Privacy Policy

1. Who we are designed for

My Genie Stories is designed for parents and caregivers (adults 18+), not for direct use by children. Accounts are created and controlled by adults. Any information about a child is provided by the adult account holder, who is responsible for that information. We do not knowingly collect personal information directly from children under 13. If you believe a child has created an account without a parent's involvement, please contact us and we will promptly delete it.

2. Information we collect

• Account information: your name, email address, and password (stored as a secure hash — we never store your plain-text password).
• Character profiles you create: a child’s first name or nickname, age, gender, appearance description, personality traits, and favorite toy. Text descriptions only — no photographs of children are collected or stored.
• Story content: the stories and illustrations you generate and the inputs you provide to create them.
• Billing information: your plan and payment status. Card details are handled by Stripe and are not stored on our servers.
• Usage and device data: pages visited, features used, device type, browser, IP address, and analytics needed to operate and secure the Service.
• Legal acceptance records: the date, time, and version of Terms you agreed to when creating your account.

3. How we use information

• To generate your personalized stories and illustrations and keep them in your library.
• To operate, secure, and improve the Service, including troubleshooting and preventing abuse.
• To process payments, manage your plan, and grant your wishes.
• To communicate with you about your account, security, and important service updates.
• To improve our AI models using generated story outputs (not child profile descriptions — see Section 4).

4. Children\u2019s information (COPPA)

Profile details about your child are used only to personalize the stories you create. We do not use a child's profile information for AI training, targeted advertising, or any purpose other than generating your stories. We do not sell children's information. You can view, edit, or delete child profiles at any time from your account settings.

As a parent or guardian, you have the right to review the information we hold about your child, request its deletion, and refuse further collection by deleting the profile or closing your account. To exercise these rights, contact us at privacy@mygeniestories.com.

5. AI training and generated content

Generated story text and illustrations may be used to train, evaluate, and improve our AI systems. This helps us make better stories for every family. We do not use child profile descriptions (name, appearance, personality) for AI training — only the generated story output, stripped of personally identifying information. This is covered in more detail in our Terms of Use.

6. Service providers we work with

We share information with trusted providers who help us run the Service. Each is bound by agreements limiting their use of your data:

• Supabase — database, authentication, and file storage.
• Vercel — web hosting and infrastructure.
• Anthropic — AI story text generation (receives story prompts and character descriptions).
• fal.ai — AI illustration generation (receives text descriptions of characters and scenes).
• Stripe — payment processing.
• Resend — transactional email.
• Twilio — SMS notifications (only if you opt in).
• Upstash — rate limiting (receives IP address only).
• Vercel — application runtime logging and error monitoring.

We do not sell your personal information. We do not allow providers to use your content to train their own models beyond what is necessary to provide the Service to you.

7. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. When you delete a profile, story, or your account, we remove the associated content, subject to a short period for backups. Payment records and legal acceptance logs are retained for up to 7 years as required by law.

8. Security

We use technical and organizational measures to protect your information, including encryption in transit (HTTPS), encryption at rest, and row-level access controls on our database. No system is perfectly secure, but we work to protect your family's data and to notify you of significant incidents where required by law.

9. Your choices and rights

• Access, update, or delete your account and profiles from your account settings.
• Manage or cancel your subscription from your billing settings.
• Opt out of non-essential emails using the unsubscribe link or by contacting us.
• Request complete deletion of your account and all associated data by emailing us. We will process requests within 30 days.
• California residents: you have the right to know what personal information we collect, request deletion, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@mygeniestories.com.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date above and, for material changes, notify you and ask you to re-accept before continuing to use the Service.

11. Contact us

Questions about your privacy or this policy? Contact us at privacy@mygeniestories.com.