How we protect kids.

Storyfold is designed so a kid can't accidentally reach harmful content and a stranger can't reach the kid. Every choice — no comments, unlisted publishing, filtered photo search, parental approval, emoji-only reactions — is a deliberate guardrail. Here's exactly how each one works.

Kids can search for stock photos through Storyfold's built-in Unsplash integration. We layer two protections on every search:

1. Our blocklist (~70 terms). Before any query reaches Unsplash, we check it against a list of unsafe terms covering weapons, violence, blood, drugs, alcohol, cigarettes, sexual content, scary imagery, self-harm, and hate symbols. A blocked query returns zero results and is logged for admin review.
2. Unsplash's strictest content filter. We pass content_filter=high with every API call — Unsplash's most restrictive setting, removing adult and graphic content from results at the source.

Both layers run on every search. Even if Unsplash misses something their filter should have caught, our blocklist often catches it first. If something inappropriate ever slips through, parents and admins can take it down (see Reporting below).

When a kid uploads a photo from their iPad, the photo goes directly to our private Vercel Blob storage. We do not run AI analysis or moderation on uploaded photos — the kid is responsible for what they upload, and parents see every published page via email notifications.

What we restrict:

• Max 10 MB per photo (prevents abuse + keeps the app fast)
• Image files only (no PDFs, no executables)
• All photos are private until the kid publishes the page that contains them

The app is designed so strangers cannot reach your kid:

• No text comments. Visitors to a published page can only react with one of four emoji (❤️ 👏 🤯 ✨). There is no way to write a message, send a DM, or follow your kid.
• No public listing. Pages are unlisted with a noindextag — search engines won't crawl them, and Storyfold doesn't expose a public directory or feed of kids' pages.
• No user discovery.Nobody can search for your kid's handle, browse their profile, or see their list of pages without already having the URL your kid chose to share.
• No external links from kid pages.Pages render text + photos + video embeds. Embedded YouTube/Vimeo videos load from those platforms' servers; we don't allow arbitrary outbound link injection.

Before any kid can publish their first page, a grown-up must approve once: answer a simple math question and provide their email. From that point forward, the grown-up receives an email when:

• The kid publishes a page for the first time (one email per page, not per re-publish)
• That page gets its first ❤️, the first 👏, the first 🤯, or the first ✨ from anyone (max four reaction emails per page, ever)

We deliberately do not email on every tap of a reaction. Four lifetime “first” emails per page is enough to know something is happening without flooding the inbox. The parental email is stored on the kid's account record. To stop emails entirely, delete the account (Manage account → Security), or email hello@studiopractice.io.

If you see content on Storyfold that should be removed — your own kid's, a relative's, or anyone you've received a link to — email hello@studiopractice.io with the URL. We aim to respond within 24 hours and take action within 48 hours of confirming the issue.

You can also take immediate action yourself:

• If it's your kid's page: from the editor, tap Unpublish (page goes 404) or Delete page (page + photos removed forever).
• If it's your own account: Manage account → Security → Delete account. Removes everything.

Kids can sign up with their iPad's Apple ID using Hide My Email. Storyfold never sees the kid's real email address — Apple forwards mail to them. We support this fully and it's the most privacy-protective sign-in choice for kids.

Storyfold has a single administrator (the developer) who can view every account and every page, including drafts. The admin can take down published pages, delete accounts, and is the human reviewer for reports. There is no team of moderators with broad access to kid content — the trade-off being a smaller queue for response time, but a tighter circle of who can see what.

Some “safety” features in kid apps are tracking disguised as protection. Storyfold rejects these:

• No AI content moderation.We don't feed your kid's writing or photos to AI models for “safety scanning.” That kind of scanning is itself a privacy violation.
• No biometric verification.No face scan, no voice print, no “age estimation.”
• No location tracking.We don't know where your kid is.
• No engagement metrics on kids.We don't track time-on-app, scroll depth, or behavioral patterns for optimization.

We're a small app. We'd rather rely on parents, simple structure, and human review than on surveillance dressed up as safety.

Have a specific concern about your kid using Storyfold? Email hello@studiopractice.io and tell us what you're worried about. Real human responds.