Privacy Policy

Effective date: October 10, 2026 · English translation of the Russian original

Narrly ("we") creates personalized children's stories. The app is used by an adult — a parent or legal guardian. This policy explains what data we process and why.

What data we process

• Account — your email (or Google / Apple sign-in), so you can sign in and we can link your subscription and monthly story allowance to your account.
• Hero details — name, language and appearance settings (hair, clothes). Stored on your device and sent to our server only while a story is being created, as input for generation.
• Voice sample — if you turn on narration in your own voice. The recording (10–20 seconds) and its transcript are stored in private storage linked to your account. They are used only to narrate your stories in your voice: each time, the recording is passed to our speech-synthesis provider (FreedomSpeech, Kazakhstan) through a temporary link that expires after 15 minutes. It is deleted when you delete your account, or on request at contact@narrly.org. We use it for nothing else.
• Payments — if you subscribe to Pro or Family. On the web, payment is taken by Dodo Payments (the merchant of record); in the iOS app, by Apple (via the RevenueCat service). We never receive or store your card details; we keep only your email, plan, subscription end date and the payment provider's customer ID. The Android app has no in-app purchases: Pro is bought on the website and works in the app through your email.
• Stories you share — if you create a "Share" link, that story's text and illustrations are stored on our server so the link works.
• Narration — finished audio files are cached on our server under random names, so a replay doesn't have to be generated again. A file opens only via its exact link.
• Technical data and statistics — anonymized logs and request counters to prevent abuse; key in-app events (such as "first story created" or "checkout started") and the referral source (utm/ref), linked to your account, so we can see what works. On this website — Vercel Web Analytics, without cookies.
• Your messages — emails and content reports you send us.

We never upload a photo of your child. The hero's appearance is described with settings, not a photo.

Why we use it

• To generate the story, illustrations and narration you ask for.
• To run your account, subscription and monthly story allowance.
• To answer your emails and review content reports.
• To protect the service from overload and abuse.

The Narrly app shows no ads. Public pages of narrly.org (such as the tale library) show Google AdSense ads tagged for child-directed and age-restricted treatment: no interest-based ads and no remarketing. To serve ads, measure them and prevent fraud, Google may use cookies and identifiers — see how Google uses information from sites that use its services and how Google uses cookies in advertising. We still do not sell or share your data with third parties for marketing.

Who processes data for us

To run the service we use third-party providers as processors: cloud infrastructure (Supabase), website hosting (Vercel), generative AI services for text, illustrations and narration (including FreedomSpeech for narration in your voice) and payment providers (Dodo Payments; Apple and RevenueCat on iOS). They receive only what their task needs; secret keys stay on our server and never reach the app.

Children

Narrly is meant to be used by adults together with children. The account is created and managed by a parent or legal guardian. We deliberately minimize data about the child: no photos, no advertising profiles; the name is stored on the device and sent only to create a story.

Retention and deletion

Stories and hero details are stored locally on your device — delete the app and they are gone. You can delete your account in the app (Settings → Delete account): with it we delete your voice sample and its transcript, your subscription status, usage counters and the stories you shared. Payment records are kept by the payment provider (Dodo Payments or Apple) for as long as the law requires. Cached narration and any other data are deleted on request.

Your rights

You can ask for a copy, correction or deletion of your data by writing to contact@narrly.org. You can also delete your account and all linked data yourself in the app.

Privacy & security

Security is built into how the service works:

• Keys stay on the server. AI service keys live in protected server secrets and never reach the app.
• Encryption in transit. All requests use HTTPS.
• Voice sample in private storage. Only our server can access it; it reaches the narration provider through a temporary link and is deleted with your account.
• Abuse protection. Daily limits and a global cap protect the service and stop any one user from exhausting it.
• Minimal data. What we don't collect can't leak. A photo of your child is never uploaded.

Changes

We may update this policy as the product evolves. We will mark significant changes by updating the effective date above.

Contact

Privacy questions — contact@narrly.org.