Privacy Policy

Last updated: July 31, 2026

This Privacy Policy explains how Storias ("we," "us") collects, uses, and shares information when you use the Storias apps and storiasai.com (the "Service"). It applies alongside our Terms of Service.

1. Information We Collect

• Account information. When you sign in, we create an account identifier. If you sign in with Apple, we receive the identifier (and, if you choose to share it, your name/relay email) needed to authenticate you.
• Your Content. The video and audio you upload or record, and the finished videos you create, plus lightweight project metadata (title, chosen style, duration, status).
• Purchase and credit information. Subscription status and entitlements from Apple/RevenueCat, and your credit balance and credit transactions. We do not receive or store your full payment-card details, Apple processes payment.
• Usage and device data. Basic app and device information (app version, device model, OS, diagnostic and crash data, and credit usage) to operate and improve the Service.

2. How We Use Information

• To provide the Service, transcribe, edit, generate imagery, render, and deliver your videos.
• To manage subscriptions and entitlements.
• To secure the Service, prevent abuse, and comply with law.
• To fix problems and improve features (using aggregated or diagnostic data).

We do not sell your personal information, and we do not use Your Content to train third-party AI models.

3. AI Processing, How Your Videos Are Handled

To produce an edit, the Service sends parts of Your Content to automated and third-party AI systems:

• Speech-to-text. Audio from your clip is transcribed to generate captions. Transcription runs on our own render service.
• AI image generation. Prompts derived from your content are sent to a third-party image provider (OpenAI) to generate supporting visuals for your video. The provider processes the prompt to return an image and, per its policy, does not use API content to train its models.
• Editing and rendering. Your clip is transcoded and assembled into the finished video on our render service.

You are responsible for having the rights to any footage, audio, likeness, or music you provide.

4. Data Storage and Retention

• Worker copies are temporary. The render worker deletes its local upload, output, and working files automatically after the short processing/editing window.
• Editable projects. To let you reopen and revise a project after that worker window, we may store its source, transcript, edit plan, and selected media in private account-scoped storage. This working package remains while the project or account is active and is removed when you delete that project or your account.
• Finished videos remain private. Rendered videos are delivered to your device (and, if you choose, saved to your Photos). An account-scoped copy is retained with the editable project so downloads survive worker restarts and remain available across your devices. Access uses short-lived signed links, and the copy is removed when you delete the project or account.
• Metadata. Lightweight project metadata and your account profile are stored in our database (hosted on Supabase) so your projects sync to your account. Row-level security restricts each record to its owner.
• Retention. We keep account data, project metadata, and active editable-project packages while your account or project remains active. In-app project and account deletion removes the associated private media; limited billing or legal records may remain where required by law.

5. Service Providers (Subprocessors)

We share only what each provider needs to perform its function, under contractual data-protection obligations.

6. Your Rights (EU/EEA/UK, GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may withdraw consent at any time and lodge a complaint with your local supervisory authority.

• Lawful bases. We process data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service), to comply with legal obligations, and, where required, with your consent.
• Controller. Storias is the controller of your personal data. Contact us or our data-protection contact at privacy@storiasai.com to exercise your rights.

7. Your Rights (California, CCPA/CPRA)

California residents have the right to know what personal information we collect, to request deletion, and to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined. To exercise these rights, contact privacy@storiasai.com. We will not discriminate against you for exercising them.

8. International Data Transfers

We and our providers may process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the Standard Contractual Clauses.

9. Security

We use technical and organizational measures to protect your data, including encrypted transport (HTTPS), device-only secure storage of authentication tokens (Keychain), and database row-level security. No method is perfectly secure, but we work to protect your information.

10. Children

The Service is not directed to children under 13 (or the applicable minimum age in your region), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.

11. Cookies

Our website uses essential local storage to remember preferences. With your consent, we use PostHog to understand how visitors navigate the site, including page views, session duration, scrolling, clicks, interaction patterns, attribution parameters, and session replay. Sensitive form inputs are masked. You can decline analytics in the consent notice shown on the site.

12. Changes

We may update this Policy. Material changes will be signposted (for example, by updating the date above or notifying you in-app). Continued use after changes means you accept the updated Policy.

13. Contact

Privacy questions or requests: privacy@storiasai.com.