraud prevention, support, billing, or legal obligations. AIStorinha does not train AI models on your personal data; what providers may do with data sent through the API, including the exception set out in their terms, is described in section 4.

All stories, illustrations, and audio content on AIStorinha are generated by artificial intelligence. We use AI providers configured for the product for text generation (story writing, editing, safety analysis), image generation (illustrations), narration, and voice transcription.

Background music and sound effects are served as static application assets. Saved narration uses the speech providers configured for the session; providers receive only the text needed for that feature, not account profile data.

AIStorinha is designed with children's privacy as a core principle:

Parent-only accounts

Only adults (18+) can create accounts. Children access stories exclusively through parent or educator accounts and never have their own credentials.

Minimal data collection

We collect the minimum child profile data needed to personalize and safeguard stories, such as first name, age, language, themes, sensitivities, and reading preferences. We do not ask for documents, contact details, precise location, school data, or unrelated identifiers for child profiles.

Audio processed in RAM only

When a family uses voice conversation, audio input is processed in memory to produce a safe transcript. Audio data must not be written to disk or stored on our servers.

PIN-protected Parental Gate

You can optionally enable the Parental Gate, protected by a numeric PIN, not a math puzzle. 5 wrong PINs in a row, on any profile, lock PIN verification for the whole account: while locked, every attempt gets the same refusal, with a wait time that grows with each new lockout (from 15 minutes up to 24 hours), and the responsible adult receives an email about it. Content safety remains active even when the gate is off, and child sensitivities are configured per profile.

Active account

Your data is retained while your account is active. You can modify or delete your data at any time from the Settings page.

Account deletion

When you request account deletion, it enters a 7-day reversible window; you can cancel the request at any time until that date, from the Settings page. After the window, an automated routine (running every 15 minutes) processes the final deletion without you having to do anything else. If the routine fails 5 times, the request is flagged to our team on every run until it is resolved. With the deletion, we remove direct account data such as stories, child profiles, the reference photo, and preferences. The files kept in storage (illustrations, narration, and the photo) are deleted right after, by the same routine; if an upload was interrupted midway, the cleanup can take up to about 24 hours longer. Minimal anonymized audit, fraud-prevention, or compliance records may remain when legally required.

Child's photo

Retained for 90 days from upload (default retention period, operationally configurable). At the end of that period, or earlier if you revoke consent, the photo immediately stops being used and can no longer be accessed, and an automated routine deletes the file, retrying if it fails. If the deletion keeps failing, it is recorded for our team to handle. It is also removed when the account deletion is processed.

Free-trial anti-abuse

When you request a free trial, we may ask for your CPF or another fiscal document together with your e-mail to enforce the one-free-trial rule and prevent abuse. Our trial identity table stores only keyed pseudonymous digests, not raw CPF or e-mail. We retain those keyed claims after account deletion when needed to keep enforcing the rule and to meet fraud-prevention or legal-compliance obligations.

AI interaction logs

Image-generation records, including the prompts sent to the AI, follow the story's lifecycle: they stay while the story exists and are removed when you delete the story or the account. Conversations with the creation assistant and live-session transcripts are deleted automatically 90 days after the conversation ends (or after it starts, if it never recorded an end). Cultural adaptation drafts are deleted 7 days after they expire. Cost and performance records (tokens, duration) have their link to your account and story removed when the account is deleted; the numbers themselves are kept, without identification, for internal metrics.

Audio data

Never persisted. Voice input is discarded after the transcript needed for the story is produced.

Data export (portability)

Export requests are processed automatically by a routine that runs every 15 minutes; the fulfillment deadline is up to 15 days. The generated file is available for download for 7 days and then expires.

Retention table by category

AIStorinha is governed primarily by Brazilian law and is designed to support LGPD rights. Where GDPR applies to your use, we also apply its relevant data-protection principles and rights. You have the following rights over your personal data:

• Access: View a summary of all data associated with your account
• Data Summary: View the account data summary currently available from the Settings page
• Deletion: Permanently delete your account and all associated data
• Rectification: Correct or update your personal information at any time
• Consent Records: Review the current status and record new acceptances from the Settings page
• Portability: Request a machine-readable export of your data (a ZIP file) from the Settings page; the request is fulfilled within up to 15 days and the file is available for download for 7 days
• Information about sharing: See which providers and service partners your data may be shared with in the "Third-Party Services" section of this policy
• Refusing to consent: You can refuse or revoke consent for AI processing at any time; since AIStorinha depends on that processing to generate stories, refusing or revoking it stops access to AI features until you consent again, or you can choose to delete your account
• Consent revocation: Revoke optional consents (marketing, analytics) or required ones at any time from the Settings page; revoking a required consent ends your current session until you consent again
• Petition to the ANPD: If we do not resolve your request, you can petition Brazil's National Data Protection Authority (anpd.gov.br)

We employ industry-standard security measures to safeguard your data:

• Encryption in transit: All data transmitted between your device and our servers is encrypted over HTTPS (TLS)
• Authentication: JWT-based authentication with secure, httpOnly cookies and regular token rotation
• PII redaction: Personal information is automatically redacted from application logs to prevent accidental exposure
• IP hashing: IP addresses are converted with a salted hash before storage; that makes them pseudonyms, not anonymous: they are personal data, correlatable internally to detect repeat actors, even though reversing them to the original IP is hard
• Audit log: Administrative actions and sensitive account events, such as deletion requests, are recorded in an audit log, kept as described in the retention table

We use third-party services to operate AIStorinha, including infrastructure, AI, transactional email, authentication, support, observability/analytics with consent when applicable, payments, and fiscal services when those features are enabled:

Google: Gemini API / Vertex AI

AI processing for story generation, illustration, narration, voice transcription, and safety analysis. Provider processing is limited to the data needed for the requested feature.

OpenAI

Secondary, controlled AI-processing provider, used as an alternate path to the default provider for text generation and, when enabled, other AI features. On stateless calls, we send requests with provider-side storage disabled (store=False).

SendGrid / Resend

Transactional email sub-processors for account verification, password reset, notifications, delivery-status webhooks, bounce/complaint handling, and suppression lists. They may process recipient email addresses, message metadata, delivery events, and suppression status only for sending and deliverability operations.

Crisp

Customer-support chat embedded in the app. Processes the messages exchanged with support and technical metadata of the chat session.

Google Cloud Platform

Infrastructure hosting, database services, and content delivery. Primary application runtime and database infrastructure is configured in Brazil where available, while some infrastructure, security, delivery, provider, or support services may process data in other regions under their applicable terms and safeguards.

Google Analytics

Aggregated usage metrics, loaded only after you grant consent in the cookie banner. We do not use ad personalization or Google ad signals.

Stripe

Payment processing and tax calculation when paid plans are active. Card data is entered directly in Stripe checkout and does not pass through our servers.

eNotas

Electronic fiscal invoice issuance when paid plans are active. It operates inside Stripe from the sale data and does not receive account profile data from our servers.

If you have questions about this privacy policy, want to exercise your data rights, or need to report a privacy concern, contact our privacy channel. AIStorinha has designated CVO Alliance as its LGPD Encarregado/Data Protection Officer contact for privacy and data-rights requests:

We may update this privacy policy from time to time. When we make significant changes, we will notify you via email and an in-app banner. Continued use of AIStorinha after changes take effect constitutes acceptance of the updated policy.