What Storyfold knows about you.

Storyfold collects the minimum information needed for your kid to make and share pages. We don't sell data, we don't use AI on your kid's content, and we don't show ads. Photos stay on Vercel's servers, page content stays on Neon's database, account information stays with Clerk. That's it.

• Account info — your kid's sign-in identifier (Apple ID, Google account, or email), name and profile picture if provided. Managed by Clerk.
• Their chosen handle — the slug that appears in published URLs (e.g. /p/erik/my-trip).
• Their pages — titles, text, theme selection, and reaction counts, stored in our Neon Postgres database.
• Their photos — any image they upload as a cover or in a section, stored in Vercel Blob. Photo files are kept until the kid deletes the page.
• Parental contact email — collected once at sign-up so we can notify the grown-up when something is published or reacted to.

• No AI on kid content. We do not feed your kid's writing or photos to any AI model — ours or anyone else's. No generation, no moderation, no suggestions, no analysis.
• No third-party advertising. No ad networks, no analytics that build a profile of your kid, no behavioral tracking.
• No selling data. Your kid's information is not sold, rented, or shared with marketers.
• No public listing. Published pages are unlisted (noindex) — only people with the link can see them.
• No free-text comments. Visitors can only react with one of four emoji. No text means no abuse vector.

Storyfold includes a search button that lets your kid find free stock photos from Unsplash(e.g. “puppies”, “dinosaurs”). Here's what happens when your kid uses it:

• What goes to Unsplash: only the search query string (e.g. “puppies”). Your kid's identity, IP address, account info, and existing page content are NOT sent. The request is made from our server, so Unsplash sees our server's address — not your kid's iPad.
• Kid-safe filtering: we send Unsplash's strictest content filter (content_filter=high) with every search. We also block ~70 unsafe search terms (weapons, violence, drugs, scary imagery, hate symbols) on our side BEFORE the query reaches Unsplash.
• When a photo is imported: Storyfold downloads the chosen photo, re-hosts it on our Vercel Blob, and uses our copy from then on. The photo lives with the page even if it's later removed from Unsplash.
• Attribution: per Unsplash's terms, we preserve the photographer's name in the photo's alt text and credit them on the OG share card when the page is shared.
• Tracking: when a photo is imported, we ping Unsplash's download endpoint as required by their API rules. This tells Unsplash “this photo was used” but does NOT include your kid's identity.

Unsplash photos are licensed under the Unsplash License — free for personal and commercial use. Your kid keeps the right to use any photo they import as long as Storyfold continues to host it.

The Storyfold codebase is written with the help of AI coding assistants (Claude, GitHub Copilot). These tools see the code we're writing — they do NOT see, store, or process your kid's account information, writing, or photos. AI is part of how we BUILD; it is not part of the product runtime.

Once Storyfold is deployed and your kid uses it, the path their content travels is: their iPad → our servers (Clerk, Neon, Vercel Blob) → their published page. No AI provider sits in that path.

• Your kid sees everything they've made.
• Anyone with the published URL sees the published page content.
• The grown-up email registered at sign-up gets email notifications.
• One administrator (the developer) can see a list of all users and pages for safety/moderation, and can take down content that violates the rules.

Your kid can:

• Delete a single page from inside the editor — this also removes its photos.
• Delete their entire account from Manage account → Security → Delete account in the user menu. All their data (pages, photos, account record) is removed.

If you'd like us to delete data manually, email hello@studiopractice.io.

• Account & auth: Clerk (US-based, SOC 2).
• Page text + reactions: Neon Postgres, US East region.
• Photos: Vercel Blob (Vercel's global CDN).
• Server logs: Vercel (standard request logs, 24h retention).

Storyfold is built for kids. We collect the minimum information needed for the app to function and require a parental approval step before any content is published publicly. If you believe your child signed up without your consent and you'd like the account removed, email hello@studiopractice.ioand we'll handle it within 5 business days.

If we ever change what we collect or how we use it, we'll update this page and email the registered parental contact before the change takes effect.

Questions, requests, or anything that doesn't feel right: hello@studiopractice.io

Storyfold is built and operated by Studio Practice (sole proprietorship), San Mateo, CA.