Privacy Policy
Effective August 20, 2026
The short version
Story Made is built for families with young children, so we collect as close to nothing as possible. There are no accounts, no advertising, no third-party analytics, and no social features. Story Made is operated by CyberWave Technologies LLC (Sacramento, CA, USA), which is the data controller for the little that is processed.
What stays on your device
Family character names and appearance choices, reading progress, stars, story choices, voice recordings and cached artwork/narration are stored only in your browser or app on your device. We never keep them on a server. First names and the character looks you build (including any likeness note) are sent transiently to our AI providers only at the moment a picture or narration is created — see the next section. Deleting the app (or using “Reset the app” in the grown-ups area) removes everything stored here.
What is sent when pages are generated
When a story page's picture is created, we send a short description of what happens on that page — not the story text itself — along with the character descriptions you built (first names, the looks you chose such as hair, skin tone, age and girl/boy, and any likeness note). When narration is created, we send the line being read and the lines either side of it, so the voice knows where it is in the story; that line may include the first names you typed. These go to our server and to our AI providers (OpenAI for pictures and portraits, ElevenLabs for narration) solely to create that picture or audio. Our server runs on Vercel (which processes your device's IP address transiently to route the request and to rate-limit abuse) and the generated picture or audio is cached on Railway (a database host) keyed only by a fingerprint of the page content, so the same page never has to be generated twice. We do not build profiles and we do not record who requested what.
Starting a character from a photo
If you choose “Start from a photo,” the photo is shrunk on your device and analyzed once by our AI provider (OpenAI), only to suggest cartoon traits (like hair style and eye color). Story Made never stores the photo and never uses it to generate artwork; OpenAI does not use it for training and automatically deletes it from its systems within 30 days (kept only briefly for abuse monitoring). This option sits behind the grown-ups check. Along with the trait options, the analysis suggests a short written likeness note (for example “warm chestnut hair that curls at the ends”), which you can edit or clear in the studio; portraits and scenes are painted from those traits and that note — never from the photo itself.
Family voice recordings
The “Read it in your voice” studio (behind the parental gate) uses your microphone only while you are recording a line. Recordings are stored on this device only, are never uploaded to us or to any AI provider, and can be deleted line by line in the studio or all at once with “Reset the app.”
How long we keep things (our data-retention policy)
This section is our written data-retention policy. Your family's characters, names, choices, and any voice recordings live only on your device and stay until you delete them or reset the app — we never hold them, so there is nothing for us to retain. Photos used for the optional photo-start are kept for zero time by us (never stored; see above) and are deleted by OpenAI within 30 days. The generated pictures and narration in our shared cache exist solely so the same page never has to be generated twice; they are keyed by a fingerprint of the page content (never by you, your device, or any account) and are automatically purged after twelve months. Transient server logs used for security and rate-limiting are kept only briefly by our hosts. We retain nothing else, for no other purpose, and we never retain personal information indefinitely.
Children's privacy (COPPA)
We do not knowingly collect personal information from children. The app requires no registration, collects no contact details, and shows no ads. Settings, the photo option, the recording studio, and outbound web links all sit behind a parental gate; purchases are handled by Apple's own purchase confirmation (including Ask to Buy). Our service providers are OpenAI (illustration and photo-trait analysis), ElevenLabs (narration), Vercel (hosting), and Railway (the anonymous media cache). You may email us to ask what a device holds or to have it cleared; because there are no accounts, the shared cache cannot be tied to or retrieved for a specific family.
Your privacy rights
Depending on where you live (for example the EU/UK under the GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, or receive a copy of personal data. Because everything personal lives on your own device, most requests are satisfied by “Reset the app” — but you can always email us and we will respond within 30 days. We do not sell or share personal information as those terms are defined in the CCPA, and we do not use it for targeted advertising.
Contact
CyberWave Technologies LLC · Email info@cyberwaveglobal.com.