Privacy Policy

Who we are

Noor Stories is run by BHN Consulting, which is responsible for your data (the "data controller" under the GDPR). You can reach us at support@noor-stories.app.

Who this is for

Noor Stories is used by parents and guardians. The account holder is always an adult. Children listen to or read the stories with their parent; they do not create accounts, sign in, or type anything into the app themselves.

What we collect

• Your account: your email address and name (or the details Sign in with Apple shares with us), and your password stored only as a secure hash.
• Your children's profiles, which you enter: first name, age, boy or girl, interests, whether girls are shown wearing a hijab in pictures, and an emblem. We do not ask for photos, surnames, birthdays, schools or locations.
• Story requests and stories: the theme, setting, companion, length, language and picture style you choose, your optional note, and the stories, pictures and narrations we create for you, with your reading progress and favourites.
• Usage and analytics: which features are used (for example "story created", with its length and language), errors, device and app version. We use PostHog, hosted in the EU. Analytics never include names, children's names, notes or story text, and we do not record sessions or screens.
• Purchases: if you subscribe, Apple processes the payment. Apple and our subscription provider RevenueCat tell us which plan is active and until when. We never see your card details.

How we use it

• To write, illustrate and narrate the stories you ask for, and to show them to you.
• To run your account, apply your plan's allowances and keep the service secure (for example, rate limits against abuse).
• To understand which features help families and to fix problems.

We do not use your data for advertising, we do not sell it, and we do not build profiles of children.

Artificial intelligence and who receives story inputs

Stories and pictures are created with AI. To make a story we send only what that story needs:

• OpenAI (text and pictures): the child's first name, age, boy or girl and interests (and those of any siblings in the story), the chosen theme, setting, companion and language, your note, and a description of each picture. Your note is also checked by OpenAI's moderation service first.
• ElevenLabs (narration): the text of the story when you ask for it to be read aloud.

We never send photos of your child; there are none to send. Your email and your name are never sent to these providers. Under their API terms, these providers do not use the data we send to train their models; they may keep it for a limited time to prevent abuse. Quran verses, hadith and duas shown in stories are never written by AI: they come from our own checked library.

Where it is stored and for how long

• Your account, children's profiles and stories are stored in our database and file storage with our hosting providers, and are kept for as long as you keep your account.
• Deleting a story or a child removes it from your library. Deleting your account deletes everything (see below).
• Analytics events are kept for a limited period by PostHog in the EU, without names or story content.
• Purchase records are kept by Apple and RevenueCat as required for billing and accounting.

Deleting your data

In the app, open Settings → Delete account. Your account and sessions are removed immediately, and your children's profiles, stories, pictures and narrations are deleted right after. This cannot be undone. You can also write to us and we will delete it for you.

Subscriptions: deleting your account does not cancel an Apple subscription. Apple bills it, so cancel it first in your iPhone's Settings → your name → Subscriptions.

Children's privacy

Noor Stories is a service for parents. We collect information about a child only from their parent or guardian, only what is needed to write their stories, and only with the parent's action. In line with the US Children's Online Privacy Protection Act (COPPA) and the GDPR's rules for children's data, a parent can review, correct or delete their child's information at any time in the app or by contacting us, and can stop any further collection by deleting the child's profile or the account.

Your rights

Depending on where you live (for example under the GDPR in the EU and UK), you can ask to access, correct, export or delete your data, object to or restrict its use, and complain to your data protection authority. Write to us and we will answer within one month.

Changes

If we change this policy in a way that matters, we will tell you in the app before the change applies.

Contact

Questions or requests: support@noor-stories.app. See also our Terms of Use.