Privacy Policy

Who we are

estori (“we”, “us”) is an independent project that operates this service at app.estori.ai. For any privacy question, or to delete your data, email support@estori.ai.

estori is a tool for parents. The account holder is an adult who creates stories starring their own child. We do not offer accounts to children and the app is not directed at children — a parent provides the information and controls the account.

The child's photo — held in memory, never stored

When you create a character, you upload a photo of your child. We send that photo to our AI image provider once, to generate a single cartoon illustration, and then we discard it. The original photo is never written to our database or storage — it lives only in memory for that one request.

What we keep is the AI-generated cartoon (a drawing, not your photo) plus the details you typed: the child's first name, optional age, optional character type, and an optional short description. That cartoon becomes the reusable reference for every page of every story.

What we store

• Your account email address (used to sign you in via a magic link).
• Characters you create: the AI-generated cartoon image and the name/age/character type/description you entered.
• Stories you generate: the text and illustrations.
• Print orders: the shipping address (recipient name, street, city, postal code, country, optional phone) you enter at checkout, plus order status.
• Billing records: your plan, credit balance, and Stripe customer reference. We never see or store your full card number — Stripe handles that.
• Basic usage analytics (see “Analytics” below).

Who we share data with (our processors)

We use a small set of trusted service providers to run estori. We only share what each one needs to do its job:

• Supabase — our database, file storage, and login, hosted in the EU. It holds your account, characters, stories, and orders.
• Stripe — processes subscription, credit-pack, and print payments. Stripe receives your payment details directly; we receive only a customer reference and the result.
• Lulu — our print-on-demand partner. When you order a printed book, we send Lulu the print file, your shipping address, and your account email (so they can contact you about your delivery) so they can produce and ship it. We share these only to fulfill that order.
• Google (Gemini) and OpenAI — generate the cartoon illustrations and story text. The child's photo is sent to the image provider only for the one-time cartoon generation, as described above.
• Resend — delivers the sign-in (magic-link) emails for our login system.
• Google Analytics 4, Meta, and PostHog (EU) — measure how the product is used so we can improve it.

Analytics & cookies

We measure product usage two ways. Server-side measurement is first-party and stores nothing on your device, except a small first-party cookie that remembers how you first found us (so we can understand which referrals work). Browser pixels (Google Analytics, Meta, PostHog) can set cookies, so they load only after consent (or, where the law allows it, until you opt out). We do not sell your personal data.

How long we keep data & how to delete it

We keep your account data while your account is active. You can ask us to delete your account and its data at any time by emailing support@estori.ai — we'll remove your characters, stories, and account. Some records tied to completed payments or print orders may be retained where we're legally required to (e.g. tax and accounting).

Where data is processed

Our database and storage are hosted in the European Union. Some processors (e.g. Stripe, our AI providers, analytics) may process data outside the EU under their own safeguards.

Your rights

You can request a copy of your data, ask us to correct it, or ask us to delete it. Email support@estori.ai and we'll help. If you're in the EU/UK, you also have the right to complain to your local data protection authority.

Changes to this policy

If we make a meaningful change, we'll update this page and the date below. Continuing to use estori after a change means you accept the updated policy.