Sizmara — home page ქართული

Privacy Policy

This page explains in plain language what data we process, what we use it for, who we share it with and how you can manage it.

Last updated:

In short

  • We have no ads, we don’t sell data and we don’t track you across other apps or websites.
  • Your child’s profile — name, age, favourite themes and listening progress — is stored only on your device.
  • A photo chosen for a personal story is used once, to describe your child’s look, and is not stored by us.
  • You can delete your account and all stored data right from the app.

1. Who we are

Sizmara (სიზმარა) is an iPhone app of audio fairy tales for children. The app and this website are made and run by Levan Parastashvili, an individual developer in Georgia (“we”, “us”). We are responsible for processing your personal data.

This policy covers the Sizmara app and this website.

2. What data we process

Account

When the app is first opened, it automatically creates an anonymous guest account with a random identifier — no name and no email.

If a parent signs in with Apple or Google, we receive the account’s email address and an identifier assigned by Apple or Google. When signing in with Apple you can choose to hide your email; we then receive a special address from Apple that forwards messages to your real inbox.

This data is stored in our cloud database, Supabase, in the European Union region (Frankfurt, Germany).

Your child’s profile

Your child’s name, age group, favourite themes and listening progress are stored only on your device. We do not receive this data.

Personal stories

When a parent creates a personal story, we store what they enter: the child’s first name, age group, picture style, story situation, an optional short note and appearance traits such as hair and eye colour. We also store the story that is created — its text, pictures and narration. All of this stays in our cloud storage until the parent deletes the story or the account.

The story text and pictures are generated by Microsoft Azure OpenAI, so we send these inputs to it. The narration is created by ElevenLabs, which receives the story text only.

Photo. A photo is optional: you can describe your child’s look without one. If a parent chooses a photo, it is sent once to Microsoft Azure OpenAI to create a short description of the child’s look, and the pictures are drawn from that description alone. We do not store the photo — not in the database, not in storage and not in technical logs. Under its Azure OpenAI terms, Microsoft may retain service requests for up to 30 days for abuse monitoring.

Payments

Payments for Sizmara Plus and personal stories are handled by Stripe. We never see your full card number. We store your subscription status, a Stripe customer ID, payment records and your personal story credits.

Analytics

To improve the app we use PostHog (USA). We send it pseudonymous usage events, such as “app opened” or “story played”, linked only to a random account identifier. We never send PostHog names, email addresses or your child’s name. PostHog is configured not to store IP addresses.

You can switch analytics off at any time in the app’s parent zone: turn off “Help us improve the app”.

Website

This website is hosted by Vercel. To deliver and protect the site, Vercel processes technical data such as IP addresses. The site has no cookies, analytics or ads, and its fonts are served from the site itself.

3. Why we use data

We use data only for these purposes:

  • To provide the service — your account, downloading stories, creating personal stories, the Plus subscription and purchases. Legal basis: performance of a contract.
  • To improve the app and find bugs, through analytics you can switch off at any time. Legal basis: our legitimate interest.
  • To keep payment records. Legal basis: legal obligation.
  • To protect the service and prevent abuse. Legal basis: our legitimate interest.

We do not use data for advertising, we do not sell it and we do not share it with advertising networks.

4. Who we share it with

We share data only with the companies that help us run Sizmara. They process it on our behalf and only for these purposes:

  • Supabase Accounts, database and files. European Union (Frankfurt, Germany).
  • Microsoft Azure OpenAI Text and pictures of personal stories, and the description of a child’s look from a photo.
  • ElevenLabs Narration of personal stories. Receives the story text only.
  • Stripe Payments and subscriptions.
  • PostHog App analytics. USA.
  • Vercel Hosting of this website.

Some of them process data outside Georgia and the European Union — for example, PostHog in the USA.

When you sign in with Apple or Google, those companies process data under their own privacy policies.

We disclose data to anyone else only when the law requires it.

5. Children

Sizmara is designed for parents: children listen to the stories, while a parent manages the account, purchases and personal stories. Sign-in, purchases and personal stories sit in the parent zone, which opens only after a check question is answered.

We do not collect data directly from children. Data about a child — for example, a first name for a personal story — is entered only by a parent. There are no ads in the app.

If you believe a child has given us data without a parent’s permission, contact us and we will delete it.

6. Retention and deletion

We keep data until the parent deletes it:

  • You can delete a personal story in the app — we delete its text, pictures and narration.
  • Account deletion is in the parent zone. It deletes the account, personal stories and all data we store, and cancels an active subscription.
  • Payment records stay in Stripe for accounting, as far as the law requires.
  • We never store the photo. For Microsoft’s possible 30-day retention, see the personal stories section.
  • Analytics events are linked only to a random account identifier — never to your name or email.

7. Your rights

Under the Law of Georgia on Personal Data Protection and, if you live in the European Union, the GDPR, you have the right to:

  • know what data we process and get a copy of it;
  • ask us to correct inaccurate data;
  • ask us to delete your data;
  • ask us to restrict processing, or object to it;
  • switch analytics off at any time;
  • complain to the Personal Data Protection Service of Georgia or, in the European Union, to your country’s data protection authority.

You can delete your account and data yourself in the app. For any other request, contact us — we will answer within the time the law sets.

8. Security

Data travels over encrypted connections (HTTPS). Access to the database is restricted by rules, so each parent can reach only their own data. Personal story files are kept in private storage and can be opened only through temporary links.

9. Changes

When we update this policy, we change the date on this page. We will tell you about significant changes in advance, in the app or on this site.

10. Contact

For questions and requests, contact us.

A contact email will be added shortly.

Operator: Levan Parastashvili, individual developer, Georgia.