Privacy & Safety

DecodiVerse is built for parents. That means privacy and safety aren't afterthoughts — they're built into every layer of the product.

Version 2026-03-01 · Effective March 1, 2026

Minimal data collection

DecodiVerse offers optional account creation to manage story limits and personalize your experience. When you create an account, we collect only what is necessary to provide the service. We do not ask for your child's name, age, photo, or any personal information about children.

What we store

If you create an account, we store the following information:

  • Email address: Used for sign-in and account recovery

  • Display name: Optional, shown to you within the app

  • Usage counts: Number of stories generated, used to manage free-tier limits

  • Sign-in provider: Which method you used to create your account (Google or email)

The story topic you enter and the reading level you select are used to generate your storybook and are not permanently stored or linked to your account.

We don't track children

We do not use cookies to track individual users across sessions. We do not build profiles of children or families. We do not serve advertising of any kind. We do not sell, share, or monetize any data related to your use of DecodiVerse.

Email verification

DecodiVerse requires email verification for continued use. A verification email is sent when you create your account. You can create your first story before verifying, but subsequent stories require a verified email address.

Your right to delete your account

You can request account deletion at any time from your Account Settings. When you delete your account, it enters a 30-day recovery window during which your account is disabled but recoverable by contacting support. After 30 days, your account is permanently and irreversibly deleted — including your user profile, library, usage history, and authentication record.

After permanent deletion, a cryptographic hash of your account email address is retained solely to prevent platform abuse. This hash cannot be used to recover your original email address or any personal information. No other account data is retained after permanent deletion.

We take COPPA seriously

The Children's Online Privacy Protection Act (COPPA) sets rules for websites and apps that collect information from children under 13. DecodiVerse accounts are intended for parents and guardians only — not for children. We do not knowingly collect, use, or disclose personal information from children under 13. Our data practices are designed to fall well within COPPA's requirements.

Your data is never used to train AI models

DecodiVerse uses Google's Vertex AI platform to generate stories and illustrations. Under Google's enterprise API terms, your data — including story topics, generated text, and illustrations — is never used to train or improve AI models. Google enforces zero data retention by default, meaning your inputs and outputs are not stored at rest or fed back into any training pipeline.

Every story is safety-screened

Before any story reaches your child, it passes through multiple layers of content safety review:

  • Prompt screening: Story topics are checked before generation begins. Inappropriate, violent, or harmful topics are blocked.

  • Content filtering: Generated story text is reviewed for age-appropriateness. Content that doesn’t meet our standards is rejected and regenerated.

  • Illustration guardrails: AI-generated illustrations use safety filters designed for child-appropriate content.

We aim for stories that are fun, silly, creative, and sometimes gross (kids love gross). We have zero tolerance for content that is violent, sexual, discriminatory, or otherwise harmful.

No ads. Ever.

DecodiVerse does not display advertisements. Your child will never see an ad while using the app. We will never accept payment from advertisers to promote products or services within stories or elsewhere in the app.

Your storybook is yours

When you create a storybook, it's available in your account's Library for 30 days as a downloadable PDF. After 30 days, the story and its associated data are automatically deleted. You can always download the PDF during that window and keep it on your device forever.

Minimal infrastructure, minimal risk

DecodiVerse runs on Google Cloud Platform with standard security practices including encrypted connections (HTTPS), no persistent user data storage, and no third-party analytics that track individual users. We keep our technical footprint small because less data collected means less data at risk.

Operational logs

Operational logs related to story generation are automatically deleted after 90 days. These logs are used solely for service reliability and debugging, and are never shared with third parties.

Questions?

If you have questions about our privacy practices, we're a small team and we read every message.