Privacy at StoryFirefly.

What this notice covers

This Privacy Notice applies to the StoryFirefly website, account, story-creation, checkout, and book-fulfillment experiences that link to it (together, the “Service”). It does not apply to third-party websites or services that have their own privacy notices.

A parent, legal guardian, or other authorized adult manages the account and decides what information to provide for a child’s story. This notice describes information submitted by that adult as well as information generated through use of the Service.

Information we may handle

Information an adult provides

• Contact and account information, such as a name, email address, sign-in details, and waitlist preferences.
• Story and character content, including prompts, themes, reading preferences, a child’s optional character details and photos, other uploads, and generated stories or illustrations.
• Order and delivery information, such as the selected product, price, payment status, shipping address, delivery option, tax, and fulfillment status. Payment card details are collected directly by the payment provider; StoryFirefly does not receive the full card number.
• Communications, including questions, feedback, support requests, and privacy requests.

Information generated when the Service is used

Hosting and security systems may process technical information such as IP address, browser and device type, timestamps, referring pages, requested URLs, and diagnostic or security events. With permission, the public website may also use analytics storage to understand page views and interactions such as clicks that open the StoryFirefly application. Advertising storage and ad personalization remain disabled.

Why information is used

We may use information to:

• Provide, personalize, and maintain requested story features.
• Generate, save, and deliver stories and illustrations.
• Calculate order totals, process payments, and fulfill and ship books.
• Authenticate adult users and protect accounts.
• Respond to support, safety, and privacy requests.
• Understand reliability and improve the Service.
• Measure website visits and story-creator clicks when analytics permission has been granted.
• Prevent fraud, abuse, security incidents, and illegal activity.
• Meet legal obligations and enforce applicable terms.

Children’s privacy

StoryFirefly is made for family storytelling, but the account relationship and submission of personal information are intended for adults. Children under 13 in the United States should not create accounts or submit personal information directly.

Where applicable law requires parental authorization before a child’s information is collected, StoryFirefly will seek that authorization or will not collect the information. A verified parent or guardian may ask to review, correct, or delete a child’s personal information and may withdraw permission for further collection.

If you believe a child submitted personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

AI and creative content

StoryFirefly uses automated systems to help turn prompts and creative choices into story text and illustrations. Story content may be processed by specialized service providers acting on our behalf to deliver those requested features.

Automated output can be unexpected. Adults should review each story before sharing it with a child. StoryFirefly does not use story content to make decisions that produce legal or similarly significant effects about a child or family.

When information may be shared

Information may be disclosed:

• To infrastructure, security, communications, and AI-generation providers that process information to operate the Service.
• To payment, printing, fulfillment, and delivery providers when needed to complete an order requested by an adult user.
• To an analytics provider for consented website measurement, with advertising storage and personalization disabled.
• When required by law or reasonably necessary to protect people, rights, safety, and the integrity of the Service.
• In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality protections.
• At an adult user’s direction or with their consent.

StoryFirefly does not sell personal information and does not share personal information for cross-context behavioral advertising.

Retention and security

We retain information only for as long as reasonably needed for the purposes described in this notice, including providing the Service, honoring deletion requests, maintaining security, resolving disputes, and meeting legal obligations. Retention can vary by information type and account status.

Limited records may be retained where required for completed transactions, fraud prevention, security, tax, accounting, or other legal obligations. Residual copies may also remain in protected backups until they are overwritten through the normal backup cycle. We do not restore deleted content to active systems except when needed for disaster recovery, security, or legal compliance.

We use administrative, technical, and organizational safeguards designed to protect information. No online service can promise absolute security, so families should avoid submitting information that is not needed for the story.

Your privacy rights

Depending on where you live, you may have rights to know about, access, correct, delete, or receive a copy of personal information; object to or restrict certain processing; withdraw consent; or opt out of certain sale, sharing, or targeted advertising activities.

Regardless of where you live, StoryFirefly provides a way to ask for deletion of your account and the personal content associated with it. Email us from the address connected to your account with “Delete My Data” in the subject line. We will verify that you are the account holder or authorized parent or guardian before completing the request.

We may need to verify your identity and authority before fulfilling a request. We will not discriminate against you for exercising an applicable privacy right.

You can accept, decline, or revisit optional analytics through the “Analytics choices” control in the site footer whenever analytics is enabled.

International processing

StoryFirefly and its service providers may process information in the United States and other countries. Where required, we use recognized safeguards for international transfers and provide information about those safeguards upon request.

Changes to this notice

We may update this notice as StoryFirefly evolves. We will post the updated version here, change the “Last updated” date, and provide additional notice when required for material changes.

Questions or privacy requests

Contact StoryFirefly if you want to delete your account and associated family content, have a privacy question, want to exercise another applicable right, or believe a child provided information without appropriate authorization.