Privacy Policy
Last updated: 21 April 2026
1. Overview
StoryLoop ('we', 'us') is a product of Aria Care Ltd, built in New Zealand and operating across Australia and New Zealand. This policy explains how we collect, use, and protect information when you use StoryLoop to generate learning stories.
2. What we collect
Account information (name, email, password hash). Subscription and payment information, processed securely through Stripe — we never store your card details. The observations you enter and the learning stories we generate for you. Usage metadata (number of stories, which features you use) for billing and product improvement.
3. Children's information
If you enter a child's first name or age into StoryLoop, that information is treated as sensitive. We store it encrypted, in Australian data centres (Sydney region via Supabase on AWS ap-southeast-2). We never use this data to train AI models. You can delete any child profile or story at any time.
4. AI processing
When you generate a story, your observations are sent to our AI provider (OpenAI or Anthropic) for processing. These providers have signed data processing agreements with us; they do not use your data to train their models. We recommend avoiding full names or identifying details in observations.
5. Data storage and security
All data encrypted in transit (TLS 1.3) and at rest (AES-256). Row-level security ensures each user can only access their own data. Passwords hashed with bcrypt. Regular security reviews.
6. Your rights
You can access, correct, or delete your personal data at any time by emailing privacy@storyloop.app. We respond within 30 days. You may also export all your stories from your dashboard.
7. Cancellation and data retention
When you cancel your subscription, we retain your data for 90 days so you can export it. After 90 days, all data is permanently deleted from our systems. Backups are retained for 30 days after deletion.
8. Cookies
We use essential cookies for authentication and session management. We do not use advertising cookies or third-party trackers.
9. Compliance
Compliant with the Australian Privacy Act 1988 and the New Zealand Privacy Act 2020. We do not transfer personal data outside of Australia and New Zealand.
10. Contact
Privacy questions: privacy@storyloop.app. StoryLoop is a division of Aria Care, based in New Zealand.