Privacy Policy
Last updated: August 23, 2026 (draft)
Who we are
Stogenai is operated by halaSpace, an unincorporated sole proprietorship of Ahmed Almurtadha, based in Türkiye (“we”, “us”). This policy explains what personal data we collect, why, and what rights you have over it.
What we collect
From the parent/account holder:
- Email address and a hashed password (we never store your password in plain text — see /security).
- Preferred language and timezone.
- Payment is handled entirely by our payment processor (Lemon Squeezy) — we never see or store your card number.
From child sub-profiles (created by a parent, under the parent's account):
- Display name and birth year only — not a full birthdate, and no other identifying information (data minimization).
- Content the child creates: stories, characters, drawings.
Generated automatically:
- Stories, character descriptions, and illustrations you ask us to generate.
- Usage logs (sign-in times, device/session metadata) used for security and abuse prevention.
- A push-notification device token, if you enable notifications on the mobile app.
Children's privacy and parental consent
Stogenai is a family product. Registering an account for a child under 13 requires a parent or guardian's email address; the child's account stays restricted (“Safe Mode” — private-only, no public sharing, no reference-photo uploads) until the parent confirms via an emailed link. Parents can review, edit, or delete their child's content and profile from the parent account at any time.
How your content is generated
When you create a story or drawing, the text and description you provide (title, character descriptions, your written beginning/ending) is sent to a third-party AI provider to generate the rest of the story and illustrations. Depending on what's configured, this may be OpenAI, Anthropic, or Google Gemini. These providers process the content to generate a response but Stogenai does not permit them to use your content to train their models beyond what their standard API terms provide. Generated content passes through an automated safety check before it is shown to you or stored.
Who we share data with
We use the following third-party processors, each only for the specific purpose listed:
- OpenAI / Anthropic / Google Gemini — story text and image generation, content moderation.
- Lemon Squeezy — subscription billing (they hold your payment details, not us).
- Cloudflare R2 (or equivalent object storage) — hosting uploaded/generated images.
- Postmark (or equivalent) — transactional email (verification, password reset, parental consent, payment receipts).
- Firebase Cloud Messaging — mobile push notifications, if enabled.
- Sentry (or equivalent) — error monitoring, to help us fix bugs.
We do not sell your data, and we do not use it for third-party advertising.
How long we keep data
We keep account data for as long as your account is active. If you delete your account, we anonymize your personal information (email, name) immediately and stop processing it; some records (e.g. billing history) may be retained longer where we're legally required to keep them.
Your rights
You can download a copy of everything tied to your account at any time from Account → Export my data, and permanently delete your account from Account → Delete my account. Depending on where you live, you may also have the right to correct inaccurate data or object to certain processing — contact us (below) to exercise those rights.
Cookies
We use strictly-necessary cookies to keep you signed in. With your consent (see the cookie banner), we may also use analytics cookies to understand product usage. You can change your choice at any time from the cookie preferences link in the site footer.
Contact us
Questions about this policy or your data: privacy@stogenai.com.