Privacy Policy

Contents

  • Introduction
  • Who We Are
  • A Note on Children
  • What Data We Collect
  • How We Use Your Data
  • How Parental Consent Is Verified
  • Data Retention
  • Where Your Data Is Processed
  • Third-Party Service Providers
  • Data We Do Not Sell or Share
  • Your Rights
  • How to Exercise Your Rights
  • Security and Breach Notification
  • Contact Us

Version 1.0 — Effective April 10, 2026. Last updated April 10, 2026.

Introduction

Storoo ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information when you use the Storoo personalized story service. By using Storoo, you agree to the practices described in this policy. If you do not agree, please do not use our service.

Who We Are

Storoo is operated by Storoo (entity registration pending), based in India. We provide a subscription service that delivers personalized AI-generated audio bedtime stories to children, created from a profile set up by a parent or legal guardian. Storoo is the entity responsible for the personal information we collect from you and your child. The service providers listed later in this policy operate under our instructions and are not permitted to use your information for their own purposes. For questions about this policy, contact us at support@storoo.co.in.

A Note on Children

Storoo's stories are about children — your child is the protagonist of every story we generate. However, children do not interact with Storoo directly. All information about a child is entered by, and remains under the control of, the parent or legal guardian who created the Storoo account. Before any information about a child is stored on our servers, we verify parental consent through a small refundable charge to the parent's payment card at the start of the free trial. For the full details of how we handle information about children, including your parental rights, please read our Children's Privacy Policy.

What Data We Collect

Parent Data

  • Account information: Your name, email address, and password (or Google account identifier if you sign in with Google), collected when you create an account.
  • Billing information: Your name, email address, billing country, and payment card details are provided by you directly to our payment processor at checkout. Storoo does not see or store your full card number, CVV, or expiry date — we store only a subscription reference token.
  • Technical information: Your IP address (used to detect your country for currency and language defaults, and recorded at the moment you give consent), browser type, and operating system are collected automatically when you visit Storoo.
  • Communications: If you email us, we retain your messages so we can respond and maintain a record of the conversation.

Child Data

  • Profile information: Your child's first name, age, gender or pronouns, optional cultural background, optional values preferences (3 to 5 from a list we provide), optional themes to avoid, and preferred story delivery time and timezone. This information is entered by you and used solely to personalize stories. See our Children's Privacy Policy for the full details.

Usage Data

We log events such as story delivery, subscription status changes, and consent records for operational and compliance purposes. We use Plausible Analytics on the landing page, which collects no personally identifiable information and sets no cookies.

How We Use Your Data

We use the data we collect to: create and deliver your child's personalized stories; send transactional emails (story delivery, billing receipts, account notifications); manage your subscription; comply with our legal obligations; and improve the quality and safety of our service. We do not use your data for profiling, behavioral advertising, or any purpose unrelated to delivering the Storoo service.

How Parental Consent Is Verified

Parental consent is verified at the start of your free trial through a small refundable charge to your payment card. The charge is fully credited to your first paid month, or refunded if you cancel before the trial ends. Until verification is complete, any information about your child entered during signup remains in your browser only and is never transmitted to our servers. See our Children's Privacy Policy for full details.

Data Retention

We retain data on the following schedule: active subscription + 90 days for child information and audio files; 12 months post-cancellation for parent contact information; 3 years for consent records (held in restricted access for audit purposes only).

Although your account contact information is deleted within 12 months of cancellation, certain consent records — confirming that consent was given on a specific date — are retained for 3 years to satisfy our consent audit-trail obligations. These records are held separately, in restricted access, and are not used for any operational purpose. You may request earlier deletion at any time by contacting support@storoo.co.in.

Where Your Data Is Processed

Storoo is based in India. Some of the service providers we use to operate Storoo operate from outside India, including from the United States. We only use providers based in countries that are currently permitted destinations for personal information under applicable Indian law. None of the countries our providers operate from are presently restricted. We will update this policy if any become restricted.

Third-Party Service Providers

We share data only with the following processors, strictly to operate the service. These descriptions are intentionally consistent with our Children's Privacy Policy.

  • Database and authentication (Supabase) — stores account and profile data in a secure, encrypted database.
  • Payment processing (Razorpay) — processes your subscription billing. Razorpay receives your name, email address, billing country, and payment card details directly from you when you complete checkout. Storoo does not see or store your full card details. Razorpay is governed by its own privacy policy, which we encourage you to review.
  • Story generation (Anthropic) — generates each personalized story from the profile you provide and performs an automated safety review of the generated text before it is converted to audio. Both steps use information about your child that you have provided through the profile. Our account is configured so that this information is not used to train AI models.
  • Text-to-speech (Google Cloud) — converts each story into audio narration. Because the narration speaks your child's first name aloud, the story text we send to this provider contains your child's first name.
  • Audio storage (Cloudflare R2) — stores generated audio files at unguessable web addresses on our subdomain audio.storoo.co.in. See our Children's Privacy Policy for important details about this storage model.
  • Email delivery (Resend) — delivers transactional emails including each daily story email to your inbox. Story emails contain your child's first name and a link to the story audio. The provider processes this information only to deliver the email and is contractually prohibited from using it for any other purpose.

We do not share your data with any other third parties, advertisers, or data brokers.

Data We Do Not Sell or Share

We do not sell your personal data or your child's data to any third party. We do not share data for advertising purposes. We do not use child data for behavioral profiling. Our only data sharing is with the service processors listed above, who are contractually bound to use data solely for providing their services to us.

Your Rights

As an Account Holder

You have the right to:

  • Access the personal data we hold about you.
  • Correct any inaccurate data (available via the Profile page in your account).
  • Delete your account and all associated data.
  • Withdraw consent at any time (this will result in cancellation of your subscription).
  • Nominate a representative to exercise these rights on your behalf.

As the Parent of a Child Profile

You have additional rights, including the right to refuse further collection of information about your child while keeping your existing account, and the right to request immediate deletion of your child's information regardless of subscription status. See our Children's Privacy Policy for the full list and how to exercise them.

How to Exercise Your Rights

To exercise any of the rights above, email us at support@storoo.co.in with the subject line "Privacy Request" and describe what you would like us to do. We will respond within 30 days. For account deletion, you may also cancel directly from the Profile page in your account, which will trigger data deletion per the retention schedule above.

Security and Breach Notification

We use industry-standard security practices to protect your data, including encryption at rest, access controls, and audit logging. If we discover a security incident affecting your personal information, we will notify you by email as soon as reasonably possible and in any case no later than 72 hours after we become aware of the incident, and we will notify the relevant data protection authorities as required by applicable law.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

Email: support@storoo.co.in
Subject line: Privacy Inquiry
Entity: Storoo (entity registration pending), India