How we look after your family's data

Account security

• Sign in with email + password or Google. Passwords are hashed by our authentication provider — we never see them in plain text.
• Sessions use short-lived tokens that refresh automatically and are revoked on sign-out.
• Database access is gated by row-level security so each account only ever sees its own stories, voices, and recordings.
• Privileged operations (publishing scheduled stories, generating daily content) are protected by server-side secrets that never reach your browser.

What we store, and where

• Account profile. Display name, email, and (optionally) a Google profile picture.
• Voice samples. Audio you record for a voice profile, kept in a private bucket and served only via short-lived signed URLs.
• Stories. Stories you create or save, plus generated narrations and illustrations. Your own stories are private to your account. Curated stories on our public catalog are intentionally readable as marketing previews — only the first two paragraphs of the body text are exposed to anonymous visitors.
• Subscriptions. Plan status and billing identifiers from our payment processor. We do not store full card numbers.

Third parties we rely on

We use a small number of trusted providers to make StoryNests work:

• Lovable Cloud / Supabase — database, authentication, and storage.
• Stripe — subscription billing.
• ElevenLabs — voice cloning and narration synthesis.
• Resend — transactional email (sign-in links, invitations).
• Google Search Console — search performance analytics for our public pages.

Your choices

• Delete a voice, story, or recording at any time from your library. Files are removed from storage on deletion.
• Cancel your subscription from the Account page. Your data stays available so you can reactivate later.
• Request full account deletion by emailing us at the address below. We'll confirm and remove your data within 30 days.

Children's privacy

StoryNests is designed for parents and caregivers to create content for their children. Accounts are intended for adults (16+). We don't knowingly collect data directly from children. If you believe a child has created an account, please contact us so we can remove it.

Contact

Questions, security reports, or data requests: hello@storynests.life