Privacy Policy

InYourStory ("we", "us") is a product of Abideals, India. This policy explains what personal data we collect, why we collect it, how long we keep it, and the rights you have over it. It is written for the person who matters most here: a parent trusting us with photos of their child.

Questions or requests about anything below: contact@inyourstory.in.

1. What we collect

• Contact details — your phone number (used for OTP login) and, if you provide it, your email and delivery address for printed products.
• Child details you choose to share — your child's first name, age and the photo(s) you upload. These are the inputs that personalize the story.
• Optional voice sample — only if you choose the voice-cloning feature, a short recording of the voice to be cloned.
• Order and payment records — what you ordered and its status. Card/UPI details are handled entirely by our payment processor (Razorpay); we never see or store them.
• Basic usage data — pages visited and device type, used only to understand and improve the site.

2. How we use it

Photos, names, ages and voice samples are used for exactly one purpose: generating the personalized product you ordered — the story text, illustrations, animation and narration. That's it.

We do not:

• sell or rent your data to anyone;
• use your child's photos or likeness for advertising or marketing without your separate, explicit consent;
• use your photos or voice samples to train AI models;
• allow children to create accounts — InYourStory is a service for adults (parents and gift-givers).

3. Children's data and parental consent

Our products feature children, so the photos you upload are a child's personal data under India's Digital Personal Data Protection Act, 2023. By placing an order you confirm that you are the child's parent or legal guardian, or that you have the parent's or guardian's explicit permission to use the photo. We rely on this confirmation as the verifiable parental consent the law requires.

If you believe a photo was uploaded without proper consent, email us and we will remove it and all derived content promptly.

4. AI processing and service providers

Generating your order requires sending its inputs to the AI and infrastructure services that power our pipeline. We share only what each step needs, only to fulfil your order:

• Google Cloud (Firebase, Cloud Storage, Vertex AI / Gemini) — secure storage, story text and illustration generation;
• Kling AI — animation of illustrated scenes into video;
• ElevenLabs — narration and optional voice cloning;
• RunPod — GPU processing for image enhancement;
• Razorpay — payment processing;
• WhatsApp Business (WATI) — delivery of previews and finished products to your phone;
• Print partners — for physical books and posters, the final print file and your delivery address only.

These providers process the data to perform their service for us and are bound by their own enterprise/API data-protection terms. We deliberately use paid, commercial API tiers whose terms do not permit training on customer data — for example, Kling AI's API service agreement (§5.1) expressly prohibits use of customer data for model training.

Some of these providers process data on servers outside India (for example in the United States or Singapore), as permitted under the Digital Personal Data Protection Act, 2023. Wherever the processing happens, the same single-purpose restriction applies: your data is used only to generate and deliver your order.

5. Retention and deletion

• Uploaded photos and voice samples are kept for up to 90 days after your order completes — so we can fix issues, regenerate defective pages or reprint — and are then deleted.
• Generated products (your book, film or poster files) are kept so you can re-download them; ask us and we'll delete them too.
• Deletion on request: email contact@inyourstory.in at any time and we will delete your photos, voice samples and generated content within 7 days, keeping only the minimal order/payment records we are legally required to retain.

6. Security

All data is encrypted in transit (HTTPS) and stored in Google Cloud with access restricted to order fulfilment. Payment credentials never touch our servers.

7. Your rights

Under the DPDP Act you may, at any time:

• ask what data we hold about you and your child;
• ask us to correct it;
• ask us to delete it (see section 5);
• withdraw consent — we'll stop processing and delete the data, though this may cancel an in-progress order;
• raise a grievance.

Grievance contact: Abideals, contact@inyourstory.in. We respond within 7 working days.

8. Cookies and analytics

We use browser storage to keep you signed in and lightweight first-party analytics to count visits. We do not run third-party advertising trackers.

9. Changes

If we change this policy we'll update the date at the top; material changes affecting children's data will be notified to active customers directly.