Privacy Policy

This Privacy Policy applies to the Storis app for mobile devices (the "Application"), developed by Franciszek Czajka under the name Lapwing Software (the "Service Provider") as a Freemium service. The Application is provided "AS IS". By using Storis, you agree to this Privacy Policy.

This policy is effective as of 2026-05-22.

Information the Application obtains and how it is used

You can use the included offline stories without registering. Some features require an account, including Premium, story generation, generated story library access, purchase restore, cross-device reading progress, category management, account management, and feedback.

Depending on how you use Storis, we may process:

Account data, such as email address, Supabase user ID, username, authentication provider identifiers, authentication session data, and profile metadata received from email/password, Google Sign-In, or Sign in with Apple.
Story generation data, such as story idea, category, optional character name, requested reading length, universe name, whether the story is part of a universe, Magic Wand usage, generated story title, description, paragraphs, main character, ambient track, sound-effect tags, creation time, and related server-side audit records.
Reading progress, such as story ID, words read, completion status, and update time, so you can resume stories.
User categories, such as category name, icon, sort order, and timestamps.
Premium and purchase data, such as RevenueCat app user ID, original app user ID, entitlement ID, product ID, store, purchase date, expiration date, renewal/cancellation status, webhook event IDs, and subscription sync metadata. Payment card details are handled by Apple, Google, and/or RevenueCat and are not collected directly by Storis.
Feedback data, such as name, subject, message, account ID, submission timestamps, quota/cooldown information, and limited request metadata such as origin and user agent where available.
On-device data, such as theme preference, onboarding completion, local reading progress, generated story cache, Supabase session data, and local speech recognition model files used by the read-aloud feature.

We use this information to provide and secure the Application, authenticate users, generate and save stories, synchronize reading progress, manage Premium access, restore purchases, prevent abuse, enforce rate limits, respond to feedback, maintain service reliability, and comply with legal obligations.

Microphone and read-aloud processing

Storis may request microphone permission so the read-aloud feature can listen while a story is being read. Based on the current app code, microphone audio is processed on the device using an offline speech recognition model. Storis does not upload, save, or share microphone audio or live transcripts. The app uses recognized words to update reading progress.

You can decline microphone permission and continue using other parts of the Application. You can later change microphone permission in your device settings.

Information collected automatically

The Application does not currently include Firebase Analytics, Crashlytics, third-party advertising SDKs, push notifications, precise location access, camera access, photo library access, or contacts access.

Some technical information may still be processed automatically by the Application, app stores, and service providers, including IP address, device type, operating system, app/platform logs, request headers, transaction identifiers, purchase tokens or receipts, and security or abuse prevention logs.

Location information

Storis does not request or collect precise GPS location. Service providers may infer approximate location from IP address as part of normal network, fraud prevention, security, or payment processing operations.

AI story generation

Premium story generation sends the story request data needed to create the story to a Supabase Edge Function, which calls OpenAI to generate the story. This may include the story idea, category, character name, reading length, universe name, whether Magic Wand was used, and limited context such as previous character names in the selected universe. Generated stories and related prompt context are stored in Supabase for your account.

Please avoid entering sensitive personal information into story prompts, character names, universe names, categories, or feedback messages.

Third-party access to information

We do not sell personal data. We share information only as needed to operate the Application, provide user-requested features, process purchases, prevent fraud or abuse, comply with law, or protect the Application and its users.

The Application integrates with these third-party services:

Children's privacy

Storis is intended to be used by parents, guardians, or caregivers with children. Account creation, Premium purchases, story generation, and feedback should be handled by an adult or with adult supervision. We do not knowingly collect personal information from children without appropriate parental or guardian consent.

If you believe a child has provided personal information through Storis, contact the Service Provider so the information can be reviewed and deleted where appropriate.

Data retention and deletion

Account data, generated stories, categories, feedback, reading progress, and subscription state are generally kept while your account is active or as needed to provide the Application. On-device data remains on your device until you clear app data, uninstall the Application, or the app overwrites the cached data.

If you delete your account in the Application, Storis deletes the Supabase auth user and user-owned server records that are linked to that account, such as profile, categories, generated stories, reading progress, feedback, and subscription rows. Some limited records may be retained where needed for legal, security, audit, anti-fraud, payment, or service integrity purposes, such as account deletion audit records and purchase/webhook records.

Your choices

You can sign out at any time from the Application.
You can change your username, email, or password from account settings.
You can request account deletion from account settings.
You can manage microphone permission in your device settings.
You can manage or cancel subscriptions through Apple, Google, or RevenueCat Customer Center where available.
You can clear local app data by using your device settings or uninstalling the Application.

International transfers

The Service Provider and third-party providers may process information in countries other than the country where you live. These countries may have different data protection rules.

Security

Storis uses Supabase authentication, database row-level security, secured Edge Functions, and service-provider security controls to help protect user data. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Changes to this policy

The Service Provider may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

Contact

For questions about these Terms, contact the Service Provider through the contact email address at lapwingsoftwarestudio@gmail.com.