Children's Privacy Policy

Contents

  • Introduction
  • Who This Policy Applies To
  • Direct Notice Before Collection
  • How We Verify Parental Consent
  • What Child Information We Collect
  • Required vs. Optional Information
  • Free-Text Fields
  • How We Use Child Information
  • Data Minimization
  • Our Commitments to Children
  • Third-Party Processors
  • Where Your Child's Information Is Processed
  • How Audio Files Are Stored
  • Information We Do Not Sell or Share
  • Data Storage Timeline
  • Data Retention and Deletion
  • Your Rights as a Parent
  • How to Exercise Your Rights
  • Security and Breach Notification
  • Material Changes to This Policy
  • Contact Us

Version 1.0 — Effective April 10, 2026. Last updated April 10, 2026.

Introduction

This Children's Privacy Policy explains how Storoo handles personal information relating to children who are the subject of personalized stories on our platform. It supplements our general Privacy Policy and applies specifically to information about children collected through the Storoo service. We take our obligations to children's privacy and data protection seriously and apply the strictest applicable standard to all information about children, regardless of where you live. If you have questions, contact us at support@storoo.co.in.

Who This Policy Applies To

This policy applies to information about any child under 18 years of age whose profile is set up on Storoo. Storoo is a service for parents and legal guardians — children do not create accounts or interact with the platform directly. All information about a child is entered by, and remains under the control of, the parent or legal guardian who created the Storoo account.

Direct Notice Before Collection

Before you enter any information about your child during signup, we present a notice on screen listing exactly what we will collect and how we will use it. Your decision to proceed past that notice, together with completion of the verification step described below, constitutes your informed consent to the collection and use of your child's information as described in this policy.

How We Verify Parental Consent

To verify that the person setting up a Storoo account is an adult with the authority to consent on behalf of their child, we use a payment-based verification method recognized for children's online services. At the start of your free trial, we process a small refundable verification charge to your payment card. This charge produces a notification from your card issuer or bank, which serves as independent confirmation that you are the cardholder. The amount is fully credited to your first paid month, or refunded if you cancel before the trial ends.

Until this verification is complete, any information you enter about your child during signup is held only on your device (in your browser's local storage) and is never transmitted to Storoo's servers. We only begin generating and storing your child's profile after verification is confirmed. This architecture ensures that no information about your child reaches our servers without your prior, verified consent.

What Child Information We Collect

Once parental consent is verified, we collect and store the following information as provided by you:

  • First name — used to personalize the story protagonist
  • Age — used to calibrate story complexity and themes
  • Gender or pronouns — used for correct pronoun usage in stories
  • Cultural background (optional) — used for culturally relevant story settings and characters
  • Values preferences (optional) — between 3 and 5 values from a list we provide (e.g. kindness, courage), woven into story narratives
  • Themes to avoid (optional) — content exclusions you specify
  • Preferred story delivery time and timezone — used to schedule daily story delivery; the timezone is auto-detected or entered by you, not by your child

We do not collect a child's email address, phone number, location, photograph, voice recording, or any biometric data. We do not collect more information than is necessary to generate and deliver a personalized story.

Required vs. Optional Information

The only information about your child that is strictly required to generate a story is your child's first name, age, and gender or pronouns. Cultural background, values preferences, and themes to avoid are optional — they help us personalize stories more closely to your family, but you can use Storoo without providing them, and we will not refuse service or reduce features if you choose not to.

Free-Text Fields

Some fields in our signup flow accept free-text input from you. Please do not include any information beyond what is needed to personalize the story — in particular, do not enter your child's last name, school, home address, medical conditions, religious affiliation, or any other identifying details. We screen free-text fields and reject submissions that appear to contain such information. If you have already submitted such information by mistake, please contact us at support@storoo.co.in and we will remove it.

How We Use Child Information

Information about your child is used exclusively to generate and deliver personalized bedtime stories to your email address. Specifically: your child's name, age, cultural background, values, and themes to avoid are included in the story generation prompt sent to our story generation provider. The generated story text is then converted to audio and emailed to you. No information about your child is used for any other purpose.

Data Minimization

We apply strict data minimization principles. We collect only what is necessary to personalize each story. We do not collect browsing history, device identifiers, usage patterns, or behavioral data about your child. We do not build profiles of children beyond the limited information you explicitly provide for story personalization.

Our Commitments to Children

We affirmatively commit to the following, regardless of the jurisdiction in which you live:

  • No tracking or behavioral monitoring of children. We do not track, profile, or monitor the behavior of any child whose information is on our platform.
  • No targeted advertising directed at children. We do not serve advertising of any kind through Storoo. Ever.
  • No processing likely to harm a child's well-being. Every story passes through an automated safety review designed to protect children's well-being, including age-appropriateness, emotional tone, absence of harmful or scary content, and bedtime suitability.
  • No use of child information to train AI models. Our agreements with our story generation provider are configured so that information about your child is not used to train AI models.

Third-Party Processors

Information about your child is shared with the following processors solely to provide the Storoo service. None of these processors are permitted to use the information for their own purposes.

  • Story generation provider (Anthropic) — generates each personalized story from the profile you provide and performs an automated safety review of the generated text before it is converted to audio. Both steps use information about your child that you have provided through the profile. Our account is configured so that this information is not used to train AI models.
  • Text-to-speech provider (Google Cloud) — converts each story into audio narration. Because the narration speaks your child's first name aloud, the story text we send to this provider contains your child's first name.
  • Email delivery provider (Resend) — delivers each daily story email to your inbox. The email contains your child's first name and a link to the story audio. The provider processes this information only to deliver the email and is contractually prohibited from using it for any other purpose.
  • Audio storage provider (Cloudflare R2) — stores the generated audio file at an unguessable web address. See "How Audio Files Are Stored" below for important details about this storage model.
  • Database and authentication provider (Supabase) — stores the child profile and account data in a secure, encrypted database used solely to operate the Storoo service.

No information about your child is shared with any other third party, including advertisers, data brokers, analytics platforms, or social media services.

Where Your Child's Information Is Processed

Storoo is based in India. Some of the service providers listed above operate from outside India, including from the United States. We only use providers based in countries that are currently permitted destinations for personal information under applicable Indian law. None of the countries our providers operate from are presently restricted. We will update this policy if any become restricted.

How Audio Files Are Stored

Each story's audio file is stored at an unguessable web address. Anyone who has the full address can play the file, but the address cannot be guessed and our storage does not allow anyone to browse or list our files. The audio narration speaks your child's first name aloud, so we recommend treating the daily story email — which contains the address — as a private message about your child. If you forward a story email to someone else, they will be able to play the audio file at that address, so only forward to people you trust with your child's first name.

When you request deletion of a story or your child's data, we delete the audio file from our storage. However, copies that have already been delivered — including copies in your email inbox and copies received by anyone you forwarded the email to — cannot be recalled by us. If you need those copies removed, you will need to delete them yourself.

Information We Do Not Sell or Share

We do not sell information about your child under any circumstances. We do not share it for advertising, marketing, or behavioral profiling. We do not allow third parties to use it for their own purposes. We do not serve targeted advertising to parents based on information about their child.

Data Storage Timeline

Information about your child is stored only after parental consent is verified through the verification charge described above. Before verification: the information exists only in your browser's local storage and is never transmitted to our servers. After verification: it is stored in our secure, encrypted database and used solely for daily story generation and delivery.

Data Retention and Deletion

We retain data on the following schedule: active subscription + 90 days for child information and audio files; 12 months post-cancellation for parent contact information; 3 years for consent records (held in restricted access for audit purposes only).

The 90-day window allows you to reactivate your subscription without re-entering your child's profile. After 90 days post-cancellation, your child's profile and any stored audio files are permanently and irreversibly deleted from our systems. You may request immediate deletion at any time by contacting support@storoo.co.in — we will process deletion requests within 30 days.

Your Rights as a Parent

As the parent or legal guardian who created the Storoo account, you have the following rights regarding your child's information:

  • Access — you may request a copy of all information we hold about your child.
  • Correction — you may update your child's profile at any time via the Profile page in your account.
  • Deletion — you may request permanent deletion of your child's information at any time, regardless of subscription status.
  • Refuse further collection — you may instruct us to stop collecting any new information about your child while keeping your existing subscription and any stories already delivered to you. To exercise this right, email us at support@storoo.co.in with the subject line "Stop Further Collection." Please note that exercising this right will pause new story generation, since each new story uses your child's profile.
  • Withdrawal of consent — you may withdraw consent at any time by cancelling your subscription and requesting data deletion.

These rights are available regardless of your location. You may also nominate a representative to exercise these rights on your behalf.

How to Exercise Your Rights

To exercise any parental rights, email us at support@storoo.co.in with the subject line "Child Data Request" and describe what you would like us to do. Please include the email address associated with your Storoo account so we can verify your identity. We will respond within 30 days. For immediate account-level changes such as correcting your child's profile, you may also use the Profile page in your account without contacting us.

Security and Breach Notification

We use industry-standard security practices to protect information about your child, including encryption at rest, access controls, and audit logging. If we discover a security incident affecting your child's personal information, we will (a) notify you by email as soon as reasonably possible and in any case no later than 72 hours after we become aware of the incident, (b) describe what happened, what information was affected, and what we are doing about it, and (c) notify the relevant data protection authorities as required by applicable law.

Material Changes to This Policy

If we make a material change to how we collect, use, or share information about your child, we will not apply that change to your existing account until we have obtained your renewed consent. We will notify you by email at least 30 days before any such change is intended to take effect.

Contact Us

If you have questions about this Children's Privacy Policy or how we handle your child's information, please contact us:

Email: support@storoo.co.in
Subject line: Children's Privacy Inquiry
Entity: Storoo (entity registration pending), India