We respect
your privacy.

This policy explains how Storiis handles information when you use the Storiis website, Mac application, support services, and optional online and AI features. The core application is designed to keep your working story document under your control.

1. The short version

• Your working story document is stored on your Mac or in a location you choose, including iCloud Drive if you place it there. Storiis does not upload that document merely because you open or edit it.
• Specific story content leaves your Mac only when you deliberately use an online feature that needs it, such as Storiis AI, direct OpenAI processing, Google export, loading an image from a web address, or Cloud AI Access.
• Cloud AI Access stores a cloud copy of the story documents you select so an outside AI tool you authorize can read them and send suggestions back for your review.
• Anonymous product analytics are enabled by default and can be turned off in Storiis settings. Analytics are designed not to include story text, story or character names, email addresses, or other direct identifiers.
• We do not sell your personal information or story content, and we do not use story content for advertising.

2. Information we handle

Depending on the features you use, Storiis may handle:

• Purchase and entitlement information: product identifiers, signed App Store transaction information, subscription status, plan, Cloud AI Access entitlement and document allowance, credit balance, and metered AI usage. Apple processes payment-card and billing details; Storiis does not receive your full payment-card number.
• Story and prompt content: only the content needed for an online AI request or content you select for Cloud AI Access. This can include prompts, notes, scenes, characters, locations, story structure, uploaded text, and reference-image descriptions.
• Support information: your name, email address, request type, summary, message, request identifier, and any information you choose to include when contacting us.
• Analytics and diagnostics: a randomly generated installation identifier; app version and build; operating-system version; Mac model; locale; distribution channel; subscription tier; feature and screen usage; coarse, bucketed project-size measurements; performance measurements; and content-free error codes or request identifiers.
• Technical information: IP address and ordinary request, security, and server logs when you use the website or an online service.

3. Local documents, iCloud, and backups

Storiis is a document-based application. Your working story document, its text, images, attachments, and local change history remain in the file location you choose. If you save a document in iCloud Drive, Apple stores and synchronizes it under your Apple account and Apple’s terms. Storiis also uses Apple iCloud key-value storage for a limited set of application preferences and may use iCloud Keychain to synchronize a random App Store account token across your devices.

If you enable Storiis backups, backup copies are written to the folder you select and retained according to the backup settings you choose. Deleting the original document does not automatically delete copies you placed in iCloud Drive, backups, exports, or another service.

4. AI features

AI features are optional. When you request an AI operation, Storiis sends the instructions, prompt, and relevant story context needed for that request to an AI service. The amount of context varies by feature: it may be a single description or a broader structured extract of your plan. Generated results are returned to the app. Storiis may also send content to an automated safety-classification service before generation.

When you use Storiis AI, the request passes through Storiis services hosted by Amazon Web Services and is processed by OpenAI. Storiis records account, entitlement, credit, request-count, token-usage, safety outcome, and content-free operational data needed to provide and protect the service. Storiis does not use your prompts, story content, or generated output to train its own models. OpenAI states that API inputs and outputs are not used to train its models by default unless the API customer opts in, and that its standard API abuse-monitoring logs may retain content for up to 30 days, subject to its policies, configuration, and legal obligations.

You can hide AI features in Settings. Hiding AI controls does not by itself delete prior cloud data, cancel a subscription, or revoke an outside service connection.

5. Cloud AI Access

Cloud AI Access is an optional subscription feature. When you add a story to it, Storiis creates and updates a structured cloud copy of that selected story in an encrypted, private database hosted on Amazon Web Services. The copy can include the story’s title, outline, scenes, characters, locations, worldbuilding, reference material, and related identifiers. It is not end-to-end encrypted because the service must be able to read the copy to answer authorized requests.

WorkOS provides the connection login used by supported outside AI clients. After you authorize a client, that client can request information from the selected cloud copy. The outside AI provider may place information it reads from Storiis into its own conversation history or systems under its own terms and privacy settings. Storiis does not control how that provider retains, uses, or shares data after it receives it.

An outside AI can submit proposed changes, but proposals remain separate until you accept or dismiss them in Storiis. You can deactivate or remove a selected cloud document and regenerate connection credentials. When a Cloud AI Access entitlement ends, the service is designed to revoke the WorkOS login and purge the associated cloud story copies. Already issued access tokens may remain usable for their short remaining lifetime, and deletion from backups and logs may take additional time.

6. Accounts, purchases, and credits

Purchases made in the application are processed by Apple through the App Store. Storiis sends signed transaction information and a random account token to its server to verify purchases, prevent duplicate grants, and provide the services you bought. Financial and entitlement records may be retained as needed for accounting, fraud prevention, dispute resolution, and legal compliance.

7. Analytics and diagnostics

Storiis uses PostHog’s United States cloud service for anonymous product analytics. Analytics are associated with a random installation identifier, not your name or email address. They describe product interactions—such as screens viewed, features used, exports, session duration, coarse project-size ranges, performance, and content-free error categories. They are designed not to contain story text, prompts, generated output, story or character names, document names, file paths, email addresses, or exact content counts.

Analytics are enabled by default. You can turn off “Share anonymous usage analytics” in Storiis Settings at any time. Turning it off stops future analytics capture from the app and resets the analytics identity held by the PostHog software on that device. It does not necessarily delete events already received; you may contact us to ask about deletion, although we may not be able to link an anonymous installation identifier to you without additional information from your device.

8. Website and support

The website and its infrastructure may process ordinary web-request information, including IP address, browser type, requested page, date and time, and security or error logs. The website does not use advertising cookies. If this changes, this policy and any required consent controls will be updated.

When you submit the contact form, Storiis stores the information listed in Section 2 in an encrypted support-request database hosted by Amazon Web Services and sends a copy to the Storiis support inbox using Amazon Simple Email Service. We use it to respond, troubleshoot, maintain a support history, and protect the service. Cloudflare Turnstile processes browser, device, network, and interaction signals and your IP address to distinguish people from automated abuse. Short-lived per-IP counters are also used to rate-limit form submissions.

9. Exports and third-party links

Storiis can export information to files and, when you choose, to Google Docs or Google Sheets. For Google export, authentication occurs with Google, the app requests access limited to files it creates, and the refresh token is stored in your Mac’s Keychain. Story information selected for export is sent directly to Google under your Google account and Google’s policies. Other exports are saved to the location you choose. If you ask Storiis to load an image from a web address, the host of that address receives an ordinary network request and may receive your IP address.

10. Why we use information

• To provide the application, accounts, purchases, AI generation, Cloud AI Access, exports, and support you request.
• To authenticate users, enforce subscriptions and usage limits, maintain credit records, prevent fraud and abuse, and keep services secure.
• To understand and improve product reliability and feature use through optional anonymous analytics.
• To communicate with you about support, security, policy, or service matters.
• To meet legal, tax, accounting, and regulatory obligations and establish or defend legal claims.

11. Service providers and disclosures

Storiis uses service providers only for the functions described in this policy. Current providers include Apple (App Store, iCloud, and Keychain synchronization), Amazon Web Services (hosting, databases, authentication, logs, and support email), OpenAI (AI and safety processing), PostHog (product analytics), WorkOS (Cloud AI Access authentication), Cloudflare (support-form abuse prevention), and Google (user-authorized Docs and Sheets export).

We may also disclose information when required by law; to protect the rights, safety, and security of users, Storiis, or others; in connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate safeguards; or with your direction or consent. These providers may process information in the United States and other countries where they operate.

12. Retention and deletion

We keep information only for as long as reasonably needed for the purposes described above, including providing an active account or subscription, maintaining transaction and credit records, resolving support requests, securing the service, and meeting legal obligations. Different records have different retention periods.

• Local documents, backups, and exports remain until you delete them from the locations and services where you saved them.
• Cloud AI Access story copies remain while selected and eligible for the service, and are designed to be deleted when you remove them or the entitlement ends, subject to delayed removal from transient logs or backups.
• OpenAI API content is subject to OpenAI’s API controls; under its standard configuration, abuse-monitoring logs may retain inputs and outputs for up to 30 days, unless a different approved configuration or legal obligation applies.
• Usage counters may expire automatically after their relevant daily or monthly measurement period. Purchase, entitlement, credit-ledger, and generation-job records may be kept longer for financial integrity and fraud prevention.
• Support requests and account records are retained until they are no longer needed for support, security, business, or legal purposes. A specific deletion schedule must be approved before this draft is published.

13. Your choices and privacy rights

• Keep documents local and do not enable optional online features.
• Hide AI features and turn off anonymous analytics in Storiis Settings.
• Remove a document from Cloud AI Access, revoke or regenerate its connection credentials, and cancel the related subscription through Apple.
• Disconnect Google export from the app and revoke access in your Google account.
• Delete local documents, backups, and exports from their storage locations.
• Contact us to request access to, correction of, export of, or deletion of personal information controlled by Storiis, or to object to or restrict certain processing where applicable.

We may need to verify your identity before completing a request. Some information may be retained when required by law or when necessary for security, billing, fraud prevention, or legal claims. You may also have the right to appeal a decision or complain to your local data-protection authority. Storiis does not sell or share personal information for cross-context behavioral advertising and does not discriminate against people for exercising applicable privacy rights.

14. Security

Storiis uses administrative and technical safeguards appropriate to the nature of the information. Current measures include encrypted HTTPS connections, encryption at rest for the Cloud AI Access and support databases, private database networking, short-lived service tokens, Keychain storage for long-lived credentials on your Mac, access controls, rate limiting, and secret management. No system can be guaranteed completely secure, and you are responsible for protecting your Mac, accounts, passwords, API keys, backups, and connected AI clients.

15. Children

Storiis is not directed to children under 13, and we do not knowingly collect personal information from children under 13. The final minimum age and any additional country-specific age requirements must be confirmed before publication. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

16. Changes to this policy

We may update this policy as the product, providers, or legal requirements change. We will post the revised policy here, update the date above, and provide additional notice when required.

17. Contact

For privacy questions or requests, email support@storiis.ai or use the Storiis contact form.

Provider policies

For more information about provider practices, see Apple Privacy, AWS Privacy, OpenAI Privacy, PostHog Privacy, WorkOS Privacy, Cloudflare Privacy, and Google Privacy.