privacy policy

last updated: may 2026

stori is built on a simple principle: your stori, your data. this policy explains what we collect, how we use it, and how you can control it.

information we collect

we collect the following information when you use stori:

• account information: your email address, username, display name, date of birth (for age verification), and profile photo when you create an account.
• content you create: videos, photos, text posts, audio recordings, and any other content you upload or post to stori.
• usage data: how you interact with the app — what you watch, how long, what you tap, and how you navigate. we use this to improve your feed and the product.
• device information: your device model, operating system version, app version, and a device identifier. we use this for crash reporting and analytics.
• camera and microphone: when you record videos or go live, we access your camera and microphone. we do not record you without your explicit action.
• photo library: when you upload content, we access your photo library with your permission. we only read files you explicitly select.
• face detection data: for certain camera effects, we use on-device ML to detect faces. this processing happens entirely on your device and is never transmitted to our servers.
• purchase information: if you make in-app purchases, we process transactions through Apple. we receive confirmation of purchases but not your payment details.
• push notification tokens: to send you notifications about activity on your account.

how we use your information

• to operate and improve the stori app and services.
• to personalize your feed and recommend content.
• to send you notifications about your account and activity.
• to detect and prevent fraud, abuse, and policy violations.
• to provide customer support.
• to comply with legal obligations.

third-party services

stori uses the following third-party services to operate:

• Google Firebase: authentication, database (Firestore), file storage, push notifications (FCM), crash reporting (Crashlytics), and performance monitoring.
• RevenueCat: in-app purchase management and subscription tracking.
• PostHog: privacy-respecting analytics. we do not share personally identifiable information with PostHog.
• LiveKit: real-time audio and video infrastructure for live rooms.

each of these services processes data under their own privacy policies. we enter into data processing agreements with each provider.

data sharing

we do not sell your personal data. we do not share your data with advertisers. we share data with third parties only to operate the service (as described above) or when required by law.

content you post publicly on stori is visible to other users. content you post privately is visible only to you and people you explicitly share it with.

data retention

we retain your data for as long as your account is active. if you delete your account, we delete your personal information within 30 days, except where we are required by law to retain it longer.

children's privacy

stori requires users to be at least 13 years old. we do not knowingly collect personal information from children under 13. if you believe a child under 13 has created an account, contact us at privacy@topstori.com and we will delete it.

your rights

you have the right to:

• access the personal data we hold about you.
• correct inaccurate data.
• request deletion of your account and associated data.
• export your data in a portable format.
• opt out of certain data processing (contact us to exercise this right).

to exercise any of these rights, contact us at privacy@topstori.com. you can also delete your account directly in the app under Settings → Account → Delete Account.

security

we use industry-standard security measures including encryption in transit (TLS) and at rest. we use Firebase Security Rules to restrict access to your data. no system is perfectly secure — if you suspect unauthorized access to your account, contact us immediately.

changes to this policy

we may update this policy from time to time. we will notify you of significant changes via the app or by email. continued use of stori after changes take effect constitutes acceptance of the updated policy.

contact

questions about privacy? reach us at privacy@topstori.com or write to:

topstori, inc.
privacy inquiries
hello@topstori.com