Privacy Policy
Effective date: 2026-10-21 Status: Draft for controlled pilot; qualified privacy, child-data, education, and legal review is required before public advertising or school use.
Story Sprout is designed for adults to create and manage reading experiences for children. An adult parent, guardian, or authorized educator must create the account and enter learner information.
Information we collect
We collect the adult account email, display name, account role, learner first name, age range, interests, topics to avoid, generated stories, reading progress, consent records, and subscription status. We do not ask children to create accounts.
How we use information
We use this information to authenticate adults, create age- and grade-appropriate stories, connect stories to selected reading practice objectives, save reading activity, provide support, process subscriptions, and improve safety and reliability. These connections are instructional aids, not formal educational determinations.
AI processing
When an adult enables AI story generation, story prompts and the information needed to tailor a story are sent to OpenAI for processing. Do not enter a child's full name, contact information, medical information, or other unnecessary sensitive information.
Payments and vendors
Stripe processes payment details and subscription billing. Railway hosts the application. PostgreSQL stores application data. OpenAI processes enabled AI story requests. Story Sprout does not store payment card numbers.
Retention and deletion
We retain account and learner data while the account is active or as needed to provide the service, meet legal obligations, resolve disputes, and maintain security records. An adult can request deletion from Privacy & data settings. Account deletion removes the account, learner profiles, stories, progress, and subscription records from the application database, subject to limited legally required records and provider retention.
Generated stories are kept as drafts until a parent chooses to save them; unsaved drafts are deleted automatically after 30 days, and deleted stories are removed from our systems and age out of backups within 30 days.
Access and export
An authenticated adult can request an account data export. Adults are responsible for reviewing exported data and keeping it secure.
Children and schools
Story Sprout is an adult-managed service. Before use with children under 13 or by a school, the responsible organization must complete its required privacy, parental-consent, procurement, COPPA, FERPA, and state-law reviews. This policy is not a certification of legal compliance.
Contact and changes
For privacy questions or requests, use the Support form. We may update this policy and will publish the new effective date.