Data Controller
Nazario Di Liberto
1. Who we are
UntoldStories is a mobile app that allows users to record voice memories, transform them into emotional micro-stories, and generate cinematic audio mixes using AI technologies.
2. What data we collect
Identification data:email and password via Firebase Authentication (Google Ireland Ltd.)
Voice data: temporary voice recordings sent to OpenAI for transcription and voice synthesis (not stored)
Generated data: transcriptions, AI-generated stories, images, and audio mixes
Usage data: user ID, language, selected presets, story history
Technical logs: stored for up to 6 months on Railway servers (Netherlands, EU)
3. Why we process your data
Enable user registration and authentication
Generate and store stories and related content
Support sharing and improve the user experience
Manage in-app purchases (via RevenueCat and Apple)
Monitor and secure the technical infrastructure
4. Legal basis
Contract: to provide the app's functionalities
Consent: for future SDKs or analytics tools (not currently active)
Legitimate interest: for security and logs
5. Where your data is stored
Firebase (Google Ireland Ltd.): for authentication and user account data
Railway (Netherlands): to store story metadata, audio, and images
OpenAI (USA): for temporary processing of voice input
🔐 Voice recordings are deleted immediately after story generation.
6. Sharing with third parties
OpenAI: for transcription and synthetic narration
Firebase: for account authentication
RevenueCat: for managing in-app purchases
Apple/Google: for in-app billing
All providers act as data processors. When data is transferred outside the EU (e.g. to OpenAI or RevenueCat), we rely on Standard Contractual Clauses (SCCs) for legal compliance.
7. Security
All communications are encrypted via HTTPS
Only authenticated users can access personal content
All stories and voice recordings are private by default
8. Your rights
You have the right to:
Access, update or delete your data
Delete your account and associated stories at any time
Export your stories via video (image + voice narration)
Contact us at: nazariodiliberto@gmail.com
9. Children
This app is intended for a general audience.
It does not currently include age verification or parental consent mechanisms.
If you are under 13, do not use this app without parental approval.
10. Cookies and tracking
We do not use cookies, SDKs or tracking technologies at this time.
If we add them in the future, explicit consent will be required.
11. Data retention
Voice recordings: deleted right after story generation
User accounts & stories: kept until user deletion
Logs: retained up to 6 months for diagnostics and support
12. Future updates
This policy may be updated before the app’s official release.
Any significant change will be announced in-app within the Privacy section of the Settings screen.