Privacy Policy

Who is responsible for your data?

The provider identified in the Legal Notice is responsible for the processing described in this policy, except where another party acts as an independent controller for its own services.

Data we process

The data processed depends on the Sioma features you use. It may include account data, structured story selections, generated content, narration information, library data, technical data and support communications.

Account information

Account information can include identifiers and contact information needed to create, secure and manage an account.

Story preferences

Story personalisation uses structured selections such as story type, mood, language, level, setting and optional personal focus choices.

Generated stories

Generated story text is stored where needed to provide the user’s library, favorites, history, series and related features. Stories remain available while the account exists unless the user deletes them.

AI model training

Sioma does not use your story content to train its own models. Story-generation and narration requests are sent to the relevant providers to perform those requested functions.

Narration and audio

When narration is requested, Sioma sends the generated story text or required text chunks and the technical settings needed to generate audio. Generated audio and narration metadata can be stored so the narration remains available for playback with the story.

Technical and usage data

Sioma keeps technical information needed to run, secure and diagnose the service, such as request timing and error information. Routine technical logs are not intended to contain story text, narration audio or authentication tokens.

Customer support

If you contact support, Sioma processes the contact details and information you submit in order to respond and resolve the request.

Contact support →

Purchases through Google Play

Google Play handles payment processing for purchases made through Google Play. Sioma may receive purchase identifiers, entitlement information and other data necessary to verify and provide purchased access.

Purposes of processing

Purposes include providing the requested service, securing accounts and systems, fulfilling purchases, supporting users, maintaining reliability and complying with legal obligations.

Legal bases

Depending on the processing, legal bases may include performance of a contract, compliance with legal obligations, legitimate interests, and consent where consent is required.

Service providers

Current service providers used for core Sioma functions include:

• Supabase — account authentication, database and file storage.
• Anthropic — AI-supported story generation.
• ElevenLabs — story narration.
• Google / Google Play — app distribution, billing and purchase verification.
• Brevo — transactional email and support email delivery.
• Cloudflare — website delivery, security functions, Turnstile and email routing.

International data transfers

Where personal data is transferred outside the EEA, appropriate transfer mechanisms and safeguards are used where required by data-protection law.

Data retention

Data is kept only for as long as needed for the relevant purpose, including service delivery, security, legal, accounting and dispute-resolution requirements. Different categories can therefore have different retention periods.

Account deletion

Users can request account deletion through the public Account deletion flow. Some information may need to be retained where required by law or for legitimate legal claims.

Account deletion →

Your rights

Depending on applicable law, users may have rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent where processing is based on consent.

Complaints to supervisory authorities

Users may have the right to complain to the competent data-protection supervisory authority, including the authority in their country of habitual residence or work.

Security

Sioma uses technical and organisational measures intended to protect personal data against unauthorised access, loss, misuse or alteration.

Children / age requirements

Sioma is designed for adults. Any formal minimum-age rule applicable to account creation must remain consistent across the app, Terms and published policy.

Changes to this policy

This policy may be updated as the service or legal requirements change. The version and last-updated date identify the published document.

Contact

For privacy questions, use the Help Center contact form or the contact information in the Legal Notice.

Contact support →