Privacy policy

This policy explains what StoryMint collects, why, who else sees it, and what you can do about it. It is written from what the app actually does. Where something is worth knowing but slightly awkward — that a notification can put your prompt on your lock screen, for instance — it is stated here rather than buried.

StoryMint collects no analytics and does not track you. There is no advertising, no advertising identifier, no third-party analytics or attribution SDK, and no cross-app or cross-site tracking of any kind.

Who we are

StoryMint is published by DigitalHope Limited, a company registered in Northern Ireland, company number NI735522, registered office 34 High Trees Drive, Donaghadee, Northern Ireland, BT21 0GQ.

For anything in this policy, including a request to see or delete your data, write to richiehope1408@gmail.com.

DigitalHope Limited is the data controller for the personal data described below.

The account

StoryMint needs an account so your work follows you between devices and so your credit balance is yours. There are four ways in:

• Continue without an account. StoryMint creates an anonymous account for you. It is a real account with a real identifier and real stored data — it simply is not attached to an email address. You can attach one later without losing anything.
• Sign in with Apple. Apple sends us a verified identifier, and — only if you allow it — your name and email address. If you use Apple’s Hide My Email, we only ever see the relay address.
• Email and password. We store your email address. Passwords are handled entirely by Firebase Authentication and are never visible to us.
• Linking. If you start anonymously and later sign in with Apple or an email address, the same account carries on.

We store your account identifier, your email address and display name if we have them, and the date the account was created. This is held in Firebase Authentication.

What you make, and what we keep

Your brand profile. Your business name, a description of what you offer, three tone-of-voice settings, and the content themes you choose. This shapes the written outline behind a carousel.

Your prompts. What you type to describe an image or a video is stored in two places: on the short-lived record of that generation, and in the file metadata attached to anything you save. If you save an image, the prompt that made it is stored alongside it for as long as you keep the file.

What gets generated. Images, videos and their thumbnails are stored against your account so they appear in your library on any device you sign in on.

Photos you import. Only the specific photos you pick. StoryMint never browses your library. If you then ask for an AI refinement, that photo is sent to Google’s Vertex AI to be edited — see below.

Voiceovers. A voiceover you record for a video stays on your device and is cleared automatically after 24 hours. It only leaves your device if you export or save a video that includes it.

Your subscription and credits. Your plan, your credit balance, the relevant dates, and the identifier Apple gives each purchase. We keep a record of each credit pack you buy — its Apple transaction identifier, what it contained and when — so that a purchase can never be accidentally credited twice.

Your device, for notifications. If you allow notifications, we store a push token for that device so we can tell you when a generation has finished. Signing out removes it.

What we do not collect

• No analytics or usage tracking, and no analytics SDK in the app.
• No advertising, no advertising identifier (IDFA), no ad networks.
• No location data, no contacts, no calendar, no health data.
• No tracking of you across other companies’ apps or websites.
• No selling or sharing of personal data for advertising. We do not sell your data, ever.

StoryMint asks for the microphone only when you record a voiceover, and for photo access only when you import or save a picture. Nothing is read in the background.

Notifications put your prompt on your lock screen

Worth knowing before you turn notifications on. When a generation finishes, the notification says what it was — and the body of that notification is the opening of the prompt you typed. Like any notification, that text can appear on your lock screen where someone else might see it.

If that matters to you, either turn notifications off for StoryMint, or set iOS to hide notification previews until unlocked, in Settings → Notifications → Show Previews.

Who else processes your data

We use two processors. We do not share your personal data with anyone else.

Google

Firebase and Google Cloud provide the whole back end: sign-in, the database, file storage, the functions that run generation, and push delivery. Google Cloud’s Vertex AI runs the models.

Your prompts go to Google’s models. So do any photos you send for refinement. Google processes this as our processor under the Google Cloud terms, and does not use it to train its models.

Generation runs in Google data centres in the United States.

Apple

• Sign in with Apple, if you use it.
• The App Store, which handles every payment. We never see your card details — only a signed receipt that we verify with Apple to confirm what you bought.
• Apple Push Notification service, which carries notifications to your device.
• App Attest, which confirms a request genuinely comes from a real copy of StoryMint. It attests the app, not you.

Why we are allowed to hold it

Under UK GDPR:

• To perform our contract with you — running your account, generating what you ask for, tracking credits, delivering purchases.
• Our legitimate interests — keeping the service secure, preventing abuse and fraudulent purchases, and fixing faults. We use the minimum needed for this.
• Your consent — push notifications, and access to your microphone and photos. You can withdraw any of these in iOS Settings at any time.
• Our legal obligations — keeping records of transactions for tax and accounting.

How long it is kept

Content you save is kept until you delete it. Deleting an image or video from your library removes it and its thumbnail from our storage.

Working records from the generation process itself — the job record and the raw model output before you save or discard it — are short-lived and cleared automatically.

Records of purchases are kept for as long as tax and accounting law requires, currently six years.

If you close your account we delete your data as described below.

Your rights

You can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to you in a portable form. Write to richiehope1408@gmail.com and we will respond within one month.

Deleting your account. In the app, go to Settings → Delete Account. You’ll be shown exactly what will be removed and asked to confirm. It happens immediately and cannot be undone.

That deletes every image and video you’ve saved, your brand profile, your content library and calendar, your subscription and credit records, and the account itself. Credits are forfeited and are not refundable. We keep the minimum transaction records that tax law requires.

It does not cancel your subscription. Apple handles billing and we have no way to cancel on your behalf, so cancel at apps.apple.com/account/subscriptions first or you will keep being charged.

If you can’t reach the app for any reason, email richiehope1408@gmail.com and we will do it for you.

You also have the right to complain to the Information Commissioner’s Office, the UK regulator, at ico.org.uk. We would rather you told us first.

Data leaving the UK

Google’s infrastructure processes data in the United States and elsewhere. Those transfers are covered by the UK International Data Transfer Addendum to the European Commission’s Standard Contractual Clauses, which forms part of our agreement with Google.

Children

StoryMint is not designed for or directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, write to us and we will delete it.

Keeping it safe

Everything travels over TLS. Our database rules mean your content is readable only by your account — they are enforced by the server, not by the app. App Attest blocks requests that do not come from a genuine copy of StoryMint. Payments are verified against Apple’s signed receipts, so a purchase cannot be forged.

No system is perfect, and we will not pretend otherwise. If a breach affects your rights we will tell you and the ICO within the timescales the law sets.

AI-generated content

Generation runs on Google’s models, which apply their own safety filters. A request those filters block will simply fail, and the credit is returned to you — we are not told what was blocked and we do not keep a separate record of it.

AI output can be wrong, odd, or resemble something that already exists. What you do with it is your responsibility; the terms of service cover this.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant. The date above is the current version.