📚 Storybloom

Effective date: 7 May 2026

Storybloom ("the app", "we", "us") is a multilingual storybook app for children of every age. This page explains what information the app collects, how it is used, and your choices.

1. Summary

• We collect an anonymous identifier so the app can talk to our content servers — nothing else.
• No name, no email, no phone number, no location, no contacts, no analytics, no third-party advertising.
• Premium-unlock purchases are handled entirely by Google Play or the Apple App Store. We never see your payment details.
• If you have any question, write to riyas.pk.29@gmail.com.

2. What we collect

Anonymous user identifier

When you first open Storybloom, the app signs in to Firebase Authentication anonymously. This creates a randomly generated identifier ("anonymous UID") that lets the app talk to our content servers. The anonymous UID is not linked to your name, email, phone number, or any other identifying detail.

Purchase information

If you choose to unlock the premium content, your purchase is processed entirely by Google Play Billing (on Android) or the Apple App Store (on iOS). We never see or store your payment details. We only receive a confirmation that the purchase was successful, which we use to grant access to the unlocked content.

Things we do not collect

• Your name, email address, or phone number
• Your physical or device location
• Your contacts, calendar, photos, or other on-device data
• Behavioural analytics, browsing history, or advertising IDs
• Anything that could identify you or your child personally

3. Data stored only on your device

The following preferences are stored only in the app's private storage on your device and never leave it:

• Your selected reading language
• Whether you've completed the first-launch setup
• A flag indicating you've unlocked the premium content

4. How we use what we collect

The anonymous user identifier is used solely to:

• Read story content from our cloud database
• Load story images from our cloud storage

We do not profile users, do not target advertising, and do not sell or share any data with third parties for marketing purposes.

5. Third-party services

Storybloom uses the following third-party services to deliver its content:

Service	Purpose	What it sees
Firebase Authentication (Google)	Anonymous sign-in	Anonymous UID, IP address
Cloud Firestore (Google)	Story-text delivery	Anonymous UID, IP address
Cloud Storage for Firebase (Google)	Story-image delivery	Anonymous UID, IP address
Google Play Billing / Apple App Store	Premium unlock purchases	Handled entirely by the platform — we receive only a success confirmation

These services are governed by their providers' own privacy practices — Google Privacy Policy and Apple Privacy Policy.

Storybloom does not use any third-party advertising networks, behavioural-analytics SDKs, marketing pixels, or social login providers.

6. Children's privacy

Storybloom contains content suitable for children, including very young ones. We have designed the app to comply with the U.S. Children's Online Privacy Protection Act (COPPA) and the EU General Data Protection Regulation (GDPR), including its provisions for children:

• We do not knowingly collect personal information from any child.
• No account creation is required.
• No third-party advertising is shown.
• We do not send behavioural notifications.
• The anonymous Firebase identifier is not personal information under COPPA's definition — it contains no name, contact info, or other persistent personal identifier linked to the child.

If you are a parent or guardian and believe your child has provided personal information that you would like removed, please email riyas.pk.29@gmail.com.

7. Data retention & deletion

The anonymous identifier persists as long as the app is installed on your device. Uninstalling the app effectively ends our ability to associate any future activity with the previous identifier.

If you would like us to delete an existing anonymous record server-side, email riyas.pk.29@gmail.com with a description of how we should locate it (e.g., approximate first-use date or device model). We will action the request within 30 days.

8. Security

• All data in transit is encrypted (HTTPS / TLS).
• Cloud Firestore and Cloud Storage are protected by Firebase Security Rules that prevent unauthorized read or write access.
• Administrative credentials for content management are kept private and are never shipped with the app.
• The app does not store any sensitive information locally.

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the (very limited) data we hold associated with your anonymous identifier;
• Request deletion of that data;
• Lodge a complaint with a data-protection supervisory authority.

To exercise any of these rights, contact riyas.pk.29@gmail.com.

10. Changes to this policy

We will update this page if our practices change. The "Effective date" at the top will reflect the most recent revision. Material changes will be communicated through the app where feasible.

11. Contact

Questions, concerns, or requests:
Email: riyas.pk.29@gmail.com