Privacy policy
Updated 2026-07-18
Storybloom is controlled by an adult account. Guest requests are not added to an account library; signed-in family data is stored only for the requested story, continuity, safety, and account functions.
Data and purpose
We process the adult account email; child name, age, interests, pronouns and profile preferences; private stories, companions, continuity memories and co-reading records; and operational data needed for quotas, security, audio and support.
Consent evidence
Saving a child profile requires parent or guardian consent and adult confirmation. We record the policy version, source and confirmation time.
AI and service providers
Story text may be sent to OpenAI for generation or narration. Resend handles adult service email; Google Identity is optional for adult login. We do not use child-targeted advertising.
Retention
Account content is retained while the account is active and reviewed after 24 months of inactivity. OTP records expire plus 24 hours, TTS cache expires after 48 hours, operational logs target 14–30 days, and database backups are retained for 30 days.
Public sharing
Stories are private by default. Only administrator-approved stories can enter the public library, after anonymization plus locale and quality checks.
Your controls
Signed-in adults can export account data, delete stories or child profiles, and permanently delete the account. Deleted primary data ages out of backups within the backup retention period.
Safety reports
Members can report unsafe, age-inappropriate, personal-data or copyright concerns. Our initial review target is two business days.
Privacy and support contact: login@trystorybloom.com