Privacy Policy
Last updated: 25 July 2026
1. Who we are and what this covers
Just Story It is operated by ETHERIX OÜ, Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia — the data controller for the personal data described here. This policy covers the Just Story It iOS app, Android app, the web app at app.juststoryit.net, and our marketing site juststoryit.net. Questions: [email protected].
2. What we collect
- Account data: your email address, display name, and which sign-in method you use (email & password, Google, or Apple). Passwords are handled by Firebase Authentication; we never see them in plain text.
- Content you write: your story requests and settings (genre, length, narrator) and any free text you add — custom story direction, custom characters, custom places.
- Content we generate for you: the stories, audio files, and cover images created from your requests, stored so you can listen again.
- Usage data: your listening progress, playlists, remaining listening minutes, and subscription plan and status.
- Purchase data: which subscription or top-up you bought, when, and on which platform — supplied to us by Apple, Google, or Stripe via RevenueCat. We never receive your full card number; payment instruments are held by Apple, Google, or Stripe.
- Analytics data: product events (sign-in, sign-up, story created, playback started, purchase completed, screens viewed) with device/browser type and coarse technical data, via Google Analytics for Firebase.
- Emails we send: transactional email (verification codes, welcome messages, and important service notices), and occasional news and offers about Just Story It. Marketing email is sent only where the law permits it, always contains an unsubscribe link, and stops as soon as you opt out. We record delivery state.
3. How AI is involved with your content
Stories are generated by artificial-intelligence providers acting as our processors. When you request a story, the text needed to generate it — your request, custom story direction, and custom characters/places — is sent to:
- OpenAI — writes the story text and narrates it (text-to-speech);
- Fish Audio — voices character dialogue lines;
- fal.ai — draws the cover image from a short scene description.
We send these providers only the content needed to generate your story — not your name, email, or account identity. We use their business/API services under terms that restrict use of the data to providing the service to us; we do not permit its use for advertising. If we change providers, we will update this list and the date at the top of this policy.
4. What we do not do
- We do not sell or rent your personal data.
- We show no advertising and share nothing with ad networks or data brokers.
- We do not track you across other companies' apps or websites.
- We do not record your voice; narration voices are synthetic.
5. Service providers we rely on
| Provider | What for |
|---|---|
| Google Firebase / Google Cloud | Sign-in, database, file storage for your stories and audio, hosting, server functions |
| Google Analytics for Firebase | Product analytics (see section 2) |
| Apple App Store / Google Play | Payment processing for purchases made in the mobile apps |
| Stripe | Payment processing for purchases made on the web |
| RevenueCat | Subscription management across all platforms |
| OpenAI, Fish Audio, fal.ai | AI generation of story text, narration, dialogue voices, and covers (see section 3) |
| Self-hosted email service (Plunk) | Delivery of verification and welcome emails |
6. Why we may lawfully use your data (GDPR legal bases)
- Performance of a contract: operating your account, generating and storing your stories, managing your subscription.
- Legitimate interests: product analytics, service security, and abuse prevention.
- Legal obligation: keeping purchase records for tax and accounting.
- Consent: where required — for example for marketing email; you can withdraw it at any time, and every marketing email includes an unsubscribe link.
7. Retention and deletion
We keep your data while your account exists. You can delete your account at any time in the app (Profile → Delete account): this immediately and permanently deletes your profile, stories, audio files, playlists, custom characters and places, and usage data. Records of purchases may be retained after deletion where tax or accounting law requires it. You can also request deletion by email at [email protected].
8. Your rights
Depending on where you live, you have rights to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise them, use the in-app tools or email [email protected]. In the EU/EEA you may lodge a complaint with your local supervisory authority or the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). California residents have equivalent rights under the CCPA/CPRA to know, delete, and correct; we do not "sell" or "share" personal information as those terms are defined there, and we do not discriminate for exercising your rights.
9. International transfers
Some of the providers in section 5 process data in the United States or other countries outside the EEA. Where they do, transfers are protected by recognised safeguards such as the EU Standard Contractual Clauses or the EU–US Data Privacy Framework.
10. Children
Accounts require the holder to be at least 13 years old, and we do not knowingly collect personal data from children under 13. Just Story It is designed so that a parent can play stories for a child from the parent's own account — the child needs no account and we collect no data about the child. If you believe a child under 13 has created an account, contact us and we will delete it.
11. Security
Data is encrypted in transit; access to production data is restricted by per-user security rules and limited internal access. No online service can promise absolute security, but we design so that your content is only reachable from your own account.
12. Cookies and local storage
The web app uses storage that is necessary to keep you signed in, remember device preferences (for example playback speed), and operate analytics as described in section 2. The marketing site is a static page served through a content-delivery network and loads fonts from Google Fonts; standard server logs apply. We use no advertising or cross-site tracking cookies.
13. Changes to this policy
When we change this policy we update the date at the top; for material changes we will notify you in the app or by email before they take effect.
14. Contact
ETHERIX OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
[email protected]