In the Storyin the story

Privacy Policy

1. Information We Collect

We collect minimal data necessary to operate the platform and improve the experience of readers and authors:

  • Registration data: name, email, password, profile information
  • Usage information: reading progress and story interactions (saved locally on your device for continue-reading functionality)
  • Aggregate story statistics: anonymized choice data collected for statistical purposes to help authors understand story engagement (not linked to your identity)
  • Audio playback data: information about soundtrack and audio interactions within stories (for future feature improvements)
  • Technical data: device type, operating system, IP address, language preference
  • Payment information: processed entirely by third-party providers (Apple App Store, Google Play Store); we do not store your payment credentials
  • Website analytics data: pages visited and site interactions on our public website, collected via Google Analytics 4 subject to your cookie consent (see our Cookie Policy)

2. How We Use Your Data

We use your information to:

  • Allow access and operation of the application;
  • Authenticate your account and maintain session security;
  • Save your reading progress locally on your device;
  • Provide technical support and improve our services;
  • Measure website traffic and improve our public website (subject to your cookie consent);
  • Process reader purchases and royalty payments to authors;
  • Generate anonymized, aggregate statistics for authors about story engagement;
  • Send relevant communications (with your consent);
  • Comply with legal obligations;
  • Protect the security and integrity of the platform.

3. Legal Basis for Processing

We process your data based on:

  • Contract fulfillment: when you create an account and use our services;
  • Consent: for marketing communications and optional data collection;
  • Legitimate interests: to improve our services, generate aggregate statistics, and ensure platform security;
  • Compliance with legal obligations: tax records, fraud prevention, and law enforcement requests.

4. Data Sharing

We do not sell, rent, or trade your personal data. We do not use cookies or tracking technologies for advertising purposes. We share data only in the following limited circumstances:

  • With Apple and Google for processing in-app purchases through their respective stores;
  • With Firebase (Google) for authentication services;
  • With Google (Google Analytics 4) for aggregate website usage analytics, subject to your cookie consent;
  • With Amazon Web Services (AWS) for hosting and infrastructure;
  • When required by law, court order, or competent authorities;
  • With authors in anonymized, aggregate form only (e.g., total readers, choice statistics — never individual user data).

5. Data Storage and Transfers

Your data is stored on servers located in the United States, operated by Amazon Web Services (AWS). Content may be delivered through a Content Delivery Network (CDN) with edge locations in other countries to improve performance, but your personal data is processed and stored exclusively in the United States.

6. Data Security

We implement technical and organizational measures to protect your data against unauthorized access, alteration, or disclosure. These include encryption in transit (TLS), access controls, and secure server infrastructure. Your data is stored on secure servers with restricted access.

7. Data Retention

We retain your data according to the following schedule:

  • Account data (name, email, profile): retained while your account is active; deleted upon account deletion;
  • Reading progress and story state: stored locally on your device; removed when you uninstall the application or delete local data;
  • Reviews and ratings: retained indefinitely in anonymized form after account deletion (author name removed, content preserved for community value);
  • Payment records: retained as required by applicable tax and financial regulations;
  • Technical logs: retained for up to 90 days for security and debugging purposes.

8. Your Rights

You have the following rights regarding your personal data:

  • Access: request a copy of the personal data we hold about you;
  • Correction: request correction of inaccurate personal data;
  • Deletion: request deletion of your account and associated personal data;
  • Opt-out: revoke consent for marketing communications at any time;
  • Portability: request export of your account data in a standard format (note: locally-stored reading progress is already on your device);
  • Restriction: request that we limit processing of your data in certain circumstances.

To exercise these rights, contact us at contact@inthestory.app. We will respond within 30 days of receiving your request.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know what personal information we collect, use, and disclose;
  • Right to delete your personal information;
  • Right to opt-out of the sale or sharing of personal information — we do not sell or share your personal information for advertising purposes;
  • Right to non-discrimination for exercising your privacy rights.

To exercise these rights, contact us at contact@inthestory.app.

10. Children's Privacy

Our services require users to be at least 13 years of age. We do not knowingly collect personal data from children under 13. If we discover that we have collected personal data from a child under 13 without verifiable parental consent, we will take immediate steps to delete that information and terminate the associated account. If you believe a child under 13 has provided us with personal data, please contact us at contact@inthestory.app.

11. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify affected users by email and/or through the application within 72 hours of becoming aware of the breach. The notification will include the nature of the breach, the data affected, steps we are taking to address it, and recommendations for protecting yourself.

12. Changes to This Policy

We may update this policy periodically. When we make material changes, we will notify you by email or through a prominent notice within the application at least 30 days before the changes take effect. The most recent version will always be available in our application.

13. Contact Us

For questions about this policy or how we handle your personal data: