We are committed to protecting your privacy and the safety of children using MagicalStory. This policy explains how we collect, use, and protect your information.
When you create an account or use MagicalStory, we may collect personal information including your name, email address, and profile information. For children's accounts, we collect minimal information necessary to provide our service.
We collect the stories you create, including character names, themes, and preferences you select. This data is used to personalize your storytelling experience and improve our AI algorithms.
We automatically collect information about how you use our app, including features accessed, time spent reading, and interaction patterns to improve our service quality.
We collect device identifiers, operating system information, and app version data to ensure compatibility and provide technical support.
We use your information to create personalized stories, maintain your account, process payments, and provide customer support.
Story data helps train our AI models to create better, more engaging content while maintaining strict privacy protections and anonymization.
We may send you service updates, safety notifications, and optional promotional content (which you can opt out of at any time).
We monitor for inappropriate content and protect against fraud, abuse, and security threats to maintain a safe environment for children.
MagicalStory is designed for children under 13 with parental supervision. We require verifiable parental consent before collecting any personal information from children.
For children's accounts, we collect only the minimum information necessary: first name, age range, and story preferences. We do not collect last names, addresses, or contact information from children.
Parents can review, modify, or delete their child's information at any time. Parents can also disable certain features or request account deletion through our support team.
We do not use children's personal information for behavioral advertising or marketing purposes. Any ads shown are contextual and age-appropriate.
We share data with trusted third-party service providers (cloud hosting, payment processing, analytics) who are contractually bound to protect your information and use it only for specified purposes.
We may disclose information when required by law, to protect our rights, or to ensure user safety. This includes cooperation with law enforcement when legally mandated.
In the event of a merger, acquisition, or sale of assets, user information may be transferred as part of the business transaction, subject to the same privacy protections.
We may share information in other circumstances with your explicit consent or at your direction (such as when you choose to share stories publicly).
All data is encrypted in transit using industry-standard TLS protocols and encrypted at rest using AES-256 encryption to protect against unauthorized access.
We implement strict access controls, ensuring only authorized personnel can access user data, and all access is logged and monitored.
Our security practices undergo regular third-party audits and penetration testing to identify and address potential vulnerabilities.
We have comprehensive incident response procedures and will notify affected users and authorities as required by law in case of any data breach.
You can request a copy of your personal information and stories in a portable format. Contact our support team to request your data export.
You can update your profile information and story preferences directly in the app settings or by contacting our support team.
You can request deletion of your account and associated data at any time. Some information may be retained for legal compliance or legitimate business purposes.
You can opt out of promotional communications while still receiving essential service notifications. Manage your preferences in the app settings.
We retain account information for as long as your account is active or as needed to provide services. Inactive accounts may be deleted after 3 years of inactivity.
Stories and related content are retained while your account is active. Deleted stories are permanently removed within 30 days unless required for legal compliance.
Aggregated, anonymized usage data may be retained indefinitely for product improvement and research purposes, with all personal identifiers removed.
Some data may be retained longer if required by law, for fraud prevention, or to resolve disputes, but will be subject to the same privacy protections.
If you have any questions about this Privacy Policy or how we handle your information, please don't hesitate to contact us.