Privacy policy

CreateStories.app was dreamed up by Indra Dosooye, an 11-year-old author, and is his first step into entrepreneurship. Indra designed it, vibe coded it and product-managed it, with help from his dad, a software engineer. Meet Indra

CreateStories.app is run by Hive Ventures Ltd (company number 15933757), registered office Frymans, Frymans Lane, Brede, Rye, TN31 6HA, United Kingdom. We are the controller of your personal data under UK data protection law.

Only adults over 18 may sign up. Children may use an adult’s account under that adult’s supervision, not create their own accounts. Please help your child decide whose photos to add and which stories to share. You can ask us at any time to see or delete your child’s information.

• Account details: name and email address. We no longer ask for a birthday at signup. Birthdays and age groups provided before this change may remain on existing accounts until deleted.
• Terms agreement: your confirmation that you are over 18, the terms version you accepted, the date and time of acceptance, and whether acceptance was recorded at email signup or later in your account.
• Photos you add: face photos of the people in your stories. We shrink them before saving.
• What you make: characters, story plans, stories, and the pictures drawn for them.
• Purchases: which Story Tokens you bought and used. Card details go straight to Stripe, our payment provider; we never see or store them.
• Activity: records of each AI request (used to track our costs), safety check results, reports about shared stories, and how many times a shared story was opened.

• To draw your characters and illustrations, and to help write your stories.
• To check stories are safe before they are shared.
• To sign you in, take payments and send account emails.
• To keep a record of the adult account holder’s agreement to our terms.
• To answer questions and look into reports.

We do not sell your data, show ads, or use advertising or analytics trackers. Create Stories does not train AI on your photos or stories.

UK data protection law asks us to say which legal reason we rely on:

• To provide the service you asked for: your account, stories, photos, pictures and purchases.
• Our legitimate interests: safety checks, handling reports, preventing misuse and keeping track of our AI costs.
• Legal duties: keeping payment records.
• Permission from a parent or guardian: for children under 13, a parent or guardian must agree to their child using CreateStories.app.

CreateStories.app is made for children, so we keep things private by default:

• New stories are private. Nothing is shared unless you choose to share it.
• We never show ads, and we don’t build profiles of children for marketing.
• We don’t ask for your address, school or location.
• Readers of a shared story stay anonymous to its author unless they choose to show their name.

Before a story is shared or listed on the shelf, an AI safety check reads it. If the check blocks a story, it stays private, and the attempt is saved so we can review it. If you think the check got it wrong, email ppa.seirotsetaerc@olleh and a person will look at it.

Some companies process data for us so the app can work:

• Lovable hosts the app, its database and file storage, sends our emails, and passes requests to the AI models below.
• OpenAI draws pictures from your photos and story, and helps plan stories.
• Google (Gemini) helps write stories and runs the safety check.
• Stripe handles payments.

How long these companies keep data, and whether they use it to improve their own services, is set by their own terms.

Some of these companies process data in the United States and other countries outside the UK. Email ppa.seirotsetaerc@olleh to ask which safeguards apply to these transfers.

• Everything is sent over encrypted connections.
• Photos and pictures are stored privately, not on public web addresses.
• When you view a picture, the app opens it with a link that stops working within a day.
• Database rules stop one account from reading another account’s private stories.
• Changes made by our admins are logged.

If a data breach puts you at risk, we will tell you and the Information Commissioner’s Office as the law requires.

• Your stories are private unless you share one.
• A shared story can be read by anyone with its link. It shows the drawn characters, never the photos you uploaded. Each shared story must pass a safety check first, and you can stop sharing at any time.
• Other signed-in users can search for you by name or email to send a friend request. The results show your name and email address.
• Books you list on the shelf, lend or trade show your name.
• You can see how often your shared stories were opened. Readers’ names are only shown if they agree.

We keep your account and stories until you delete them. When you replace a picture or photo, the old file is deleted shortly afterwards.

When you delete your account we delete your photos, pictures, characters, stories and account details. We keep AI request records without your name, so they no longer identify you. We may keep payment records where the law requires it. Reports about shared stories are kept so we can deal with repeat problems.

Deleted data may stay in backups for a limited time until those backups expire.

We keep you signed in using your browser’s storage, and remember a story you have already opened or reported for the rest of that browser session. We don’t use advertising or analytics cookies, so there is no cookie banner. Stripe may set its own cookies on its payment page.

You can ask to see, correct, delete or download a copy of your data, or object to how we use it. A parent or guardian can do this for their child. You can delete your account yourself from your account page, or email ppa.seirotsetaerc@olleh. We reply within one month.

If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.

Email ppa.seirotsetaerc@olleh straight away. Tell us which story or account it is about. We look at these reports first, and we can remove a story or photo while we check.

If we change this policy we will update the date at the top of this page, and email you about important changes before they apply. Please also read our terms of service.