SameSTORY is an app that brings families closer across distance: an adult reads a story aloud while the child follows the synchronized illustrations on a separate device. This policy explains, in plain terms, what data the app collects, why, and what your rights are.
We take privacy seriously — especially because this is an app used by families with children. We show no ads and we do not sell your data.
1. Who we are
The SameSTORY app is operated by Gustavo Silva, who is responsible for processing your data (the “controller”).
For anything related to privacy, contact us at samestoryapp@gmail.com.
2. Data we collect
We collect only what the app needs to work. Most information is tied to an account (which may be anonymous).
| Category | What it is |
|---|---|
| Account & identity | You can use the app anonymously (no sign-up) or create an account via email or your Google account. If you sign up, we store your email and, optionally, a name. If you choose to provide the child’s name, it is used only to personalize the experience. |
| Device pairing | To link the adult’s device to the child’s, we generate a temporary code and store a reference to the paired devices (device nickname, dates, and connection status). |
| Reading activity | Which stories were read, when, and how many times, plus your favorite stories — to build your history and home screen. |
| Story ratings | If you create an account and rate a story with stars (1 to 5), we store that rating. Ratings from registered users are combined into a community average per story, shown in the app in aggregate form (sum and count), without identifying who rated. Rating is done only by the adult — the child does not rate. |
| Real-time reading session | While you read together, we sync the current page and reactions (emojis) between the two devices. This is temporary session data. |
| Notifications | A device notification identifier (token) and the time window you set for receiving alerts. |
| Usage & diagnostics (analytics) | Anonymous usage events (for example: a story was opened or finished, a voice call started) and crash reports, to understand what works and improve the app. We do not collect an advertising identifier and we do not use this data for ads. |
| Technical data | Basic information generated automatically by the underlying services, such as an app installation identifier, device type, and language. |
Crash reports are always anonymous. When the app closes unexpectedly, an automatic technical report is sent: the point in the code where the failure happened, the device model, and the operating system version. That report does not carry your name, your email, the child’s name, or any identifier of your account — we cannot link a crash report to a person. It exists only to fix what broke.
3. Audio: we do not record
The voice call (an optional feature) connects the adult’s microphone to the child’s device live, in real time, like a baby monitor. This audio is transmitted directly between devices through our voice provider and is not recorded, not stored, and not listened to by us. When the call ends, no copy of what was said remains.
4. How we use the data
- Enable shared, synchronized reading between devices;
- Keep your account, history, and favorite stories;
- Compute and show the community average rating per story, from registered users’ ratings;
- Send the “your Dreamer wants to read with you” notification within the time window you choose;
- Enable the live voice call during reading;
- Understand usage in an aggregated, anonymous way to fix issues and improve the app;
- Comply with legal obligations where applicable.
5. Who we share with
We do not sell your data. We share the minimum necessary with technology providers that run the app’s infrastructure, under their privacy terms:
- Google (Firebase) — account authentication, database, real-time sync, notifications, and analytics. See Google’s privacy policy at policies.google.com/privacy.
- Agora — transport for the live voice call (no recording). See agora.io/privacy-policy.
- RevenueCat — subscription management (Premium plans). It only processes data from registered adults who subscribe; the child’s device is never sent to RevenueCat. See revenuecat.com/privacy.
- Google Play — app distribution and related services.
The community average rating per story is shown to other users within the app, always in aggregate form (a number and the count of ratings) — we never identify who rated.
These providers may process data outside your country. We use services that provide adequate safeguards for international transfers.
6. Children
The app is designed to be set up and managed by a responsible adult, who creates the account and pairs the child’s device. We do not knowingly collect personal data directly from children beyond what is needed for shared reading (such as session state and device pairing).
We display no advertising, run no personalized ads, and keep analytics in anonymous mode with the advertising identifier disabled. If you are a parent or guardian and believe we have collected a child’s data without proper authorization, contact us so we can remove it.
We have carried out a data protection impact assessment (DPIA) focused on protecting minors. If you are a parent or guardian and would like more details about it, please contact us.
We also prepared a version of this policy for children, written in plain language for them to read with you.
7. Device permissions
- Microphone — used only during the live voice call, when you start it. Without a call, the microphone is not accessed.
- Notifications — to alert the adult when the child wants to read together.
- Camera — only if you choose to scan a pairing QR code.
8. How long we keep it
We keep your account data while the account exists. Pairing codes are temporary (they expire within minutes). Real-time session data is ephemeral. When you delete your account (see section 11), we remove the associated data, except what we must keep due to legal obligations.
9. Security
We use recognized providers with encrypted transmission and access rules that restrict each account to its own data. No system is 100% immune, but we work to protect your information.
10. Your rights
Under Brazil’s LGPD (and equivalent laws such as the GDPR, where applicable), you may request: confirmation of and access to your data; correction of incomplete or outdated data; anonymization or deletion; portability; and information about sharing. To exercise any right, write to samestoryapp@gmail.com.
11. Account & data deletion
You can request deletion of your account and associated data at any time by emailing samestoryapp@gmail.com with the subject “Delete my account”. We will handle the request within a reasonable timeframe. Your individual story ratings are also removed; the community average is an anonymous, aggregated number. Memories saved locally on the device are erased when the app is uninstalled.
12. Changes to this policy
We may update this policy to reflect changes in the app or in the law. When that happens, we update the “last updated” date at the top. Material changes may be communicated within the app.
13. Contact
Questions about privacy? Reach us at samestoryapp@gmail.com.