Grimm Storyteller Privacy Policy
Last updated: October 21, 2026
Volatile Apps (“we”, “us”) makes Grimm Storyteller (“the app”), an app for reading and listening to the Brothers Grimm fairy tales. The app is meant for families: children and adults together. This policy explains what data the app uses, why, and the choices you have.
1. Summary
- No account is needed. Every story can be read and heard without signing in.
- No ads, no analytics, no tracking. The app contains no advertising or analytics SDKs and does not use the Android advertising ID.
- Narration runs on your device. Voices are generated on the phone itself; story text is not sent to a speech service.
- Accounts are optional, for adults, and deletable. Signing in is only offered after a neutral age question, only to people aged 16 or older, and you can delete the account in the app at any time.
- We never sell your data or share it for advertising.
2. Children
The app is designed to be used by children with their families.
- Children can use every story without an account, and we do not collect personal information from children.
- Before Google sign-in is offered, the app asks for a year of birth. If the answer indicates the person is under 16, sign-in is not offered (for 24 hours on that device). The app stores only whether sign-in was allowed, not the year of birth.
- The 1812 First Edition tales contain darker, unfiltered themes. They are locked behind a 4-digit parental PIN that a parent creates on the device.
- The one-time in-app purchase is handled by Google Play, which applies the family’s own purchase-approval settings (for example Google Family Link).
If you believe a child has created an account, contact us (section 9) and we will delete it.
3. Data stored only on your device
This data never leaves your device unless noted:
- Reading preferences: chosen edition, theme, ambient sound volumes.
- Voice settings (pitch, speed, voice choice) and downloaded voice packs.
- A cache of narration audio already generated, so lines replay instantly.
- Grimoire items (saved quotes and postcards) and reading notes saved while signed out.
- The parental PIN, stored only as a one-way SHA-256 hash; the PIN itself is never stored or sent anywhere.
- Whether the Collector’s Vault has been purchased (a local flag, so it works offline).
- The outcome of the age question (allowed or not), not the age itself.
Uninstalling the app removes all of this data.
4. Optional account (Google sign-in and cloud sync)
If an adult chooses to sign in with Google, we receive and store:
| Data | Why |
|---|---|
| Google account email, display name and profile picture link | To identify your account and show it in the app |
| An account ID | To link your synced data to you |
| Reading progress (story, edition, position, completion) | To sync progress across devices |
| Synced Grimoire items (saved quotes and their story, speaker and image link) | To sync your collection across devices |
This data is stored with Supabase (our database provider) and is used only to provide sync. It is not used for advertising, not sold, and not shared with anyone else. Sign-in itself is handled by Google.
5. Purchases
The Collector’s Vault is a one-time in-app purchase made through Google Play Billing. Google processes the payment; we never receive your payment details. The app only learns whether the purchase is complete, and remembers that on the device. Purchases are governed by Google’s own terms and privacy policy.
6. Services the app connects to
| Service | What it is used for | What it receives |
|---|---|---|
| Google (Sign-In, Play Billing) | Optional sign-in; the in-app purchase | Handled under Google’s privacy policy |
| Supabase | Storing optional account data (section 4) | The account data listed above |
| GitHub | Downloading additional narration voice packs | A standard download request |
| Pollinations.ai | Generating story illustrations from the tale’s own text | The illustration prompt (story text only) |
| Unsplash | Loading cover and scene images | A standard image request |
Like any website, these services see your device’s IP address and basic request details when the app contacts them. The app does not send them any personal information about you, apart from the account data that Supabase and Google need when you sign in.
7. Deleting your account and data
In the app: open Reader Sanctuary (the profile button on the story shelf), then tap Delete Account and confirm. This immediately and permanently deletes your account and all of its cloud data: profile, synced reading progress and synced Grimoire items.
Without the app: sign in with Google on our account deletion page and delete the account there; this is also immediate and permanent. If you can’t use that page, email us from the Google account you signed in with (section 9) with the subject “Delete my account”. We will delete the account and its data within 30 days and confirm by email.
Data stored only on your device (section 3) is not part of the account; remove it by uninstalling the app. Deleting your account does not cancel or refund a Collector’s Vault purchase, which belongs to your Google Play account.
8. Security and retention
- All connections to our servers and to the services above use encrypted HTTPS.
- In our database, each signed-in user can read and change only their own data.
- We keep account data only while the account exists. When it is deleted, the data is removed from our database.
9. Contact
Volatile Apps · Grimm Storyteller · support@volatileapps.com
10. Changes to this policy
We will post any changes on this page and update the “Last updated” date above. Significant changes will also be noted in the app’s release notes.