Privacy Policy
How we collect, use, and protect your information at Owly Stories.
Version 2.2.0 · Effective 2026-10-12
This Privacy Policy is currently available in English only. An official translation is available on request — contact us at privacy@owlystories.com.
This Privacy Policy explains how Owly Stories ("we", "us", "the app") collects, uses, stores, and shares information when you use the Owly Stories mobile application. By creating an account or using the app you confirm that you have read and agreed to this Policy and our Terms of Service. If you do not agree, please stop using the app and delete your account.
1. Parental responsibility and child data
Owly Stories is designed for parents and legal guardians to use with their children, and only an adult may operate the account. You must be at least 18 years old to create an account. By submitting a child profile, photo, voice sample, or any other information about a child, you represent and warrant that you are the child's parent or legal guardian and that you have full authority to consent to the processing described in this Policy on that child's behalf.
You are solely responsible for the content you provide about a child, including ensuring it is accurate and that its transmission to the third-party AI processors listed below is lawful in your jurisdiction. We do not knowingly collect data directly from children without parental action in-app.
2. Data we collect
- Account data: email address, display name, authentication provider (email login link, Apple, Google), locale, and timestamps.
- Child profile data: first name, age, gender, interests, parent first names (optional), and any additional context you enter.
- Content you create: stories, prompts, custom actions, saved library state, interactive-story choices, and in-app preferences.
- Voice recordings you make for narrator cloning. These are sent to Inworld AI (see Sections 4 and 5).
- Subscription data: platform receipts, purchase tokens, entitlement state, and trial status managed through Apple, Google, and RevenueCat.
- Technical data: app version, OS version, device model, anonymous usage events, and crash reports (only if you consent to analytics).
- Consent records: which consents you have granted or withdrawn, when, and in what app version, for audit purposes.
3. How we use your data
- To create and maintain your account and authenticate you on every session.
- To generate personalised story text, cover images, avatar images, and narrator audio using third-party AI services.
- To deliver and persist the content you create so you can access it across sessions and devices.
- To process your subscription, free trial, and entitlement through the App Store, Google Play, and RevenueCat.
- To diagnose crashes and improve the stability of the app (Sentry), subject to your analytics consent.
- To comply with legal obligations, enforce our Terms, prevent abuse, and protect the rights, property, or safety of Owly Stories, our users, or others.
4. Third parties who process your data
To operate the app we must share specific data with the third-party processors listed below. These processors act on our instructions, but some are located outside your country and process data under their own privacy policies. Before any data is sent to an AI provider, the app asks for your permission.
Supabase, Inc.
Purpose: Authentication, database storage, file storage (audio, images), and backend edge functions.
Data shared: Account email, hashed password, display name, child profiles, saved stories, audio files, avatar images, and consent records.
Location: EU (Frankfurt, Germany) and United States
Read their privacy policyAnthropic, PBC (Claude)
Purpose: Generating the text of personalised bedtime stories and interactive story segments from your prompts, directly or through OpenRouter.
Data shared: Child first name, age, gender, interests, parent first names (if provided), story preferences, and any custom prompts you add. No email, no photo, no voice sample.
Location: United States
Read their privacy policyOpenAI, L.L.C. (GPT Image)
Purpose: Generating avatar illustrations and story pictures, through OpenRouter.
Data shared: The avatar traits you choose and your child's age range; for story pictures, a scene description, your child's first name and their avatar image. No email, no photo, no voice sample.
Location: United States
Read their privacy policyGoogle LLC (Gemini)
Purpose: Writing and producing personalised songs, and generating avatars and story pictures when OpenAI is unavailable.
Data shared: For songs: your child's first name and age range, how to pronounce the name, your song choices, and the source story text if any. For pictures: the same data listed for OpenAI. No email, no photo, no voice sample.
Location: United States and Google global infrastructure
Read their privacy policyOpenRouter, Inc.
Purpose: Routing image requests to OpenAI and some story requests to Anthropic.
Data shared: The content of the requests it routes, as listed for OpenAI and Anthropic.
Location: United States
Read their privacy policyInworld AI, Inc.
Purpose: Cloning narrator voices from voice samples you record, and synthesising narration audio for stories.
Data shared: Voice recordings you submit for cloning, the text of stories to be narrated, and internal voice identifiers.
Location: United States
Read their privacy policyRevenueCat, Inc.
Purpose: Managing subscriptions, entitlements, receipt validation, and free-trial state.
Data shared: App-generated user ID, platform receipt data, subscription product identifiers, country, and device type. No name, email, child data, photos, or voice samples.
Location: United States
Read their privacy policyAppsFlyer Ltd.
Purpose: Measuring install attribution, campaign performance, app sessions, and subscription events for our own advertising campaigns.
Data shared: AppsFlyer ID, app-generated user ID, device identifiers where permitted, app version, OS version, country, campaign attribution data, and subscription event metadata sent via RevenueCat. No child data, prompts, photos, voice samples, or story content.
Location: Israel, EU, United States, and AppsFlyer global infrastructure
Read their privacy policyTikTok for Business
Purpose: Receiving campaign attribution and conversion postbacks for TikTok ads that promote Owly Stories.
Data shared: Pseudonymous attribution identifiers, campaign identifiers, app event names, timestamps, country, device metadata, and aggregated subscription conversion data where configured. No child data, prompts, photos, voice samples, or story content.
Location: United States, Singapore, Ireland, and TikTok global infrastructure
Read their privacy policyFunctional Software, Inc. (Sentry)
Purpose: Capturing crash reports and runtime errors so we can diagnose and fix bugs.
Data shared: App version, OS version, device model, stack traces, anonymised breadcrumbs, and a pseudonymous user identifier. We scrub known sensitive fields before sending.
Location: United States and EU
Read their privacy policyApple Inc. (Sign in with Apple, App Store)
Purpose: Authenticating users who choose "Sign in with Apple" and processing in-app purchases on iOS.
Data shared: Your Apple ID token, the name and email you choose to share (which may be a private relay address), and purchase receipts.
Location: United States and Apple global infrastructure
Read their privacy policyGoogle LLC (Google Sign-In, Google Play Billing)
Purpose: Authenticating users who choose "Sign in with Google" and processing in-app purchases on Android.
Data shared: Your Google account ID token, name, email, profile picture URL, and Play Billing purchase tokens.
Location: United States and Google global infrastructure
Read their privacy policyWe do not sell your personal data, and we do not share it for cross-context behavioural advertising. The processors above are necessary to deliver the service you requested.
5. AI processing disclosure
Owly Stories uses generative AI to create stories, pictures, songs and narration. The first time you create something, the app shows which providers receive which data and asks for your permission. Nothing is sent to them until you allow it. When you create content, the following data is sent:
- Story text and interactive stories: your child's first name, age, gender and interests, parent first names (optional), selected preferences and your custom prompts are sent to Anthropic (Claude), directly or through OpenRouter.
- Avatars: the appearance traits you choose (presentation, skin tone, hair colour and style, eye colour) and your child's age range are sent to OpenAI (GPT Image) through OpenRouter, or to Google (Gemini) if that is unavailable. No photo and no name is sent.
- Story pictures: a scene description from the story, your child's first name and their avatar image are sent to OpenAI (GPT Image) through OpenRouter, or to Google (Gemini) if that is unavailable.
- Songs: your child's first name and age range, how to pronounce the name, your song choices and, if the song is based on a story, that story's text are sent to Google (Gemini).
- Narration and narrator voice: story text is sent to Inworld AI to create narration audio. If you clone your voice, your voice recording is also sent to Inworld AI.
Each provider operates under its own retention and training policies. We have configured these integrations to disable training on your content wherever the provider supports that option, but we cannot guarantee that any AI output is free of inaccuracies or that prompts cannot be reconstructed on the provider's side. Do not submit information you are not comfortable transmitting to these providers. You can withdraw your permission at any time in Settings › Privacy & Data; the app will then ask again before creating anything new.
6. Retention
We retain account data, child profiles, and generated content for as long as your account is active. If you delete your account we will delete the associated personal data from our primary systems within 30 days, subject to backups that are rotated on a standard cycle and legal retention obligations (for example tax records for purchases). Consent audit records may be retained longer to evidence that consent was lawfully obtained.
7. Legal basis
Where the GDPR or similar laws apply, we process your data on the following bases: (a) performance of the contract you enter into with us when you create an account and request content; (b) your explicit consent, given in the app, for sending child profile data, story content and voice recordings to third-party AI providers; (c) our legitimate interest in operating, securing, and improving the service; and (d) compliance with legal obligations.
8. Your rights
Depending on where you live you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw any consent you previously granted without affecting the lawfulness of processing that occurred before the withdrawal.
You can exercise these rights directly in the app under Settings → Privacy & Data, where you can manage your consents, export your data, and delete your account. You may also contact us at the address below.
9. Security
We use industry-standard safeguards including TLS in transit, encryption at rest on our primary storage, row-level security, signed URLs for media, and strict server-side authorisation on all edge functions. No system is perfectly secure; you use the app at your own risk and you should use a strong, unique password and keep your device secure.
10. Disclaimers and limitation of liability
The app and any AI-generated content are provided "as is" and "as available" without warranties of any kind, whether express or implied, including without limitation warranties of merchantability, fitness for a particular purpose, non-infringement, or accuracy of AI output. To the maximum extent permitted by law, Owly Stories, its owners, employees, and suppliers disclaim all liability for any indirect, incidental, special, consequential, exemplary, or punitive damages, or any loss of data, profits, or goodwill arising from your use of the app or from any transfer of your data to a third-party AI processor listed above.
You agree to indemnify and hold harmless Owly Stories from any claim, demand, or damages arising from your submission of content about a child for whom you are not the legal guardian, or from any violation of applicable law in your use of the app.
11. Changes to this Policy
We may update this Policy from time to time. When we make material changes we will update the version number and effective date shown at the top of this page and, where required, ask you to re-acknowledge it on next launch. Continued use of the app after an update constitutes acceptance of the updated Policy.
12. Contact
For any privacy question, data access request, or complaint, contact our Data Protection Officer at: