Privacy Policy

Last updated: September 30, 2026

1. Introduction

At NeuroStories («we») we are committed to protecting the privacy of our users, especially the children and families who use our services. This Privacy Policy explains how we collect, use, disclose and protect your information.

2. Information we collect and how we collect it

We only collect what you type, choose or upload in the app:

  • Account information: email and name, when you sign in with Apple or Google.
  • Child profile: name, age, sex, interests and an optional photo.
  • Family members: names, relationship and optional photos, so they can appear in the stories.
  • What you write when you create a story: the challenge or the story idea. If you use voice dictation, your phone's system does the speech recognition; we never receive or store the audio.
  • The generated stories (text, illustrations and narration) and your usage preferences.

3. How we use your information

  • Generate personalized stories: the text, the illustrations, the family caricatures and the audio narration.
  • Check that the stories are safe and appropriate for the child's age.
  • Keep your story library and your subscription.
  • Send important service communications.
  • Comply with legal obligations.

4. Third-party artificial intelligence services

To create each story we send data to third-party artificial intelligence services. Before any data is sent, the app explains what is sent and to whom, and asks for your permission; without that permission nothing is sent. Each service only receives what its job needs:

  • Groq(runs the gpt-oss text model; OpenAI does not receive this data): receives the child's name, age, sex and interests, the names and relationship of family members, and what you write when you create the story. It uses them to write the story and check that it is safe. It does not use the data to train models and may keep technical logs for up to 30 days to fix errors or investigate abuse.
  • OpenAI: receives the photos of the child and family members, and the description of each scene of the story. It uses them to create the caricatures and the illustrations. It does not use API data to train models; it may keep it for up to 30 days to detect abuse, and only its authorized staff may review it for that purpose.
  • ElevenLabs: receives the story text, which includes the names of the child and of the family members who appear in it. It uses it to generate the audio narration. We have turned off the use of our data to improve its models.

All three act as data processors on behalf of NeuroStories, under data processing agreements that require them to use the data only to perform these functions, to protect it with the same or equal protection as described in this policy, and to require the same from their sub-processors. The data is processed in the United States (OpenAI may also process it in other countries where it operates), with the European Union Standard Contractual Clauses safeguarding international transfers. We do not sell your data or your children's data.

Other providers

Amazon Web Services hosts the app and stores the data; Firebase sends notifications and RevenueCat manages subscriptions.

5. Your consent

You can withdraw your permission at any time by deleting your account from the app or by emailing us; from then on no more data is sent to these services.

6. Data security

We apply industry-standard security measures, including encryption at rest and in transit, access controls and regular security audits to protect your data.

7. Data retention and deletion

You can delete your account and data at any time from the app or by requesting it at neurostoriesmobileapp@gmail.com. See the Delete account & data page for details. We will delete all personal data within 30 days of your request.

8. Contact

If you have questions about this Privacy Policy, email us at: neurostoriesmobileapp@gmail.com