Story Teller — Privacy Policy

This Privacy Policy explains how Mellivo OÜ ("we", "us", "Story Teller", operating the "Mellivo" / mellivoai.com service) collects, uses, shares, and protects your personal data in the Story Teller mobile application (the "App").

Story Teller is for people aged 13 and over and is made mainly for parents: you sign up, add your child, record your voice and choose the stories, which you then play to your child. It generates personalized bedtime stories for your child and narrates them in your own voice. By using the App, you agree to this Policy.

1. Data We Collect

Data you provide:

• Account data: email address, display name, and sign-in method (email, Google, or Apple). Authentication is handled by Firebase Authentication.
• Child profile: your child's first name, age, and preferred language. This is entered by the adult account holder and used to personalize content.
• Voice recordings: the ~60-second voice sample you record so stories can be narrated in your voice. We keep your recording for as long as that voice profile exists: the narration model reads the recording itself each time it speaks in your voice, so there is no separate, non-reversible "voiceprint" that could replace it. It is stored encrypted, is never used to train any model, and is deleted when you delete the voice profile or your account. This may constitute biometric data and is processed only with your explicit consent.
• Story inputs: theme, characters, favorite toy, moral/lesson and similar details you provide to generate a story.

Data collected automatically:

• Usage and device data: in-app events (analytics), device type, operating system, language, approximate usage statistics — used only to run and improve the App.
• Push token: a device token (FCM) to send push notifications.
• Log and diagnostic data: error/crash reports, IP address, server logs (for security and debugging).
• Advertising data: the Google Mobile Ads SDK receives your IP address (from which a rough location can be estimated), app interactions and diagnostic data to deliver ads. We do not read your device's advertising identifier (see Advertising).

Payments: Credit packs, subscriptions and the ad-free unlock are purchased through the Apple App Store / Google Play. We do not see or store your card or payment details; we only verify the purchase (a store transaction id) so we can add the credits you bought.

2. How We Use Data

• To provide the App: generate personalized story text and narrate it in your voice.
• To store and deliver the stories you create.
• To send notifications (e.g., when a story is ready).
• To manage your credit balance and purchases.
• To improve the App, fix bugs, and ensure security and prevent abuse.
• To display ads until the ad-free unlock is purchased.
• To comply with legal obligations.

3. How We Share Data

We do not sell your data. We share it, to the extent necessary to run the service, with the following service providers (processors):

• Google Firebase — authentication, push notifications, analytics.
• Amazon Web Services (AWS) — hosting and file storage (audio and story files). Servers in the European Union (Sweden).
• Anthropic (Claude) — the story inputs you provide are processed to generate story text.
• OpenAI — the same story inputs are processed to generate a second version of the story text, so you can choose between them. Neither provider uses this data to train their models.
• RunPod — your voice representation and text are processed to render story audio.
• Google AdMob — child-directed, non-personalised ads until the ad-free unlock.
• Sentry — crash/error reporting (when enabled).
• Apple / Google — in-app purchase processing.

We may also disclose data where required by law or to protect our rights.

4. International Transfers

Your data may be processed and stored in countries where our providers operate (e.g., the EU and the US). We apply appropriate safeguards (e.g., standard contractual clauses).

5. Retention

• Account and content data: while your account is active.
• Voice recording: kept while the voice profile exists; deleted when you delete that voice profile or your account. The upload copy is removed within 24 hours of processing, but the working copy the narration model reads is retained.
• Stories: until you delete them.

When you delete your account, your personal data is deleted from our live systems at once and from encrypted database backups within 30 days. Apple and Google keep their own records of your purchases.

6. Your Rights (GDPR / KVKK and similar)

You may have the right to access, correct, delete, restrict or object to processing, port your data, and withdraw consent.

• You can delete your account and data in the App (Settings → Delete Account), or without the App by email — see how to delete your account.
• For other requests: studio@mellivoai.com.

7. Children's Privacy

Story Teller is intended for users aged 13 and over and is designed mainly for parents and guardians. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you are under 18, you may use the App only with the consent of a parent or guardian.

• Information about your child comes from you. To personalise stories, the account holder may enter a child's first name, age and language, after agreeing to how they are used. We use them only to write stories — never for advertising.
• Adult actions sit behind a parental gate: adding a child's details, every purchase and subscription, signing out and deleting the account.
• Ads are child-directed for everyone, because stories are often played with young children nearby: never personalised, limited to content rated G, and served only by Google Play certified ad networks. We do not read the device advertising identifier. See Advertising.
• You stay in control: you can review, change or delete your child's information at any time, in the App or by writing to studio@mellivoai.com.

If we learn that a child under 13 has given us personal information directly, we delete it. Contact us at studio@mellivoai.com.

8. Advertising

Until you buy the one-time ad-free unlock, we show ads via Google AdMob. Because children may be listening, every ad request is treated as child-directed: it is tagged for child-directed treatment (COPPA) and as under the age of consent (GDPR), and limited to content rated G, so ads are never personalised or based on your behaviour. We do not read the device advertising identifier: on Android the App removes the permission for it and switches off its collection in analytics, and on iOS the App never asks for tracking permission. AdMob still receives the IP address and basic device, interaction and diagnostic data it needs to deliver and measure an ad and to prevent fraud. The ad-free unlock permanently removes ads.

9. Security

We protect data in transit with TLS/HTTPS and at rest with encrypted storage and access controls. No method is 100% secure, but we take reasonable measures.

10. Changes to This Policy

We may update this Policy. For material changes we will notify you in the App or by email. The "Last updated" date reflects the latest revision.

11. Contact

Mellivo OÜ · Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551 · Email: studio@mellivoai.com