Story Flow — Auto Story Generator
Effective Date: June 26, 2026 · Last Updated: June 26, 2026
Welcome to Story Flow ("we," "us," "our," or the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our iOS mobile application, Story Flow Auto Story Generator, available on the Apple App Store.
We are committed to protecting your privacy and handling your data in an open and transparent manner. Please read this Privacy Policy carefully. By downloading, accessing, or using Story Flow, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.
This Privacy Policy complies with the Apple App Store Review Guidelines (Section 5.1 — Privacy), Apple's requirements for apps that use Sign in with Apple, and applicable data protection regulations.
We collect information in the following categories depending on how you interact with Story Flow:
| Data Type | When Collected | Purpose |
|---|---|---|
| Apple Sign-In token & relay email | When you sign in with Apple | Account creation & authentication |
| Email address & password hash | When you sign up via email | Account creation & authentication |
| Anonymous Firebase user ID | When you use the app as a guest | Session management & data association |
| Firebase Authentication UID | On sign-in (all methods) | Unique user identification across sessions |
We use the information we collect for the following purposes:
Story Flow uses artificial intelligence to generate story scripts, character portraits, and videos from text prompts you provide. When you submit a prompt, it is transmitted to our backend server, where it is processed by third-party AI models to produce your content.
Your prompts, generation settings, and resulting output (scripts, images, videos) are stored on our servers so that you can:
We do not use your prompts or generated content to train AI models. Your content is processed solely to fulfill your generation request and provide the App's services to you.
When you use Sign in with Apple, we receive only the information Apple shares based on your Apple ID privacy settings. This may include your name and either your real email address or Apple's private relay email address. We use this information solely for account creation and authentication. We respect Apple's "Hide My Email" feature and will communicate with you through the relay address if you choose to hide your email.
If you sign up with email, your password is handled by Firebase Authentication and is never stored in plaintext. We do not have access to your raw password.
You may use Story Flow without creating an account. In this case, an anonymous Firebase user ID is generated. Data created during a guest session is associated with that anonymous ID. If you later sign in with Apple or email, your data may be linked to your permanent account. Guest data is retained until you sign out, delete the app, or it is removed according to our retention practices.
Story Flow uses a credit-based system. Credits are consumable digital tokens used to generate scripts, characters, and videos. You receive a starter balance of free credits upon account creation and can claim additional free credits daily.
Credit packs are available as one-time, non-recurring in-app purchases processed entirely by Apple through the App Store. The available credit packs are:
| Pack | Credits | Price (USD) |
|---|---|---|
| Starter | 300 | $5.99 |
| Popular | 800 | $12.99 |
| Studio | 1,800 | $19.99 |
We store your credit balance and transaction metadata (product ID, transaction ID, and timestamp) in our Firebase Realtime Database to prevent duplicate crediting and to support purchase restoration. We do not store Apple payment credentials or billing information.
Credits have no monetary value, are non-transferable, non-refundable (except as required by Apple's refund policies or applicable law), and cannot be exchanged or cashed out. All billing inquiries, refund requests, and payment disputes should be directed to Apple through your App Store account settings.
Story Flow requests access to your iOS photo library only when you choose to save a generated video to your device. This permission is used exclusively to write (save) the video file to your Camera Roll or Photos library.
The permission prompt reads: "Allow StoryFlow to save generated videos to your photo library."
Story Flow may request permission to send push notifications. If you grant permission, we use Apple Push Notification Service (APNs) to notify you when:
We do not send marketing, promotional, or advertising notifications. You can disable notifications at any time from within the App (Profile → Notifications toggle) or in iOS Settings → Story Flow → Notifications.
Your notification preference (enabled/disabled) is synced to your account in Firebase so it persists across devices.
We integrate with the following third-party services to operate Story Flow. Each service processes your data according to its own privacy policy:
| Service | Provider | Data Shared | Purpose |
|---|---|---|---|
| Firebase Authentication | Google LLC | Auth tokens, email, UID | User authentication & session management |
| Firebase Realtime Database | Google LLC | Credits, preferences, gift status | Real-time data sync & storage |
| Firebase Analytics | Google LLC | App events, device info | Usage analytics & crash diagnostics |
| Apple App Store / StoreKit | Apple Inc. | Transaction & product IDs | In-app purchase processing |
| Apple Sign-In | Apple Inc. | Auth token, name, email | Account creation via Apple |
| AI Generation Backend | Cyborgate (self-hosted) | Prompts, settings, generated media | Script, character & video generation |
Story Flow features a "Discover" feed where completed videos may be browsed by other users. Content that appears in Discover is publicly visible, including:
Your email address, account name, Firebase UID, and other personally identifiable information are not displayed publicly in the Discover feed. Only the content itself and aggregate engagement data (like count) are visible.
Your data is stored in the following locations:
We retain your account and generation data for as long as your account is active or as needed to provide the services, comply with legal obligations, resolve disputes, and enforce our agreements.
You may clear local generation history from within the App. For full account-level data deletion, contact us at support@cyborgate.com and we will process your request within 30 days.
We implement reasonable administrative, technical, and organizational security measures designed to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee its absolute security.
You have the following rights and choices regarding your data:
| Action | How |
|---|---|
| Sign out of your account | Profile tab → Sign Out |
| Toggle push notifications | Profile tab → Notifications toggle, or iOS Settings |
| Clear local generation history | Profile tab → Clear History |
| Revoke photo library access | iOS Settings → Story Flow → Photos |
| Revoke notification permission | iOS Settings → Story Flow → Notifications |
| Restore App Store purchases | Credits paywall → Restore Purchases |
| Request data access or portability | Email support@cyborgate.com |
| Request data correction | Email support@cyborgate.com |
| Request account & data deletion | Email support@cyborgate.com |
Depending on your jurisdiction, you may have additional rights under applicable data protection laws, including the right to lodge a complaint with a supervisory authority.
Story Flow is not directed to children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect, solicit, or maintain personal information from children under 13.
If you are a parent or guardian and believe that your child has provided personal information to us, please contact us at support@cyborgate.com. If we learn that we have collected personal information from a child under 13, we will promptly take steps to delete that information.
Users between 13 and 18 must have the permission of a parent or legal guardian to use Story Flow.
Story Flow is operated from servers that may be located in different countries. If you use the App from outside the country where our servers are located, your information may be transferred to, stored in, and processed in countries with data protection laws that differ from those in your country of residence.
By using Story Flow, you consent to the transfer of your information to these countries. We take steps to ensure that your data is treated securely and in accordance with this Privacy Policy regardless of where it is processed.
If you are located in the European Union or European Economic Area, you have the following additional rights under the General Data Protection Regulation (GDPR):
Our legal bases for processing your data include: performance of a contract (providing App services), legitimate interests (improving the App, ensuring security), and consent (where applicable). To exercise any of these rights, contact us at support@cyborgate.com.
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
We do not sell personal information as defined by the CCPA. We do not share personal information for cross-context behavioral advertising. To submit a CCPA request, email support@cyborgate.com.
In accordance with Apple's requirements for apps distributed through the App Store:
The following summarizes the data we report to Apple for the App Privacy section on the App Store:
| Category | Data Types | Linked to Identity? | Used for Tracking? |
|---|---|---|---|
| Contact Info | Email address | Yes | No |
| Identifiers | User ID (Firebase UID) | Yes | No |
| Purchases | Purchase history (credit packs) | Yes | No |
| User Content | Prompts, generated scripts & media | Yes | No |
| Usage Data | Product interaction (analytics events) | No | No |
| Diagnostics | Crash data, performance data | No | No |
Data used to track you: None. Story Flow does not track you across other companies' apps or websites.
Story Flow is a native iOS application and does not use browser cookies. Firebase and our backend server may use standard server-side session identifiers and authentication tokens to manage your sessions. These are functional in nature and are not used for advertising or tracking purposes.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:
Your continued use of Story Flow after the revised Privacy Policy becomes effective constitutes your acceptance of the changes. We encourage you to review this policy periodically.
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
We will respond to all privacy-related inquiries within 30 days. For data access, correction, or deletion requests, we may need to verify your identity before processing your request.