Privacy Policy
Last updated: July 9, 2026
This Privacy Policy explains how Storias ("we," "us") collects, uses, and shares information when you use the Storias apps and storiasai.com (the "Service"). It applies alongside our Terms of Service.
1. Information We Collect
- Account information. When you sign in, we create an account identifier. If you sign in with Apple, we receive the identifier (and, if you choose to share it, your name/relay email) needed to authenticate you.
- Your Content. The video and audio you upload or record, and the finished videos you create, plus lightweight project metadata (title, chosen style, duration, status).
- Purchase and credit information. Subscription status and entitlements from Apple/RevenueCat, and your credit balance and credit transactions. We do not receive or store your full payment-card details, Apple processes payment.
- Usage and device data. Basic app and device information (app version, device model, OS, diagnostic and crash data, and credit usage) to operate and improve the Service.
2. How We Use Information
- To provide the Service, transcribe, edit, generate imagery, render, and deliver your videos.
- To manage subscriptions and entitlements.
- To secure the Service, prevent abuse, and comply with law.
- To fix problems and improve features (using aggregated or diagnostic data).
We do not sell your personal information, and we do not use Your Content to train third-party AI models.
3. AI Processing, How Your Videos Are Handled
To produce an edit, the Service sends parts of Your Content to automated and third-party AI systems:
- Speech-to-text. Audio from your clip is transcribed to generate captions. Transcription runs on our own render service.
- AI image generation. Prompts derived from your content are sent to a third-party image provider (OpenAI) to generate supporting visuals for your video. The provider processes the prompt to return an image and, per its policy, does not use API content to train its models.
- Editing and rendering. Your clip is transcoded and assembled into the finished video on our render service.
You are responsible for having the rights to any footage, audio, likeness, or music you provide.
4. Data Storage and Retention
- Uploaded footage is processed transiently. Video/audio you upload is held only as long as needed to produce your edit and is deleted from our render service shortly after processing. We do not maintain a permanent library of your raw uploads.
- Finished videos stay with you. Rendered videos are delivered to your device (and, if you choose, saved to your Photos). We do not retain copies of your finished videos on our servers by default.
- Metadata. Lightweight project metadata and your account profile are stored in our database (hosted on Supabase) so your projects sync to your account. Row-level security restricts each record to its owner.
- Retention. We keep account and metadata for as long as your account is active, then delete or anonymize it within a reasonable period, except where retention is required by law.
5. Service Providers (Subprocessors)
| Provider | Purpose |
|---|---|
| Apple | App distribution and payments |
| RevenueCat | Subscription and entitlement management |
| Supabase | Authentication and metadata storage |
| OpenAI | AI image generation |
| Cloud hosting (Railway) | Render + transcription compute |
We share only what each provider needs to perform its function, under contractual data-protection obligations.
6. Your Rights (EU/EEA/UK, GDPR)
If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may withdraw consent at any time and lodge a complaint with your local supervisory authority.
- Lawful bases. We process data to perform our contract with you (providing the Service), for our legitimate interests (securing and improving the Service), to comply with legal obligations, and, where required, with your consent.
- Controller. Storias is the controller of your personal data. Contact us or our data-protection contact at privacy@storiasai.com to exercise your rights.
7. Your Rights (California, CCPA/CPRA)
California residents have the right to know what personal information we collect, to request deletion, and to opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined. To exercise these rights, contact privacy@storiasai.com. We will not discriminate against you for exercising them.
8. International Data Transfers
We and our providers may process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the Standard Contractual Clauses.
9. Security
We use technical and organizational measures to protect your data, including encrypted transport (HTTPS), device-only secure storage of authentication tokens (Keychain), and database row-level security. No method is perfectly secure, but we work to protect your information.
10. Children
The Service is not directed to children under 13 (or the applicable minimum age in your region), and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
11. Cookies
Our website uses only essential cookies/local storage needed to operate the site and remember preferences. We do not use third-party advertising trackers.
12. Changes
We may update this Policy. Material changes will be signposted (for example, by updating the date above or notifying you in-app). Continued use after changes means you accept the updated Policy.
13. Contact
Privacy questions or requests: privacy@storiasai.com.