Privacy Policy

1.1 Information You Provide Directly

Account Information: When you create an account we collect your name, email address, username, and profile photo if you choose to upload one.

Content: Videos and media files you upload for processing, prompts and descriptions you enter, and generated reels and projects you create.

Payment Information: When you subscribe to a paid plan, payment is processed through Apple App Store or Google Play Store. We do not directly collect or store your payment card information. We receive confirmation of your subscription status through RevenueCat.

Communications: Messages you send us through support channels or feedback forms.

1.2 Information Collected Automatically

Usage Data: How you interact with the app, features you use, pages you visit, and actions you take.

Device Information: Device type, operating system version, unique device identifiers, and mobile network information.

Log Data: IP address, app crashes, performance data, and diagnostic information.

Push Notification Tokens: Device tokens used to send you notifications about your reel generation status and app updates.

1.3 Information from Third Parties

Google Sign-In: If you sign in with Google we receive your name, email address, and profile picture from Google.

Apple Sign-In:If you sign in with Apple we receive your name and email address (or Apple's relay email).

Social Media Connections: If you connect TikTok, Instagram, or YouTube accounts we receive access tokens to post content on your behalf. We store these tokens securely encrypted.

We use the information we collect to:

Provide Our Service

• Process your uploaded videos through our AI pipeline
• Generate reels based on your prompts and preferences
• Store your projects and generated content
• Send you notifications when your reels are ready

Improve Our Service

• Analyze usage patterns to improve features
• Debug technical issues and crashes
• Develop new features based on user behavior
• Monitor and improve AI generation quality

Communications

• Send transactional emails (account verification, password reset, billing notifications)
• Send push notifications about your reel status
• Respond to your support requests
• Send product updates (you can opt out anytime)

Legal and Safety

• Comply with applicable laws and regulations
• Detect and prevent fraud or abuse
• Enforce our Terms of Service
• Protect the rights and safety of our users

We do not sell your personal information to third parties. We share information only in these cases:

Service Providers

We share information with trusted third-party service providers who help us operate our service:

• Anthropic (Claude AI) — AI story generation and video analysis
• OpenAI (Whisper) — Audio transcription
• Amazon Web Services (S3) — Video file storage
• Supabase — Database hosting
• Upstash (Redis) — Job queue processing
• Resend — Transactional email delivery
• RevenueCat — Subscription management
• Firebase — Push notifications
• Pixabay / Freesound — Royalty-free music

All service providers are contractually obligated to keep your information confidential and use it only to provide services to us.

Social Media Platforms

When you connect social media accounts and choose to publish content, we share your video and caption with the selected platform (TikTok, Instagram, YouTube) on your behalf.

Legal Requirements

We may disclose your information if required by law, court order, or government authority.

Business Transfers

If Story-me is acquired or merges with another company, your information may be transferred as part of that transaction. We will notify you before this occurs.

Storage Location

Your data is stored on servers in the United States and European Union (EU). Video files are stored on Amazon Web Services S3.

Security Measures

We implement industry-standard security measures:

• Encryption in transit (HTTPS/TLS)
• Encrypted storage of sensitive tokens
• Regular security assessments
• Access controls and authentication

Video Files

Uploaded videos and generated reels are stored securely on AWS S3. Access is controlled via time-limited presigned URLs. Raw uploaded videos are retained to allow you to regenerate reels.

While we implement strong security measures, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Depending on your location you have these rights:

Access: Request a copy of your personal data.

Correction: Request correction of inaccurate data.

Deletion: Request deletion of your account and associated data. You can do this in Settings → Account → Delete Account.

Data Portability: Request your data in a machine-readable format via Settings → Account → Download Your Data.

Opt-Out of Marketing: Unsubscribe from marketing emails at any time via the unsubscribe link.

Push Notifications: Disable in Settings → Notification Preferences or your device settings.

Social Account Disconnection: Disconnect connected social media accounts at any time in Settings → Connected Accounts.

GDPR Rights (EU Users)

If you are in the European Union you have additional rights under GDPR including the right to object to processing and lodge complaints with your local data protection authority.

CCPA Rights (California Users)

California residents have additional rights under CCPA including the right to know, delete, and opt-out of the sale of personal information. We do not sell personal information.

To exercise any rights contact us at: storyme@vynoxe.com

Story-me is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent and believe your child has provided us with personal information please contact us at storyme@vynoxe.com and we will delete such information.

Our app integrates with third-party services. Each has their own privacy policy:

• Google
• Apple
• TikTok
• Meta/Instagram
• YouTube
• Anthropic
• OpenAI
• Amazon Web Services
• RevenueCat

We retain your data as follows:

• Account data: Until you delete your account
• Uploaded videos: Until you delete the project or your account
• Generated reels: Until you delete the project or your account
• Usage logs: 90 days
• Email logs: 30 days
• Deleted account data: Purged within 30 days

VYNOXE LLC is based in the United States. If you access Story-me from outside the US your information may be transferred to and processed in the US and other countries where our service providers operate.

For EU users: we rely on Standard Contractual Clauses (SCCs) as the legal basis for international data transfers.

We may update this Privacy Policy periodically. We will notify you of significant changes by:

• Sending an email to your registered address
• Showing an in-app notification
• Updating the "Last Updated" date above

Continued use of Story-me after changes constitutes your acceptance of the updated policy.