1. Data controller
The controller of personal data is GrandFlower Sp. z o.o. with its registered office in Wrocław, Poland, at Księcia Witolda 49/15, 50-202 Wrocław, NIP 8982313198, KRS 0001133179, REGON 529938314, share capital PLN 5,000.00.
For privacy, personal data, account deletion or rights requests, contact us at plantsmanager@pmcloud.pl.
2. What StoryRush AI is
StoryRush AI is a mobile app for iOS and iPadOS used to create short stories and play an interactive narrative game with AI-generated text, images and narrator voice.
The app may work locally without an account. After signing in with Apple, some data may be synchronized with the server to enable game saves, purchased worlds, energy, premium features and multiplayer.
3. Data we process
Apple account data
- a stable Apple user identifier provided by Sign in with Apple,
- an email address if Apple provides it, including an Apple private relay address,
- a first name or player name if you provide it or Apple provides it on first sign-in.
App and game data
- story topics, player choices, scene progress, character state, inventory, saved games and world settings,
- multiplayer room numbers, players in a room, player choices, connection status and automatic choices after inactivity,
- unlocked worlds, premium status, available energy and daily story-generation limits.
Purchase data
- product identifier, transaction identifier, original transaction identifier, subscription status and possible premium expiration date,
- payments, card data and billing are handled by Apple. We do not receive full payment card details.
Technical data
- a device identifier used for guest-mode limits, usually in a technical or hashed form,
- IP address, API request information, errors and server logs to the extent needed to keep the service secure and operational.
4. Local data
In guest mode, the app stores some data locally on the device, such as generated stories, settings, player name and local saves. Local data does not have to reach the server unless you sign in with Apple or use features that require synchronization.
Deleting the app from the device removes local data according to iOS mechanisms. Deleting an account in the app removes account data on our server, but it does not cancel an Apple subscription.
5. AI, images and narrator voice
To generate a scene, image or narrator voice, the app sends the AI provider the information needed to complete the request, such as the story topic, current scene, player choices, world description and language instructions. The AI provider may be OpenAI or another provider supporting the app's generative features.
Do not enter sensitive data, business secrets or third-party personal data unless you have a proper legal basis. AI content may be unpredictable, so the app is intended for entertainment and creative content generation.
6. Purposes and legal bases
- Providing the service - operating the game, story generation, account, synchronization and multiplayer; legal basis: performance of a contract or steps prior to entering into a contract.
- Purchases and premium access - verifying transactions and access rights; legal basis: performance of a contract and legal obligations related to accounting.
- Security and stability - detecting errors, abuse and protecting infrastructure; legal basis: legitimate interest.
- Communication and support - responding to support requests; legal basis: legitimate interest or performance of a contract.
- Legal obligations - handling complaints, claims and legally required records; legal basis: legal obligation.
7. Data recipients
Data may be processed by providers supporting the app, in particular:
- Apple - Sign in with Apple, App Store, in-app purchases and subscriptions,
- server infrastructure and database providers, for example API hosting and PostgreSQL/Supabase,
- AI providers responsible for generating text, images and voice,
- email and communication providers when you contact us.
Providers may process data outside the European Economic Area. In such cases, we use available safeguards consistent with GDPR, in particular standard contractual clauses or other appropriate protections.
8. How long we keep data
- account and synchronization data - until the account is deleted or the service ends,
- local device data - until it is deleted in the app or the app is removed from the device,
- daily limit counters - for the time needed to settle daily limits and prevent abuse,
- purchase data - for the time needed to provide access, handle complaints, ensure security and meet legal obligations,
- technical logs - for the time needed for diagnostics, security and service maintenance.
If the law requires longer retention of certain information, we may keep it only to the extent required by law.
9. Account deletion
You can delete your account directly in the app: My Account → Delete Account. After confirmation, we will delete the profile, saved games assigned to the account, multiplayer data linked to the user, account-based unlocks, energy and synchronized server data, subject to legal obligations.
Deleting an account does not cancel an active Apple subscription. The subscription must be cancelled in Apple ID/App Store settings. After signing in again, you may use the restore purchases feature for Apple-supported purchases.
10. Your rights
If we process your personal data, you may request access, rectification, deletion, restriction of processing, data portability, object to processing and withdraw consent where processing is based on consent.
You may also lodge a complaint with the President of the Personal Data Protection Office in Poland. We encourage you to contact us first so we can resolve the matter quickly.
11. Children
StoryRush AI is not directed to children below the age required by law to use digital services independently. If you are a parent or guardian and believe that a child has provided us with data without proper consent, please contact us.
12. Changes to this policy
We may update this policy when app features, providers or laws change. The current version will be available at https://grandflower.pl/en/storyrush/privacy/.