Privacy Policy

What We Collect

We only collect what you choose to give us. That includes:

• Account information — your name, email address, and password so you can sign in.
• Your stories — the text you type, the handwritten pages you scan, and the voice recordings you make. These are the heart of StoryVault.
• Photos — any images you upload to include in your memoir.
• Usage data — basic information about how you use the app (like which features you use most) so we can make StoryVault better. We don't track you across the web.

How We Use It

Your data is used for one purpose: to provide and improve StoryVault for you.

• We process your scans and recordings using AI to transcribe and organize your stories.
• We use AI to help generate your memoir, always preserving your voice and your words.
• We never use your stories, photos, or recordings to train AI models. Your content is processed, not learned from.
• We use anonymized usage data to understand how to make the app more helpful.

Who Can See It

Only you and the people you invite.

• Your stories are private by default. No one at StoryVault reads your content unless you ask us for help.
• If you invite family members, they can see only the projects you share with them.
• We never sell, rent, or share your personal data with advertisers or data brokers. Period.
• We may share anonymized, aggregated data (like "80% of users prefer voice recording") but this can never be traced back to you.

How We Protect It

We take the security of your stories seriously.

• Encryption at rest — your data is encrypted when stored on our servers.
• Encryption in transit — all data sent between your device and our servers is encrypted using TLS.
• We use trusted, secure cloud infrastructure with regular security audits.
• Access to your data within our team is strictly limited and logged.

Your Rights

Your stories are yours. You have the right to:

• Access — see all the data we have about you at any time.
• Export — download all your content in standard formats whenever you want.
• Delete — permanently remove your account and all associated data. When you ask us to delete your data, we actually delete it.
• Correct — update or fix any personal information.

We comply with GDPR, CCPA, and other applicable privacy regulations. If you're in the EU, you also have the right to data portability and the right to object to processing.

Contact Us

If you have any questions about this policy or your data, we'd love to hear from you:

support@storyvault.app

We aim to respond to all privacy-related inquiries within 48 hours.