Andraly Stories Privacy Policy

Who can create an account

Andraly Stories is a service for parents and legal guardians of children. By creating an account, you confirm that you are at least 18 years old and that you are creating the account as the parent or legal guardian of the child or children who will use it. The account holder is you — the parent — not the child.

Child profiles created inside your account are personalization preferences (name, reading age, voice, story themes) set by you. They are not separate accounts and are not directly accessible to the child without your account credentials.

Information we collect

We collect the parent/guardian's email address (used as the account login) when you sign up. If you sign up with “Sign in with Apple” and use Apple's Hide My Email, we receive an Apple relay address instead of your real one, and that relay address becomes your account login. Inside your account, you may provide:

• The child's first name (used to personalize stories)
• The child's reading age range (used to tune story difficulty)
• The child's gender, if you set one (used only to choose pronouns when your child appears in a story)
• Story preferences you set (voice, themes, narration speed)
• Sight-word lists you create or scan for the child

Information about children (COPPA)

Because Andraly Stories is intended to be operated by parents on behalf of their children, we collect the information above that may relate to a child only when you, the parent, provide it inside your account.

We do not collect: the child's email, phone number, contact information, geolocation, behavioral advertising identifiers, or persistent identifiers tied to the child.

We never ask for a photograph of your child, and we do not store one. The only camera feature in the app is the sight-word scan described below, which is meant for a page of words rather than a person.

Scanned photos. When you scan a sight-word list with the camera, the photo is sent to our server and on to OpenAI, which reads the words on the page and returns them as text. The photo itself is not saved — only the extracted word list is kept in your account. Please scan the word list itself and avoid capturing anything else in the frame.

Generated story content is stored under your account and is not shared with third parties for advertising or analytics purposes.

Third parties we share with

We use a small number of service providers to operate the app. Each receives only what it needs to perform its function:

• Auth0 (Okta) — authentication (parent email + password).
• Apple — if you choose “Sign in with Apple,” Apple authenticates you and passes us your email address (or a relay address, if you use Hide My Email). Apple is only involved if you choose that sign-in method.
• OpenAI — generates story text from the prompts you provide, and reads photos you scan of sight-word lists in order to extract the words on the page. Beyond the child's first name (sent only when “include child in story” is enabled) and the contents of a page you choose to scan, no personal information is sent.
• AWS Polly — text-to-speech narration. Receives generated story text only.
• Runware — illustration generation. Receives generated prompt text only.
• RevenueCat — in-app purchase reconciliation. Receives your account identifier and Apple/Google transaction IDs.

We do not sell your personal information, and we do not use any data for advertising or cross-app tracking.

Your rights as the parent

You can at any time:

• Review, edit, or delete any child profile inside the app (Profile tab → select profile → Edit / Delete).
• Delete your entire account and all child profiles and stories (Profile tab → Delete account).
• Contact us at hello@andraly.com to request a copy of the information associated with your account.

Account deletion is immediate and permanent. Generated stories, images, and audio are removed from our servers, and your authentication identity record is deleted as part of the same operation.

Exporting stories. You can export a story as a text file or copy it to the clipboard from the story menu. Once you share an exported story through another app, that app's own privacy policy governs it — and if the story includes your child's name, that name travels with the export.

Data security

We take reasonable measures to protect your information, including encryption in transit to our API and all service providers listed above.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we post the updated policy on this page with a revised Effective Date, and we describe any material change in a notice at the top of this page for at least 30 days after it takes effect. Please check this page periodically. Continued use of Andraly Stories after a change takes effect constitutes your acceptance of the revised policy.

Contact

Questions or concerns? Contact us at hello@andraly.com.