Privacy Policy

Last updated: 24 October 2026

1. Introduction

Welcome to Storifai, an AI-powered interactive storytelling application that allows users to explore stories, make decisions and influence how their adventures unfold.

Storifai is operated by Stober Capital OÜ, a private limited company registered in Estonia.

We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect, why we process it, how we use and protect it, whom we share it with, and what rights you have.

This Privacy Policy applies to the Storifai mobile application, the website at https://storif.ai, and related services operated by Stober Capital OÜ.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

2. Data Controller and Contact Details

The controller responsible for processing your personal data is:

Stober Capital OÜ

• Registration number: 17568259
• Registered address: Narva mnt 5, Kesklinn, Tallinn, Harju maakond, 10117, Estonia
• Email: support@storif.ai
• Website: https://storif.ai

For questions about privacy, data protection, or exercising your rights, please contact us at support@storif.ai.

3. Personal Data We Collect

We collect and process information necessary to provide, operate, maintain, secure and improve Storifai.

3.1. Account and Authentication Data

When you create or use a Storifai account, we may process:

• Your email address;
• A unique user identifier;
• Authentication information and account status;
• Account creation and last sign-in timestamps;
• Authentication provider information, where applicable;
• Your language and application preferences.

Authentication is managed using Google Firebase Authentication.

Depending on the sign-in method, Firebase Authentication or the relevant authentication provider may process additional technical information necessary to authenticate you and secure your account.

We do not have access to passwords maintained by external sign-in providers.

3.2. Story Content and Gameplay Data

Storifai processes information associated with your interactive stories, including:

• Stories you select, start or play;
• Story identifiers and gameplay sessions;
• Your decisions and selected options;
• Text or instructions you enter during a story;
• AI-generated story content and responses;
• Story progress, history and saved gameplay;
• Story length, language and other storytelling preferences;
• Multiple or parallel playthroughs of the same story.

This information is used to deliver interactive storytelling, maintain narrative continuity, enable saved progress and support the features of Storifai.

Please avoid including sensitive personal information in your story inputs, such as financial account details, passwords, medical records, government identification numbers or information about other identifiable individuals.

If you voluntarily include personal information in story content, that information may be processed as part of providing the storytelling service.

3.3. Device, Technical and Diagnostic Data

When you use Storifai, we and our service providers may process technical information, such as:

• Device type and operating system;
• Application version;
• Device or application identifiers where applicable;
• IP address and network-related information;
• Authentication and session information;
• Error reports, technical logs and diagnostic information;
• Information necessary to detect abuse, prevent unauthorized access and maintain service reliability.

The specific information collected depends on the application configuration, device and services in use.

3.4. Analytics and Usage Information

Where analytics services are enabled, we may collect information about how Storifai is used, including:

• Application launches and sessions;
• Navigation between screens;
• Interactions with application features;
• Story starts, completions and other gameplay events;
• Application performance and errors;
• Technical and pseudonymous identifiers associated with analytics events.

We use this information to understand application performance, identify problems and improve the user experience.

Where consent is legally required for non-essential analytics or tracking technologies, we will request it before enabling those technologies and provide an appropriate means of withdrawing it.

We do not use your story inputs to deliver third-party targeted advertising.

3.5. Purchases and Subscriptions

If paid features, purchases or subscriptions are available, we may process information necessary to manage access to those features, such as:

• Product or subscription identifiers;
• Purchase and subscription status;
• Transaction identifiers;
• Purchase, renewal and expiration dates;
• Information needed for customer support or entitlement verification.

Payments made through Apple App Store or Google Play are processed by the relevant platform and its payment providers.

We do not receive or store complete payment card numbers or card security codes.

Where a subscription management provider is used, relevant purchase and entitlement information may also be processed by that provider.

3.6. Support and Communications

When you contact us, we may process your email address, the content of your inquiry, any information you voluntarily provide and records of our correspondence.

We use this information to respond to inquiries, provide support and resolve problems.

4. How and Why We Process Personal Data

We process personal data only where we have an appropriate legal basis under applicable data protection law.

Purpose	Legal basis under GDPR
Creating and managing accounts	Performance of a contract — Article 6(1)(b)
Authenticating users	Performance of a contract — Article 6(1)(b)
Generating interactive stories and processing gameplay decisions	Performance of a contract — Article 6(1)(b)
Saving story progress and preferences	Performance of a contract — Article 6(1)(b)
Managing purchases and subscriptions	Performance of a contract — Article 6(1)(b)
Responding to support inquiries	Performance of a contract or legitimate interests — Articles 6(1)(b) and 6(1)(f), as applicable
Maintaining service security, detecting abuse and resolving technical problems	Legitimate interests — Article 6(1)(f), or legal obligations where applicable
Optional analytics requiring consent	Consent — Article 6(1)(a)
Other necessary and lawful service improvement analytics	Legitimate interests — Article 6(1)(f), where permitted by applicable law
Complying with applicable legal obligations	Legal obligation — Article 6(1)(c)

Our legitimate interests include maintaining a secure and reliable service, preventing misuse, resolving technical problems and improving Storifai while respecting users’ rights and freedoms.

Providing account and gameplay information is generally necessary to use the corresponding features of Storifai. If you do not provide information necessary for account creation or interactive storytelling, those features may not function.

Optional information and consent-based processing are not required for the core service unless expressly indicated otherwise.

5. Artificial Intelligence and Automated Content Generation

Artificial intelligence is central to Storifai’s functionality.

Storifai uses AI models provided by third-party service providers to generate, continue and adapt interactive stories.

5.1. Information Processed by AI Providers

To generate relevant story content, Storifai may transmit information such as:

• Your story prompts and text inputs;
• Previous story content;
• Your decisions and selected narrative options;
• Story context, settings and instructions;
• Information necessary to maintain continuity within a story.

The information transmitted depends on the story and the functionality being used.

We aim to limit the information shared with AI providers to what is necessary for generating the requested content.

5.2. Third-Party AI Processing

AI processing may involve external providers, including OpenAI Foundation (formerly OpenAI, Inc.).

These providers process submitted information to generate responses and may perform additional processing as described in their applicable contractual terms and data processing arrangements.

Before personal data is shared with an external AI provider, we provide relevant information about this processing and obtain permission where required by applicable law or platform policies.

5.3. AI-Generated Content

AI-generated content is produced automatically and may occasionally be inaccurate, unexpected or inappropriate.

Story content is generated for entertainment purposes and should not be relied upon as professional, medical, financial or legal advice.

Storifai does not use automated processing of gameplay decisions to make decisions producing legal or similarly significant effects about users.

6. Service Providers and Data Sharing

We share personal data only where reasonably necessary to operate Storifai, provide requested functionality, comply with legal obligations or protect our legitimate interests.

Categories of service providers may include:

Google Firebase and Google Cloud

Used for authentication, database services, backend operations, application infrastructure and related technical services.

These services may process user identifiers, account information, gameplay records, technical information and other data necessary to provide Storifai.

AI service providers

Used to generate interactive stories and process gameplay inputs as described in Section 5.

Application analytics and diagnostics providers

Where enabled, used to understand application usage, monitor performance and identify errors.

Apple and Google

Used for application distribution, platform services and, where applicable, in-app purchases and subscriptions.

Subscription management providers

Where used, these providers may process purchase and entitlement information necessary to manage paid functionality.

Hosting and website service providers

Used to operate the Storifai website and associated services.

We may also disclose information when legally required, in response to valid requests from competent authorities, or where reasonably necessary to establish, exercise or defend legal claims.

We do not sell or rent personal data to data brokers or third-party advertisers.

We require service providers processing personal data on our behalf to provide appropriate data protection safeguards, including contractual protections where applicable.

7. International Data Transfers

Storifai is operated by an Estonian company, but some of our technology providers may process data outside Estonia or the European Economic Area (“EEA”).

Such processing may occur, for example, when using cloud infrastructure or AI services.

Where personal data is transferred outside the EEA, we use an appropriate transfer mechanism as required by the GDPR, where applicable. This may include:

• An adequacy decision adopted by the European Commission;
• Standard Contractual Clauses approved by the European Commission;
• Other legally recognized safeguards or derogations where applicable.

You may contact us at support@storif.ai for additional information about applicable transfer safeguards and how to obtain a copy of relevant safeguards.

8. Data Storage and Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing Storifai, meeting legal obligations, resolving disputes and maintaining security.

Our retention approach is based on the following principles:

Account information: Retained while an account remains active and subsequently deleted or retained only where a legitimate legal basis continues to apply.

Story content and gameplay history: Retained as needed to make saved stories, playthroughs and related functionality available. Associated content is subject to deletion when the relevant account or data is deleted, unless an applicable exception applies.

Support communications: Retained for the time necessary to resolve inquiries and, where justified, maintain appropriate records.

Technical and security logs: Retained for limited periods based on operational, security and legal requirements.

Purchase and transaction records: Certain records may need to be retained after account deletion to comply with tax, accounting, fraud prevention or other legal obligations.

Analytics data: Retained according to the applicable analytics configuration and retention settings, subject to applicable law.

Data may also exist temporarily in backups or service-provider systems, subject to their applicable deletion and backup-retention procedures.

When personal data is no longer needed, we delete it or anonymize it, unless continued retention is legally required or otherwise justified.

9. Account and Data Deletion

You have the right to request deletion of your personal data, subject to applicable legal requirements.

Storifai provides an account deletion option within the application.

You may also request account and data deletion by contacting:

support@storif.ai.

When you request account deletion, we will delete or arrange for the deletion of your account and associated personal data, including stored gameplay information, unless we are required or otherwise legally permitted to retain specific information.

Account deletion may involve removing information from our authentication service, application databases and other systems where applicable.

Some limited information may remain temporarily in backups, security logs or records subject to legal retention obligations. Such information will remain subject to appropriate safeguards and applicable retention limits.

If deletion cannot be completed immediately, we will process the request without undue delay and within applicable legal deadlines.

Deleting your Storifai account does not necessarily cancel an active subscription managed by Apple or Google. Where applicable, subscriptions must also be cancelled through the relevant platform’s subscription management settings.

10. Your Rights Under the GDPR

Subject to applicable law, you have the right to:

• Access: Request information about your personal data and obtain a copy.
• Rectification: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of personal data in applicable circumstances.
• Restriction: Request restriction of processing in certain circumstances.
• Portability: Receive certain personal data in a structured, commonly used and machine-readable format and transmit it to another controller where applicable.
• Objection: Object to processing based on legitimate interests in certain circumstances.
• Withdrawal of consent: Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
• Complaint: Lodge a complaint with a competent data protection supervisory authority.

To exercise your rights, contact support@storif.ai.

We may request reasonable information to verify your identity before processing requests involving personal data.

We normally respond to requests within one month, subject to extensions permitted by the GDPR.

As Stober Capital OÜ is established in Estonia, you may contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at https://www.aki.ee.

You may also be entitled to lodge a complaint with another competent supervisory authority, including in the EU Member State of your habitual residence.

11. Analytics, Cookies and Similar Technologies

Storifai and its service providers may use cookies, application identifiers, local storage or similar technologies for purposes such as:

• Maintaining authentication sessions;
• Saving application preferences;
• Supporting essential application functionality;
• Maintaining security;
• Measuring application performance and usage, where enabled and legally permitted.

The Storifai website may also use cookies or similar technologies.

Essential technologies may be used where necessary to provide a service requested by the user or for other purposes permitted by applicable law.

Where consent is required for non-essential analytics or similar technologies, we will request consent and provide a way to withdraw it.

You may also be able to manage certain privacy settings through your device, browser or the Storifai application.

Disabling some technologies may affect application functionality.

We do not currently describe any use of third-party advertising or cross-app advertising tracking in this Privacy Policy. Any future introduction of such processing will require an appropriate review of this Policy, our legal obligations and applicable platform disclosures.

12. Data Security

We implement technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction.

Depending on the relevant system and service provider, these measures may include authentication controls, encrypted communications, access restrictions, infrastructure safeguards, logging and security monitoring.

Access to personal data is limited to authorized persons and service providers who require it for legitimate operational purposes.

Although we take appropriate precautions, no internet-based service or technical system can guarantee absolute security.

If a personal data breach occurs, we will take appropriate action and notify competent authorities and affected individuals where required by law.

13. Children’s Privacy

Storifai is an interactive entertainment service and is not intended for children below 13 years old.

We do not knowingly seek to collect personal data from children who are not permitted to use the service under our applicable age requirements.

If we become aware that personal data has been collected from a child contrary to applicable requirements, we will take appropriate steps, which may include deleting the relevant data or account.

Parents or guardians who believe that a child has provided personal data contrary to these requirements may contact support@storif.ai.

14. Third-Party Services and External Links

Storifai may contain links to external websites or services that are not operated by Stober Capital OÜ.

These external services may have their own privacy policies and act as independent controllers for certain processing activities.

We encourage users to review relevant third-party privacy information.

For service providers processing data on our behalf, we remain responsible for ensuring that appropriate data protection arrangements are in place.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in Storifai, our technical infrastructure, data processing activities, legal requirements or business operations.

The latest version will be made available at: https://storif.ai/privacy-policy.

The date at the beginning of this document indicates when it was last updated.

Where changes are material, we will provide appropriate notice through the application, website, email or other suitable means. Where legally required, we will obtain consent before introducing new processing activities.

16. Contact

If you have questions, concerns or requests relating to privacy or personal data, contact:

Stober Capital OÜ

Narva mnt 5, Kesklinn
Tallinn, Harju maakond, 10117
Estonia

Registration number: 17568259

Email: support@storif.ai

Website: https://storif.ai

We will review privacy-related requests and respond in accordance with applicable data protection laws.