Privacy Policy for Little Story Wand

1. Who We Are

Little Story Wand is a digital storytelling platform designed for families and children. Our website allows parents and children to create unique, AI-generated stories together.

2. What Data We Collect

We collect the following data to provide and improve our service:

Information You Provide:

• Email address (when creating an account)
• Name (optional)
• User preferences (such as narrator voice settings)
• Story content and prompts

Automatically Collected:

• IP address and browser type (for security and analytics)
• Authentication data (managed by Clerk)
• Usage data and preferences
• Credit transaction history

3. Use of Data

We use the data we collect to:

• Provide and maintain your account
• Manage credit purchases and usage
• Store and display your stories
• Process payments and manage credits
• Improve our AI storytelling engine
• Communicate service updates or issues
• Comply with legal obligations

We do not sell or share your data with third parties for marketing purposes.

4. Children's Privacy

Little Story Wand is designed for use by parents with their children. Children may interact with the platform under adult supervision, but accounts must be created and managed by a parent or guardian.

We do not knowingly collect, store, or process personal information from children under 13 without verifiable parental consent, in accordance with COPPA and UK GDPR (Children's Code).

5. AI-Generated Content

Story prompts and responses are processed using artificial intelligence. While content is designed to be child-friendly, we encourage parents to review stories before sharing with children and can regenerate a new story if anything is deemed inappropriate.

Stories are stored securely to allow access and improvement of our service.

6. Authentication & Security

We use Clerk for secure authentication and session management. This includes:

• Secure user authentication
• Session management
• Account protection

Your authentication data is managed by Clerk and protected by industry-standard security measures.

7. Data Retention

We retain your account and story data as long as your account remains active. You may delete your account at any time, which will permanently remove all associated stories and credits. Credit transaction records are kept for legal and accounting purposes.

8. Your Rights

As a user, you have the right to:

• Access the data we hold about you by contacting us via the email provided in this policy
• Correct or update your profile information in Settings
• Delete your account and associated data in Settings
• Withdraw consent to data processing by contacting us via the email provided in this policy
• Export your stories and data

To make a request, contact us at: [email protected]

9. Data Security

We use industry-standard encryption and secure servers to protect your data. Our security measures include:

• Secure authentication through Clerk
• Encrypted data transmission
• Secure payment processing through Stripe
• Regular security audits and updates

However, no online system can be 100% secure, and you use the service at your own risk.

10. Third Parties

We use trusted third-party services for:

• Authentication (Clerk)
• Payment processing (Stripe)
• Analytics (Google Analytics)
• Hosting (AWS, Vercel)
• Image generation and storage (AWS S3, CloudFront)
• AI services for story generation

These providers process your data only on our behalf and according to this policy. Each service has its own privacy policy and security measures in place.

11. Changes to This Policy

We may update this Privacy Policy occasionally. If we make significant changes, we will notify you via email.

12. Contact

If you have any questions or concerns about this policy or your data, please contact us: [email protected]