Privacy Policy
Summary. Storywright does not ask for your name, email address, phone number or location, does not show ads, and does not use third-party advertising or analytics SDKs. The app creates an anonymous account tied to a random identifier generated on your device. The stories you write, your nickname, your likes and basic usage statistics are stored on our server so that the service can work. Text you enter is sent to third-party AI providers to generate and edit stories and covers. You can delete everything by emailing [email protected].
1. Who we are
Storywright is operated by an individual developer based in Poland (the "Operator", "we", "us"). The Operator is the data controller for the personal data described in this policy. You can reach us at [email protected].
2. What the app does
Storywright lets you choose a genre, a year and a short premise, and generates a short story with a cover using artificial intelligence. You can edit paragraphs with AI, keep stories in your library, share them with selected people or publish them to a weekly public chart where other users can like them.
3. Data we collect
| Data | Where it comes from | Why we need it |
|---|---|---|
| Anonymous device identifier — a random UUID generated by the app on first launch. It is not the Apple advertising identifier (IDFA) and is not shared with advertisers. | Generated on your device | To create and recognise your anonymous account without asking you to register |
| Nickname — chosen by you; a random nickname is assigned until you change it. | You | To label your published stories and let other users find you for sharing |
| Story content — genre, year, premise, generated and edited text, titles, edit instructions, edit history, cover images and cover prompts. | You and the AI providers | To generate, store and display your stories |
| Visibility and sharing settings — private, shared with selected users, or public; the list of users a story is shared with. | You | To show stories only to the people you chose |
| Likes — which public stories you liked. | You | To rank the weekly chart and show your own likes |
| Usage counters — number of generations, edits and cover regenerations per day. | Server | To enforce fair daily limits |
| Server logs and usage statistics — request type and time, response status, IP address, app version and language, as recorded by our backend. | Server | To keep the service secure, diagnose errors and understand how the app is used. We do not use third-party analytics SDKs inside the app. |
| On-device preferences — language, light/dark theme, whether you completed onboarding, a local copy of your library and drafts. | Stored only on your device | To make the app work offline and remember your settings. This data never leaves your device. |
We do not collect your name, email address, phone number, contacts, photos, precise or approximate location, or payment information. The app does not request access to the camera, microphone, photo library, contacts or location.
4. How we use artificial intelligence and who processes your data
To generate and edit stories and covers, our server sends your premise, the text of the story being edited, your edit instruction and a short cover description to third-party AI providers. Depending on configuration, these are:
- Anthropic, PBC (United States) — story text and paragraph edits;
- OpenAI, L.L.C. (United States) — cover images;
- OpenRouter, Inc. (United States) — a routing service that forwards requests to the AI model selected by us.
We send only the content needed for the request. We do not send your device identifier, nickname, IP address or any other account data to the AI providers. The providers process the text under their own terms and privacy policies, as processors acting on our instructions, and their API policies state that content submitted through their APIs is not used to train their models.
Our server and database are hosted with a third-party hosting provider. Transfers of personal data outside the European Economic Area, including to the United States, rely on the European Commission's standard contractual clauses or an adequacy decision, as applicable to each provider.
5. Legal bases (GDPR)
- Performance of a contract (Art. 6(1)(b)) — creating your account, generating and storing stories, sharing, publishing and liking.
- Legitimate interests (Art. 6(1)(f)) — security, abuse prevention, fair-use limits, error diagnostics and aggregated usage statistics.
- Legal obligation (Art. 6(1)(c)) — where we must retain or disclose data by law.
6. Public content
If you publish a story to the weekly chart, its title, text, cover, your nickname, the genre, the year and the like count become visible to all users of the app. Stories you share with selected people are visible only to those users. Private stories are visible only to you. You can unpublish a story at any time from the app; it will disappear from the chart.
7. Retention
- Account data, stories, covers and likes are kept until you delete them in the app or ask us to delete your account.
- Server logs are kept for up to 90 days.
- Generation jobs are kept in server memory for about one hour and are then discarded.
- Data stored on your device is removed when you delete the app.
8. Your rights
Under the GDPR you have the right to access, rectify, erase and port your data, to restrict or object to processing, and to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl).
Because the account is anonymous, we identify you by the device identifier stored in the app. To exercise your rights, email [email protected] from the device, or include your nickname and the titles of your stories so that we can locate your account. We answer within 30 days.
Deleting your account and data
You can delete individual stories in the app (Library, swipe left). To delete your whole account including all stories, covers, likes and usage counters, email [email protected] with the subject "Delete my Storywright account". We delete the data within 14 days and confirm by email. Deleting the app from your device removes the local copy of your library but does not by itself delete server data.
9. Security
All traffic between the app and our server is encrypted with TLS. Access to the server is restricted to the Operator. Your session token is stored on your device and can be reset from the app.
10. Children
Storywright is intended for users aged 17 and older. We do not knowingly collect personal data from children. If you believe a child has used the app, contact us and we will delete the related data.
11. Changes
We may update this policy as the app evolves. The effective date at the top shows the latest version. Material changes will be announced in the app or on this page before they take effect.
12. Contact
Email: [email protected]
Web: storywrightaiapp.com