Privacy Policy

Last updated: January 2026

1. Introduction

My Story Magic ("we", "our", "us") is committed to protecting your privacy and the privacy of your children. This policy explains how we collect, use, and protect your personal information in compliance with Australian Privacy Principles.

2. Information We Collect

Account Information

  • Email address (for account creation and communication)
  • Authentication data (via Google Sign-In)

Child Profile Information

  • Child's first name (used in story generation)
  • Child's age (to create age-appropriate content)
  • Child's interests (to personalise stories)

Note: We only collect first names, never full names, addresses, or other identifying information about children.

Voice Data

  • Voice recordings (for Premium voice cloning feature)
  • Voice clone data (processed and stored securely)

Usage Data

  • Stories generated and saved
  • Feature usage and preferences
  • App performance and error data

3. How We Use Your Information

  • To generate personalised bedtime stories
  • To create and maintain voice clones (Premium)
  • To manage your subscription and account
  • To improve our AI and services
  • To communicate important updates
  • To ensure content safety and compliance

4. Data Storage and Security

Your data is stored securely using industry-standard encryption and security practices:

  • Data is encrypted in transit (HTTPS/TLS)
  • Database hosted on secure cloud infrastructure (Supabase)
  • Voice data processed by secure third-party providers (ElevenLabs, Google)
  • Regular security audits and updates

5. Third-Party Services

We use the following third-party services to provide our features:

  • Google - Authentication and text-to-speech
  • Anthropic - AI story generation
  • ElevenLabs - Voice cloning technology
  • Supabase - Database and authentication
  • Vercel - App hosting

Each provider has their own privacy policy and data handling practices. We only share the minimum data necessary to provide the service.

6. Children's Privacy

We take children's privacy seriously:

  • We do not collect data directly from children
  • All child profiles are created and managed by parents/guardians
  • We only store first names and age-appropriate interests
  • Generated stories are not shared publicly
  • We do not use children's data for advertising

7. Your Rights

Under Australian Privacy Principles, you have the right to:

  • Access - Request a copy of your personal data
  • Correction - Update or correct inaccurate data
  • Deletion - Delete your account and all associated data
  • Portability - Export your stories and data
  • Complaint - Lodge a complaint with the OAIC if unsatisfied

You can exercise these rights through the Settings page in the app, or by contacting us directly.

8. Data Retention

We retain your data for as long as your account is active. When you delete your account:

  • All personal data is deleted within 30 days
  • Voice clones are permanently deleted
  • Generated stories are removed
  • Some anonymised usage data may be retained for analytics

9. Cookies and Tracking

We use essential cookies for authentication and app functionality. We do not use advertising cookies or third-party tracking for marketing purposes.

10. International Data

While we are based in Australia, some data processing occurs on servers in other countries (e.g., USA for cloud services). We ensure all providers meet adequate data protection standards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

For privacy-related questions or to exercise your rights, please contact us through the app's support feature.

You may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au