🌙

Privacy Policy

Last updated: 18 July 2026

StoryLink ("we", "us") is operated from Queensland, Australia. This policy explains what information the StoryLink app collects, why, and the choices you have. We built StoryLink for families, so we collect as little as possible and we never sell data or show advertising.

Information we collect

• Parent accounts: email address, password (stored by Google Firebase Authentication — we never see it), and a display name.
• Child profiles: a first name or nickname, a chosen cartoon avatar, and a 4-digit PIN (stored only as a secure hash). Children do not have email addresses or passwords, and we intentionally collect no other information about them.
• Story content you create: descriptions you type when creating an AI story (e.g. a family memory), and the resulting story text and illustrations, stored privately for your family.
• Voice recordings: if a parent records themselves reading a book, that audio is stored privately for their own family's playback. Live story-time calls are not recorded.
• Reading activity: which books were read in story-time sessions and when, to show your family's own dashboard.
• Device push tokens: so the child's device can ring when you start Story Time.
• Diagnostics: minimal, de-identified error reports (an error code and screen name — never message contents or audio).

How story-time calls work

Live audio/video during Story Time is carried by Agora's real-time network, end-to-end encrypted in transit and not stored by us. Call quality metadata may be processed by Agora to operate the service.

How AI stories work

When you create an AI story, the description you write (and your child's first name, if you include it) is sent to Anthropic (text) and OpenAI (illustrations and safety checks) to generate the book. These providers process the request to provide the service. Every generated story passes an automated safety check before your child can see it.

Where data lives

Your family's data is stored in Google Firebase (Cloud Firestore, Storage and Realtime Database). Access is locked to your own family by security rules: no other family can read your books, recordings or activity.

Children's privacy

Child profiles can only be created by a parent using their family's invite code. We collect no contact details from children, show no ads, include no third-party tracking, and children cannot make purchases. A child's data is only ever visible to their own family, and a parent can remove a child profile (or the whole account) at any time.

Your choices

• Delete a recording or AI story: contact us and we'll remove it, or re-record over it in the app.
• Remove a child profile: Family screen → Remove.
• Delete your whole account and family data: see Delete account — available in-app or by email.

Retention

We keep your family's content while your account exists. When you delete your account, your family's profiles, books, recordings, reading history and push tokens are deleted from our systems within 30 days.

Contact

Questions or requests: support@story-link.com.au. We handle personal information in accordance with the Australian Privacy Principles (Privacy Act 1988, Cth).