Privacy Policy
Last updated: 2026-04-21
Story Atlas is an iOS app that generates custom audio stories. This policy explains what data we collect and why.
Controller: Omer Burak Isik (sole trader), trading as Story Atlas, Danziger Str. 46, 10435 Berlin, Germany.
Contact: hello@storyatlas.app
Story Atlas is not affiliated with tonies® or Boxine GmbH.
1. Who uses Story Atlas
Story Atlas is for adults 18 and older. Children do not use the app and do not have accounts. The service is not directed to children. Data about a child that you enter is stored as part of your account, not collected from the child.
2. What we collect
In the app:
- Account data: email, display name, Apple/Google ID if used for sign-in.
- Subscription data: your tier and Apple's transaction ID. We never see card numbers.
- Profile data you enter: child's nickname, age, interests, content preferences.
- Story content: prompts you submit and stories we generate for your account.
- Voice recordings (Legacy tier only): see Section 5.
- App analytics and crash logs: app version, iOS version, session data, crash reports via Firebase Analytics and Crashlytics.
On the marketing website (storyatlas.app):
- Waitlist email: if you submit it, we store it in Notion to notify you at launch.
- Website analytics: via PostHog, only if you accept cookies. If you decline, no persistent tracking identifiers are stored.
3. How we use it
- Run your account and subscription
- Generate and deliver your stories
- Keep the app working (crash reports, abuse prevention)
- Comply with tax and legal obligations
We do not sell your data. We do not train AI models on your data. We do not run ads.
4. Who we share it with
Each provider is under a Data Processing Agreement.
| Provider | Role |
|---|---|
| Google (Firebase, Vertex AI / Gemini, Cloud TTS, Cloud Storage, Analytics, Crashlytics) | Hosting, AI text, standard voices, app analytics |
| ElevenLabs (USA, SCCs) | Voice cloning (Legacy tier only) |
| Apple | Payments, Sign in with Apple |
| RevenueCat (USA, SCCs) | Subscription validation |
| Resend (USA, SCCs) | Transactional email |
| Notion (USA, SCCs) | Waitlist email storage (marketing website) |
| PostHog (USA, SCCs) | Marketing website analytics (consent-based) |
5. Voice cloning (Legacy tier only)
Voice recordings are biometric data under GDPR Art. 9 and need your explicit consent. Before any recording, you accept a separate Voice Biometric Consent inside the app.
- Your voice is used only to narrate stories in your account
- We do not share it except with ElevenLabs (our processor)
- Delete anytime: Settings → Voice → Delete my voice. Deletion within 30 days.
6. Your rights
You can access, correct, delete, or export your data, and withdraw consent at any time. Email hello@storyatlas.app — we respond within 30 days. You can also complain to your local data protection authority (EU / UK / Switzerland / US state).
7. How long we keep it
- Account data: while active, deleted within 30 days after you ask
- Voice data: while Legacy is active, deleted within 30 days of cancellation or withdrawal
- Logs: 90 days
- Payment receipts: 7 years (German tax law)
8. AI-generated content
All stories are AI-generated. We label them as such in the app and in the MP3 file metadata.
9. Changes
We update this policy when the product or law changes. Material changes are emailed at least 30 days in advance. Continued use after the notice period counts as acceptance.
10. Contact
Email: hello@storyatlas.app
Postal: Omer Burak Isik (Story Atlas), Danziger Str. 46, 10435 Berlin, Germany.