Last updated: February 2026
MyStory.Kids is committed to protecting the privacy of children and families. This policy explains how we collect, use, and protect your information.
We comply with the Children's Online Privacy Protection Act (COPPA). We do not knowingly collect personal information from children under 13 without verifiable parental consent. All child accounts are created and managed by parents or legal guardians.
Parent accounts: Email address and name via Google Sign-In, payment information (processed by Stripe), and story preferences.
Child profiles: First name, age range, and avatar emoji as provided by parents. The child's first name and age are used in AI story generation prompts sent to our AI service provider (X.AI/Grok). No direct data is collected from children.
Story generation data: Character names, identity preferences, and theme selections are sent to our AI service provider (X.AI) to generate personalized stories. These parameters are not stored by the AI provider beyond the generation request.
Generated content: Story parameters and generated stories are stored to provide the service.
We use collected information to generate personalized stories, process payments, improve our service, and communicate with parents about their accounts.
Data is stored securely using Supabase (PostgreSQL) with row-level security policies. Payment processing is handled by Stripe. We use industry-standard encryption and access controls.
Parents have full control over their children's data and can request deletion at any time. Parents can view, modify, or delete their child's profile and associated stories through their account settings.
We do not sell personal information to third parties. We use the following services:
X.AI (Grok): We send story parameters including character name, identity, and theme to generate story text and illustrations. X.AI processes this data according to their privacy policy.
Google: Authentication only. We receive your email and display name.
Stripe: Payment processing only. We do not store credit card information.
Parents may request complete deletion of their child's data including profile, stories, access codes, and all associated records by contacting support@mystory.kids or using the "Delete Child Profile" option in account settings. Data will be permanently removed within 30 days of request. This includes data shared with third-party AI services during story generation.
Account data is retained while the account is active. Upon account deletion, all associated data including child profiles and stories will be permanently removed within 30 days.
For privacy questions, data requests, or to exercise your rights, contact us at support@mystory.kids.