Children's Privacy Policy

Contents

  • Introduction
  • Who This Policy Applies To
  • Direct Notice Before Collection
  • How We Verify Parental Consent
  • What Child Information We Collect
  • Required vs. Optional Information
  • Free-Text Fields
  • How We Use Child Information
  • Data Minimization
  • Our Commitments to Children
  • Third-Party Processors
  • Changes to Our Processors
  • Where Your Child's Information Is Processed
  • How Audio Files Are Stored
  • Information We Do Not Sell or Share
  • Data Storage Timeline
  • Data Retention and Deletion
  • Your Rights as a Parent
  • How to Exercise Your Rights
  • Security and Breach Notification
  • Material Changes to This Policy
  • Contact Us

Introduction

This Children's Privacy Policy explains how Storoo handles personal information relating to children who are the subject of personalized stories on our platform. It supplements our general Privacy Policy and applies specifically to information about children collected through the Storoo service. We take our obligations to children's privacy and data protection seriously and apply the strictest applicable standard to all information about children, regardless of where you live. If you have questions, contact us at support@storoo.co.in.

Who This Policy Applies To

This policy applies to information about any child under 18 years of age whose profile is set up on Storoo. Storoo is a service for parents and legal guardians — children do not create accounts or interact with the platform directly. All information about a child is entered by, and remains under the control of, the parent or legal guardian who created the Storoo account.

By creating an account, you are confirming that the child for whom you are creating a profile is under 18 years of age. If the applicable legal definition of "child" changes in India, we will update this policy and re-verify parental consent before processing additional data about your child.

Direct Notice Before Collection

Before you enter any information about your child during signup, we present a notice on screen listing exactly what we will collect and how we will use it. Your decision to proceed past that notice, together with completion of the verification step described below, constitutes your informed consent to the collection and use of your child's information as described in this policy.

How We Verify Parental Consent

To verify that the person setting up a Storoo account is an adult with the authority to consent on behalf of their child, we use a payment-based verification method recognized for children's online services. At the start of your free trial, we process a small refundable verification charge to your payment instrument. This charge produces a notification from your payment instrument issuer or bank, which serves as independent confirmation that you are the account holder.

Until this verification is complete, any information you enter about your child during signup is held only on your device (in your browser's local storage) and is never transmitted to Storoo's servers. We only begin generating and storing your child's profile after verification is confirmed. This architecture ensures that no information about your child reaches our servers without your prior, verified consent.

What Child Information We Collect

Once parental consent is verified, we collect and store the following information as provided by you:

  • First name — used to personalize the story protagonist
  • Age — used to calibrate story complexity and themes
  • Gender or pronouns — used for correct pronoun usage in stories
  • Values preferences — between 3 and 5 values from a list we provide (e.g. kindness, courage), woven into story narratives
  • Cultural background (optional) — up to two, chosen from a list we provide, used for culturally relevant story settings and characters
  • Sub-culture or regional details (optional) — up to two, entered by you, used to sharpen the regional flavour of stories (for example a region, language, or family tradition)
  • Themes to avoid (optional) — content exclusions you specify
  • Story language — the language your child's stories are written and narrated in. At present, all Storoo stories are in English.
  • Preferred story delivery time and timezone — used to schedule daily story delivery; the timezone is auto-detected or entered by you, not by your child

We do not collect a child's email address, phone number, precise location, photograph, voice recording, or any biometric data. We do not collect more information than is necessary to generate and deliver a personalized story.

Required vs. Optional Information

The information required to generate a story is your child's first name, age, gender or pronouns, and 3 to 5 values preferences. Cultural background, sub-culture or regional details, and themes to avoid are optional — they help us personalize stories more closely to your family, but you can use Storoo without providing them, and we will not refuse service or reduce features if you choose not to.

Free-Text Fields

A few fields let you type freely rather than choose from a list: your child's first name, optional cultural or regional details, and any additional themes you would like us to avoid. Please enter only what is needed to personalize a story. Do not enter your child's last name, school, home address, medical conditions, religious affiliation, or any other identifying details — we do not need this information and stories do not require it. These fields are length-limited and used only to generate your child's stories. We do not automatically detect what you type, so please take care. You can correct these fields at any time on your Profile page, or email support@storoo.co.in and we will remove them.

How We Use Child Information

Information about your child is used exclusively to generate and deliver personalized bedtime stories to your email address. Specifically: your child's name, age, gender or pronouns, values, cultural background, sub-culture or regional details, and themes to avoid are included in the story generation prompt sent to our story generation provider. The generated story text is then converted to audio and emailed to you. No information about your child is used for any other purpose.

We also include the country you are accessing Storoo from, determined from your internet connection, so that stories can be set in a familiar place. This is your country, not your child's — we do not collect any location information about your child.

Data Minimization

We apply strict data minimization principles. We collect only what is necessary to personalize each story. We do not collect browsing history, device identifiers, usage patterns, or behavioral data about your child. We do not build profiles of children beyond the limited information you explicitly provide for story personalization.

Our Commitments to Children

We affirmatively commit to the following, regardless of the jurisdiction in which you live:

  • No tracking or behavioral monitoring of children. We do not track, profile, or monitor the behavior of any child whose information is on our platform.
  • No targeted advertising directed at children. We do not serve advertising of any kind through Storoo. Ever.
  • No processing likely to harm a child's well-being. Every story passes through an automated safety review designed to protect children's well-being, including age-appropriateness, emotional tone, absence of harmful or scary content, and bedtime suitability.
  • No use of child information to train AI models. We do not permit our story generation provider to use information about your child to train AI models.

Notwithstanding our safety review processes, generative AI may occasionally produce unexpected or imperfect content. Storoo does not warrant that every generated story will be error-free in every cultural or contextual nuance. We strongly recommend that you review the first several stories generated for your child before relying on the service fully. If you encounter a story that does not meet your expectations, you may request a manual review by contacting us at support@storoo.co.in. We will review and, if appropriate, regenerate the story.

Third-Party Processors

Information about your child is shared with the following processors solely to provide the Storoo service. The current list of processors is always available in this policy; see "Changes to Our Processors" below for how substitutions are handled.

  • Story generation provider (Anthropic) — generates each personalized story from the profile you provide and performs an automated safety review of the generated text before it is converted to audio. Both steps use information about your child that you have provided through the profile. Our account is configured so that this information is not used to train AI models.
  • Text-to-speech provider (Google Cloud) — converts each story into audio narration. Because the narration speaks your child's first name aloud, the story text we send to this provider contains your child's first name.
  • Email delivery provider (Resend) — delivers each daily story email to your inbox. The email contains your child's first name and a link to the story audio. The provider processes this information only to deliver the email and is contractually prohibited from using it for any other purpose.
  • Audio storage provider (Cloudflare R2) — stores the generated audio file at an unguessable web address. See "How Audio Files Are Stored" below for important details about this storage model.
  • Database and authentication provider (Supabase) — stores the child profile and account data in a secure, encrypted database used solely to operate the Storoo service.

No information about your child is shared with any other third party, including advertisers, data brokers, analytics platforms, or social media services.

Changes to Our Processors

We may occasionally replace a processor listed above, or add a processor performing one of the same functions (story generation, safety review, text-to-speech, email delivery, audio storage, database and authentication), for reasons such as reliability, quality, or cost. Any replacement or additional processor will: (a) receive only the same categories of information about your child as the processor it replaces or supplements; (b) process that information solely to provide its service to us, under contractual terms at least as protective as those described in this policy; and (c) operate from a jurisdiction permitted under applicable Indian law. If we make such a change, we will update this policy and notify you by email before your child's information is shared with the new processor. A change meeting all of the conditions above is not considered a material change to how we collect, use, or share your child's information. Any change that does not meet these conditions — for example, sharing new categories of information, processing for a new purpose, or weaker protections — is a material change and is handled under "Material Changes to This Policy" below.

Where Your Child's Information Is Processed

Storoo is based in India. Some of the service providers listed above operate from outside India, including from the United States. We only use providers based in countries that are currently permitted destinations for personal information under applicable Indian law. None of the countries our providers operate from are presently restricted. We will update this policy if any become restricted.

How Audio Files Are Stored

Each story's audio file is stored at an unguessable web address. Anyone who has the full address can play the file, but the address cannot be guessed and our storage does not allow anyone to browse or list our files. The audio narration speaks your child's first name aloud, so we recommend treating the daily story email — which contains the address — as a private message about your child. If you forward a story email to someone else, they will be able to play the audio file at that address, so only forward to people you trust with your child's first name.

When you request deletion of a story or your child's data, we delete the audio file from our storage. However, copies that have already been delivered — including copies in your email inbox and copies received by anyone you forwarded the email to — cannot be recalled by us. If you need those copies removed, you will need to delete them yourself.

Information We Do Not Sell or Share

We do not sell information about your child under any circumstances. We do not share it for advertising, marketing, or behavioral profiling. We do not allow third parties to use information about your child for any purpose other than providing their service to us. We do not serve targeted advertising to parents based on information about their child.

Data Storage Timeline

Information about your child is stored only after parental consent is verified through the verification charge described above. Before verification: the information exists only in your browser's local storage and is never transmitted to our servers. After verification: it is stored in our secure, encrypted database and used solely for daily story generation and delivery.

Data Retention and Deletion

We retain data on the following schedule: active subscription + 90 days for child information and audio files; 12 months post-cancellation for parent contact information; 3 years for consent records (held in restricted access for audit purposes only).

The 90-day window allows you to reactivate your subscription without re-entering your child's profile. After 90 days post-cancellation, your child's profile and any stored audio files are permanently and irreversibly deleted from our systems. You may request immediate deletion at any time by contacting support@storoo.co.in — we will process deletion requests within 30 days.

Your Rights as a Parent

As the parent or legal guardian who created the Storoo account, you have the following rights regarding your child's information:

  • Access — you may request a copy of all information we hold about your child.
  • Correction — you may update your child's profile at any time via the Profile page in your account.
  • Deletion — you may request permanent deletion of your child's information at any time, regardless of subscription status.
  • Refuse further collection — you may instruct us to stop collecting any new information about your child while keeping your existing subscription and any stories already delivered to you. To exercise this right, email us at support@storoo.co.in with the subject line "Stop Further Collection." Please note that exercising this right will pause new story generation, since each new story uses your child's profile.
  • Withdrawal of consent — you may withdraw consent at any time by cancelling your subscription and requesting data deletion.

These rights are available regardless of your location. You may also nominate a representative to exercise these rights on your behalf.

How to Exercise Your Rights

To exercise any parental rights, email us at support@storoo.co.in with the subject line "Child Data Request" and describe what you would like us to do. Please include the email address associated with your Storoo account so we can verify your identity. We will respond within 30 days. For immediate account-level changes such as correcting your child's profile, you may also use the Profile page in your account without contacting us.

Security and Breach Notification

We use industry-standard security practices to protect information about your child, including encryption at rest, access controls, and audit logging. If we discover a security incident affecting your child's personal information, we will (a) notify you by email as soon as reasonably possible and in any case no later than 72 hours after we become aware of the incident, (b) describe what happened, what information was affected, and what we are doing about it, and (c) notify the relevant data protection authorities as required by applicable law.

Material Changes to This Policy

If we make a material change to how we collect, use, or share information about your child — such as collecting new categories of information, using it for a new purpose, sharing it with a third party outside the framework described in "Changes to Our Processors," or reducing the protections described in this policy — we will not apply that change to your existing account until we have obtained your renewed consent. We will notify you by email at least 30 days before any such change is intended to take effect.

Contact Us

If you have questions about this Children's Privacy Policy or how we handle your child's information, please contact us:

Email: support@storoo.co.in
Subject line: Children's Privacy Inquiry
Entity: Storoo Private Limited, India