Privacy Policy
Privacy Policy
Storianna is a private family-learning organizer available to adult account holders worldwide. This policy explains what we collect, why, who can see it, and how you can export or delete it.
Last updated 24 September 2026.
Who we are
Storianna is offered worldwide. Contact support@storianna.com.
Adults keep the account
Accounts are for people 18 or older. We do not offer child logins. An adult may record a learner’s work inside a household they control. That adult is responsible for what they upload about their family and should show the learner our plain-language Learner Privacy Notice when appropriate.
What we store and why
We store your sign-in email, household membership, learner profiles you create, learning moments, files you upload, plans, subscription status, and related records. A nickname and age stage are enough for a learner profile; do not add a legal name, birth date, government identifier, precise location, medical or diagnostic information. We use this information only to provide and secure the private family service. We do not use family records for advertising.
Why processing is allowed
We use account and subscription information to perform our agreement with the adult account holder. We process private learner records under our legitimate interest in providing a parent-controlled family organizer, balanced by data minimization, adult control, private access, export and deletion. Optional AI uses separate, reversible consent. Security records rely on our legitimate interest in protecting the service. Records required by Spanish accounting or tax law are kept only for that legal obligation.
Information the service does not support
Storianna is not designed for medical, diagnostic, disability, religious, biometric, government-identifier or other specially protected information. Do not add it to names, notes, prompts, images, audio or files. If it is submitted accidentally, remove it promptly or ask support for help. We do not use learner records to diagnose, rank, advertise to or make authoritative decisions about a child.
Who else sees data
Household members you invite can see what their role allows. We use a short list of providers to host the app. They are named on the Subprocessors page. We do not sell personal information.
Subscriptions and payments
Paid features are household subscriptions billed through Stripe. We keep plan, status, and billing identifiers needed to provide the subscription. Card numbers stay with Stripe. Canceling stops future charges. Ending a subscription does not delete your records.
No selling of data
We do not sell personal information. We do not use household records for third-party advertising.
Logs and analytics
Operational logs and analytics use identifiers, counts, timings, and error codes — not notes, photos, or file names.
Cookies and sign-in
We use essential cookies or similar storage so you can stay signed in and keep the site secure. We do not run advertising cookies.
Your rights
Request access, correction, erasure, restriction, objection or portability where applicable through settings or the published contact address above, including if you do not have an account. You may withdraw consent without affecting earlier lawful processing. We may verify identity and parental authority before disclosure. Requests are assessed without undue delay and normally answered within one month; we explain any lawful extension or refusal. You may complain to the Spanish AEPD or another competent supervisory authority. Plan limits on formatted exports do not restrict statutory rights.
What deletion can and cannot reach
When you delete, Storianna removes the live household records, including derived copies we control. Restricted backup copies expire through backup rotation. Providers may retain limited records for security or legal purposes. Contact support for the applicable retention details; completion of live-data deletion does not certify erasure of every external copy. Deletion does not reach captures that exist only on a family device and have not synced.
How long information is kept
Live family content stays while the account is active and is queued for deletion when the authorized adult deletes it. Downloadable export packages expire after seven days; incomplete uploads and temporary processing data are targeted for cleanup after two days; routine content-free diagnostics and delivered notifications are targeted for 30 days. Accounting records are separated from family content and may be restricted for up to six years where Spanish law requires it. Provider backups follow their verified rotation schedule and are not used to restore deleted accounts to service.
AI consent
AI-assisted features stay off until you opt in. You can turn them off again. Manual capture, planning, and records keep working without AI.