Privacy Policy
How we protect and handle your data
Last Updated: November 1, 2025
Introduction
At HekayaVerse, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, store, and protect your data when you use our personalized storybook creation platform.
Information We Collect
Account Information
When you create an account, we collect your email address and password. This information is necessary to provide you with access to our services and to communicate with you about your account.
Character Photos
You may upload photos to create personalized characters in your stories. These photos are stored securely and are used solely for creating your custom storybooks. We analyze photos to detect age-appropriate content and ensure character consistency.
Story Content
We store the stories you create, including your prompts, generated text, and illustrations. This content belongs to you and is stored to allow you to access and download your stories at any time.
Payment Information
Payment transactions are processed through secure third-party payment providers (Dodo Payments and Stripe). We do not store your complete credit card information. We only retain transaction records for accounting and support purposes.
Usage Data
We collect information about how you use our platform, including page views, feature usage, and error logs. This helps us improve our services and troubleshoot technical issues.
How We Use Your Information
We use the information we collect for the following purposes:
- To create and deliver your personalized storybooks
- To process payments and maintain transaction records
- To communicate with you about your account and orders
- To provide customer support and respond to inquiries
- To improve our services and develop new features
- To ensure platform security and prevent fraud
Data Security
We implement industry-standard security measures to protect your personal information. Our platform uses encryption for data transmission and storage. All photos and story content are stored in secure cloud infrastructure with access controls and regular security audits.
Security Measures Include:
- SSL/TLS encryption for all data transmission
- Encrypted storage for sensitive information
- Regular security audits and vulnerability assessments
- Access controls and authentication protocols
- Automated backup systems for data recovery
Your Rights
You have the following rights regarding your personal data:
- Access: You can access all your stored information through your account dashboard at any time.
- Correction: You can update your account information and modify or delete your uploaded content.
- Deletion: You can request deletion of your account and all associated data. This will permanently remove your stories, photos, and account information.
- Data Export: You can download all your stories and associated content at any time.
- Objection: You can object to certain processing activities by contacting our support team.
Third-Party Services
Payment Processors
We use Dodo Payments and Stripe to process payments. These services have their own privacy policies and security measures. We recommend reviewing their policies to understand how they handle your payment information.
Infrastructure Providers
Our platform is hosted on Supabase, which provides database, storage, and authentication services. Supabase complies with industry-standard security practices and data protection regulations.
Cookies and Tracking
We use essential cookies to maintain your session and provide core functionality. We do not use third-party advertising cookies. You can control cookie settings through your browser preferences.
Data Retention
We retain your account information and story content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except for information we are required to retain for legal or accounting purposes.
Children's Privacy
Our platform allows creation of children's stories, but accounts must be created by adults (18 years or older). We do not knowingly collect personal information from children under 18. Parents are responsible for any content created for their children.
International Data Transfers
Your data may be transferred to and processed in countries outside Egypt. We ensure that all transfers comply with applicable data protection laws and that adequate safeguards are in place to protect your information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our platform. Your continued use of our services after changes indicates your acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or want to exercise your privacy rights, please contact us:
Email: support@hekayaverse.com
Company: HekayaVerse
Location: Egypt