Privacy Policy — M-ai Story

1. Audience and scope

m-aistory is a parenting tool for adults and caregivers. It helps you create personalised bedtime stories for family use. Accounts are opened and managed by adult users. Features and content are designed for adult use.

2. Summary

• Minimal data: email and first name for account access, plus story content you enter. Designed for adult use.
• No sale or rental of personal data. No cross-app tracking. No targeted ads.
• Processing is for providing the service, basic analytics, and optional product updates.
• Primary storage in the UK. Providers may process data globally with safeguards.
• You can delete content and your account in-app at any time.

3. Data we collect

• Account data: email address (Apple, Google, or email sign-in) and first name.
• App content: story text, images generated by the app, and character names you enter. Treat character names as fictional inputs. Do not include sensitive or identifying details about real persons.
• Diagnostics and analytics: aggregate usage events and device metadata through Firebase Analytics and related Google services.
• Notifications: optional push token if you enable push notifications.

We do not request precise location, contacts, health data, or special category data.

4. Purposes and lawful bases (UK GDPR and EU GDPR)

• Provide and secure the service including authentication, content storage, generation, and fraud prevention.
  Legal basis: performance of a contract.
• Analytics and service quality including aggregate usage, reliability, and crash signals.
  Legal basis: legitimate interests. Impact is low. You can limit analytics via OS settings where available.
• Product updates and reminders via email or push.
  Legal basis: consent where required. You can opt out in settings.

5. No sale. No cross-app tracking. No targeted ads.

We do not sell or rent personal data. We do not engage in cross-app tracking. We do not use data for targeted advertising.

6. Service providers

We share data only with processors acting under our instructions:

• Google Firebase for Authentication, Firestore, Storage, Analytics, and Cloud Functions.
• FAL and Google AI image generation ("Nano Banana") to transform prompts and character inputs into images. Inputs are treated as fictional character data.

Processors may not use your data for their own advertising.

7. International transfers

Primary storage is configured in United Kingdom regions. Some processors operate globally. Where data leaves the UK or EU, transfers use safeguards such as Standard Contractual Clauses and Google regional commitments where applicable.

8. Retention

• Account and content: kept until you delete the content or use the in-app Delete account control.
• Backups and logs: may persist for a limited period per provider policies.

9. Your rights (UK and EU)

You may access, rectify, erase, restrict, object, and port your data, and withdraw consent where processing relies on consent.

Use in-app controls or contact rankest-spittle.0w@icloud.com

You may lodge a complaint with the UK Information Commissioner's Office (ICO) or your local EU data protection authority.

10. US notice, including California

We collect identifiers such as email, app activity for analytics, and device data needed to run the service. We do not sell or share personal information as defined by the CCPA/CPRA. Request access or deletion via in-app controls or manuel.espinosap@hotmail.com. We do not use or disclose sensitive personal information for inferring characteristics.

11. Security

We use Firebase encryption in transit and at rest, authentication, role-based access rules, and least-privilege practices. No system is perfectly secure, but we apply reasonable technical and organisational measures.

12. Payments

If purchases are enabled, payments are processed by Apple In-App Purchase and or Stripe. We do not store payment card numbers. We receive only transaction confirmations needed to deliver access.

13. Your controls

• Delete account in-app to remove your profile and associated content.
• Manage notifications in-app and at OS level.
• Export or request a copy of your data via manuel.espinosap@hotmail.com.

14. Families and minors

The service is designed for adults and caregivers to create and manage stories. Children may read or view stories that adults create. We do not create child accounts. Please avoid including sensitive or identifying details about any person in story content.

15. Changes

We may update this policy as the app evolves. Material changes will be shown in-app. The effective date will be updated.

---

App Store privacy summary (for Nutrition Label)

• Data linked to you: Identifiers (email), User Content (stories you create), Diagnostics (app performance).
• Tracking: none.
• Purposes: App functionality and Analytics.