Last updated: October 31, 2026
The data controller is L41 INVEST, a French limited liability company (SARL) with share capital of €1,000, registered with the Nanterre Trade and Companies Register under number 912 298 411, with its registered office at 8 boulevard du Colonel Fabien, 92240 Malakoff, France, publisher of the StoryForKid service. Telephone: +33 7 80 95 70 85. Email: .
We collect the following categories of data:
⚠️ Important: We do not collect the child's last name or address. The date of birth is optional: if you enter it, it stays in the profile and is only used to work out the age range; it is never sent to the artificial intelligence providers. The first name may be a nickname.
The Service uses several artificial intelligence providers to write and illustrate stories. The child's profile data (first name or nickname, age range, gender, interests, personality traits, a description of their appearance such as hair and eyes) and any free text you type to build a story are sent to them, only after your explicit consent given in the app before the first child profile is created (see the consent screen):
This data is limited to what is necessary to create the story you asked for. We never send these providers your email address, your account or device identifiers, or your location.
If the parent chooses to add a photo of their child, a separate consent, distinct from the one in section 5, is requested before the first transfer:
Your data may be shared with:
The artificial intelligence providers (Anthropic, Google, ElevenLabs), RevenueCat and Vercel may process your data outside the EEA, in particular in the United States. In that case, appropriate safeguards are put in place (European Commission Standard Contractual Clauses, adequacy decisions).
We never sell your personal data to third parties.
We implement appropriate technical and organizational measures to protect your data:
In accordance with the General Data Protection Regulation (GDPR), you have the following rights:
To exercise these rights, contact us at: . We will respond within 30 days.
You also have the right to lodge a complaint with the CNIL (the French data protection authority):
The Service only uses trackers that are strictly necessary for it to work: the browser's or the app's local storage keeps your login session, your language choice, and a copy of child profiles, stories, the parent profile and credits, for faster display. We use no advertising cookies and no tracker that follows you from one site to another.
Audience measurement. Only the public home page of www.storyforkid.ai and the creation of an account on the website are measured, with Vercel Web Analytics (Vercel, which already hosts the website). This measurement uses no cookie and creates no profile: Vercel identifies a visitor by a hash computed from the request, not by a cookie, and a visitor's session is not kept, it is discarded automatically after 24 hours. It only produces aggregated figures: visits to the home page, clicks on our buttons, openings of the sign-in window and the number of accounts created, by sign-up method (email, Google or Apple), with no identity. Each measurement is recorded with the date, the site the visit came from, the approximate location (country, region, city), the operating system, the browser and the device type. Before sending, each address is reduced to the home page address, keeping only its campaign parameters (utm_*, ref): a sign-up completed on another page is therefore recorded under the home page address. Vercel states that this data is not tied to any person or IP address.
The rest of the Service, including the app on the web and on iPhone, measures nothing: the pages you open in the app, your stories and your children's profiles are neither counted nor sent to a measurement service, and the iPhone app contains no audience measurement.
In accordance with the GDPR (Art. 8) and French law, processing the data of children under 15 requires the consent of the holder of parental authority. Our Service is designed to be used under the parents' responsibility: before the first child profile is created, the parent gives explicit consent in the app to sending the child's data to the artificial intelligence providers (section 5), and a separate consent before adding a photo (section 6). Without this consent, our servers refuse any generation.
For families in the United States, section 13 describes our practices under COPPA.
StoryForKid is a service designed for children and used under the responsibility of their parents. This section describes our practices under the Children's Online Privacy Protection Act (COPPA), the United States law protecting children's privacy online. It supplements the other sections of this policy.
Operator. L41 INVEST, 8 boulevard du Colonel Fabien, 92240 Malakoff, France; telephone: +33 7 80 95 70 85; email: .
Information about the child. The parent, as the account holder, enters the child's first name, age range or date of birth, gender, eye colour, hair description, personality traits and interests, as well as one or more photos if they choose to add them. The service also retains the stories created for the child (text, illustrations, audio narration), scheduled story settings, and the choices made during an interactive story.
We do not ask the child for any personal information. Free-text fields (child profile, building a story, editing a story's text, story reviews, general app feedback, reporting a problem, contact form) are meant for the parent; the story review, the general feedback and the problem report only open after a parental gate check. The app does not access the microphone and never records the child's voice.
Public availability. The child cannot make any information public. Only the parent can publish a story to the community, from the website, after a parental gate check; publishing is not offered in the iPhone app. The child's first name is removed from the title and text of the published copy. The illustrations are reused as they are: the cover may show the original title, and therefore the child's first name, and if the character was drawn from a photo, it may resemble the child. The parent can withdraw a publication at any time.
Use. This information is used only to create and display the personalized stories, their illustrations and narration, to manage scheduled stories and their reminders, and to provide support and keep the service secure. We show no advertising, build no advertising profile, and sell no information.
Disclosure to service providers. To produce a story, we share certain information with providers. Supabase hosts the service and your account data (Paris region). Only after your explicit consent (see section 5): Anthropic writes and checks most of the story text; Google (Gemini) creates the illustrations, letters the child's first name on the cover illustration, and also receives the child's photo as a reference image if the parent has added one (separate consent, see section 6); ElevenLabs creates the audio narration, from the story text only. We send these artificial intelligence providers only the child's first name, age, preferences and appearance description, the story text and, where applicable, their photo, and only to generate the stories, illustrations and narration. These transfers are essential to the service: without them, no story can be created. Payment and login providers receive no information about the child. If the parent publishes a story from the website, a copy becomes public: anyone visiting the website can read it without an account, and it may be featured on the home page (see Public availability above).
Identifiers. The service uses the parent's account identifier for its internal operation (login, library, purchases). The in-app purchase management provider receives the device's vendor identifier to process purchases. No identifier is used for behavioral advertising or to build a profile.
Retention. We keep information about the child only for as long as necessary for its purpose, never indefinitely:
Your rights as a parent. You can, at any time:
We respond to requests sent by email () within 30 days, after verifying that they come from the account holder.
Material changes. Before any material change to how we collect, use, or share children's information, we will notify the parent by email and, where required by law, ask for their consent again.
We may modify this privacy policy. In the event of a material change, we will inform you by email. The date of the last update is shown at the top of this page.
For any question regarding the protection of your data: . L41 INVEST, 8 boulevard du Colonel Fabien, 92240 Malakoff, France. Telephone: +33 7 80 95 70 85.