Privacy Policy

1. Introduction & scope

Storyboat is operated by Windward Stories (“we”, “us”), based in India. This policy covers the personal information we handle when you use the Storyboat website or mobile apps (the “Service”). You can contact us about privacy any time at hello@storyboat.app.

2. Accounts, adults & children

Storyboat’s stories are made for children, but Storyboat accounts are for adults. You must be 18 or older to create an account and to be the person we hold information about. We do not knowingly collect personal information from children. Children may enjoy stories under the supervision of the adult account holder, but we don’t ask children to create accounts or provide personal information.

If you believe a child has provided us personal information, email hello@storyboat.app and we will delete it.

3. Information we collect

We collect only what we need to provide and improve the Service:

• Account information. When you sign in with Google, or with Apple on iOS, we receive your email address and name from that account, and we create a Storyboat user record. We never receive your password. If you use Sign in with Apple and choose Hide My Email, we only ever see Apple’s private relay address, not your real one, and messages we send to it are forwarded by Apple. The Storyboat app does not ask you to sign in: when you start playing a story it creates an anonymous identifier with no name or email address, which is what your purchases and settings are linked to on that device. If you choose to sign in with Google or Apple in the app, that identifier becomes a Storyboat account with the email address the provider shares, so your purchases can follow you to your other devices and the web.
• Usage & analytics.We record a small set of named events about how the Service is used — for example when the library is viewed, a language is changed, a story is started, progresses, is completed or abandoned, and when a subscription flow is viewed, started, completed, or fails — along with your platform (web / iOS / Android) and basic device/app information. On the blog, we also record article views, activity-print requests, and clicks on related articles and story or signup links. A short-lived identifier links those clicks to account creation and story use in the same browser tab. We do not collect children's answers or your activity and sleep notes. We do not use click-level autocapture and we do not record sessions or replay your screen. Analytics events are linked to an account identifier only; we do not send your name or email address to our analytics provider.
• Subscription information. When you subscribe, our payment partners tell us your subscription status and which plan you have (your entitlement). We do not receive or store your full card number — that is handled by the app stores and our payment processor.
• Support & technical data. If you email us, we keep your message. We also keep standard technical logs needed to operate and secure the Service.

We do not collect audio, voice, photos, or contacts from you.

4. How we use information

• to create your account, sign you in, and provide the Service;
• to unlock the content your subscription entitles you to;
• to understand how the Service is used so we can improve it (product analytics);
• to provide support and respond to your requests;
• to keep the Service secure and prevent fraud and abuse;
• to comply with our legal obligations.

5. Legal bases (GDPR)

Where the EU/UK General Data Protection Regulation applies, we rely on these legal bases: performance of a contract (to provide the Service and your subscription); legitimate interests (to secure and improve the Service through analytics, balanced against your rights); consent (where required, which you can withdraw); and legal obligation (to meet legal and tax requirements).

6. Who we share with

We don’t sell your personal information. We share it only with service providers who help us run Storyboat, and only as needed for the purposes below. Each provider has its own privacy policy.

We also use AI providers (such as Google, OpenAI, xAI, and ElevenLabs) to create the stories themselves. That happens on our side using story prompts — it does not involve your personal information. We may also disclose information if required by law or to protect our rights, users, or the Service.

7. International transfers

We and our providers may process your information in countries other than where you live, including the United States and the European Union. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your information when it is transferred internationally.

8. Data retention

We keep your account information for as long as your account is active and as needed to provide the Service, then delete or anonymize it when it is no longer needed, unless we must keep it to meet legal obligations. You can ask us to delete your account and associated personal information at any time by emailing hello@storyboat.app.

9. Security

We use reasonable technical and organizational measures to protect your information — including encryption in transit, authenticated access with signed tokens, and private media storage served only through time-limited links. No method of transmission or storage is completely secure, but we work to protect your information and to respond promptly to any incident.

10. Your rights

Subject to your local law, you may have the right to access, correct, delete, or export your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any of these, email hello@storyboat.app. We’ll respond within the time your law requires. We won’t discriminate against you for exercising your rights.

11. Regional privacy rights

Europe (EEA) & United Kingdom

If you are in the EEA or UK, you have the rights described above under the GDPR, and you have the right to lodge a complaint with your local data-protection supervisory authority.

California

If you are a California resident, the CCPA/CPRA give you rights to know, access, correct, and delete your personal information, and to limit certain uses. We collect the categories described in section 3 (identifiers such as email and name, and usage/analytics information). We do not sell your personal information and do not share it for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights.

India

If you are in India, you have the rights of a Data Principal under the Digital Personal Data Protection Act, 2023, including the rights to access, correction, and erasure of your personal data and to withdraw consent. For any grievance, contact our grievance contact at hello@storyboat.app.

12. Cookies & similar tech

We use only the cookies and browser storage needed to keep you signed in and to run our first-party product analytics. We do not use advertising cookies or third-party ad trackers.

Blog referral information is stored in the current tab's session storage. It expires after 30 minutes without recorded activity and is cleared when you sign out.

13. Changes

We may update this Privacy Policy from time to time. We’ll update the “Last updated” date above and, for material changes, provide additional notice where appropriate.

14. Contact

For any privacy question or request, email hello@storyboat.app.