Privacy Policy

1. Who we are

Evercrate is a service of Mollusc AI, Inc., a Delaware corporation (“Evercrate”, “we”, “us”). We are the controller of the personal data described in this policy, which covers the Evercrate iOS app, the website evercrate.app and the story pages opened from share links (together, the “Service”).

Questions and requests: contact@evercrate.app.

2. What we collect

We collect only what we need to make and deliver your stories.

• Account. When you sign in with Apple or Google, we receive an identifier for that account and the email address and name the provider shares with us (Sign in with Apple lets you hide your email; we then receive a private relay address). We also store your language, your referral code and, if you joined through someone’s share link, their referral code. For Sign in with Apple, we keep a token that lets us revoke the sign-in when you delete your account. If you create an account with an email and password instead, we store your email address, your name and your password only as a salted, one-way hash (never the password itself), and we send you emails to verify your address and reset your password.
• Characters. The name you give each character and, if you choose, their gender and year of birth; the photo you choose; the Hero Profile you choose to fill in (likes, fears, friends, siblings, pets, notes); and, once the character has been drawn, the illustrated character and a one-sentence description of their appearance (such as hair, eyes and clothing) written by AI from the photo.
• Stories. What you ask for (the moment, your idea, the reading age, the language and the characters) and what we make: the story plan, text, illustrations, narration and, for a series, a short memory of earlier episodes.
• Purchases. The signed transaction details Apple sends us (transaction ID, product, price, currency, storefront country, dates and refund status) and your credit balance. We never see your payment card or Apple account details.
• Consents. Which consent you gave (Terms, photo processing), its version, the providers it named, your language, the country your request came from and the time.
• Notifications. If you allow notifications, the push token Apple assigns to your device and your language, so we can tell you when a story is ready.
• Share links. The links you create, what they open, how many times each was opened (we don’t record who opened it) and whether you stopped sharing.
• Usage and technical data. App events described under Analytics, and technical data such as your IP address, which our hosting provider processes to deliver and protect the Service. We don’t store IP addresses in our database.
• Messages. If you email us, your address and what you write.

Please don’t put sensitive information (such as health details) in a Hero Profile or story idea unless you want it to appear in a story.

3. Your child’s photo

• When you add your first photo, the app tells you that our AI turns it into your cartoon character and that the original is deleted; adding the photo records your consent to this processing. The AI providers that may process it are listed under AI providers; Cloudflare hosts and stores everything.
• Saving a character only stores the photo, privately. It is never public; only your signed-in app can display it, through links that expire.
• When the character’s first story starts, the photo is sent to our AI providers to draw the character in Evercrate’s illustration style and to write the short appearance description. Every later story reuses that drawing, never the photo.
• The photo is kept, privately, only until the character’s first story draws it, then deleted within 24 hours of that drawing; every later story reuses the drawing, never the photo. Deleting the character or your account deletes the photo immediately.
• We don’t use photos for facial recognition or to identify anyone, we don’t create biometric templates, we never share photos with anyone else, and we never use them to train AI models.

4. AI providers

Evercrate makes stories with generative AI. We use AI service providers, through their paid business services, to draw characters, plan and write stories, make the cover and illustrations, check requests for safety and read stories aloud. Our AI providers are:

• Microsoft Corporation (Microsoft Azure);
• Google LLC (Google Cloud);
• Anthropic PBC.

Any of them may handle any of these steps, and we may change which provider handles a step at any time, for quality, cost or availability. We will update this list before we start using a new AI provider.

What they receive. The photo goes to our AI providers only when the character is first drawn, at the start of their first story, to draw the character and write the short description of their appearance. For the other steps, providers receive what that step needs: the story request (the moment or idea, the reading age and the language), the characters’ names, ages, gender, appearance descriptions and Hero Profile details, the character drawings (to illustrate the pages; never the photos) and the story text (to read it aloud). Requests may pass through Cloudflare AI Gateway, which we use for reliability and to track costs.

No training on your data. We don’t use your photos, characters or stories to train AI models, and our contracts with our AI providers don’t allow them to use the data we send them to train their models. They process it on our behalf, only to provide their service to us. As their terms allow, they may keep it for a limited time to detect and prevent abuse (for example, up to 30 days, or longer if content is flagged as a possible violation of their policies), and some briefly cache requests (up to 24 hours) to process them faster.

Stories are generated automatically and nobody reviews them before you see them. We look at a specific story only to answer your request, investigate abuse or fix a problem.

5. Other service providers

• Cloudflare, Inc.: hosting, database, file storage, AI Gateway and this website. Your account and content are stored with Cloudflare.
• Apple: Sign in with Apple, In-App Purchase and the App Store, push notifications, and DeviceCheck, which lets us offer the first-story price once per device (Apple keeps a flag for the device; we receive no permanent device identifier).
• Google: Google Sign-In, if you choose it.
• Amazon Web Services, Inc. (Amazon SES): sends account emails, such as address verification and password reset.
• PostHog, Inc.: product analytics (see below).

These providers act on our instructions under data processing terms. We don’t sell personal data, we don’t share it for advertising, and we don’t work with ad networks or data brokers. We disclose data to others only when the law requires it, to protect someone’s safety or our rights, or in a merger or acquisition, in which case this policy keeps applying.

6. Analytics

We use PostHog to understand how the app is used and to fix problems: for example when the app is opened, a sign-in completes, a story is requested or opened, a purchase completes, a story is shared or narration plays. Events include the app version, platform and device language, and for purchases the transaction ID, product, price, currency and storefront. They are linked to a random identifier: one generated on your device before you sign in, then your Evercrate account ID, which is also a random code. We never send names, email addresses, photos or story content to PostHog. PostHog may also process technical data such as the device model, operating-system version and an approximate location derived from the IP address.

We don’t use advertising identifiers or track you across other companies’ apps and websites. Our website sets no cookies and loads no analytics or third-party scripts.

7. Purchases and refunds

Story credits are In-App Purchases sold and processed by Apple. Apple sends us a signed record of each transaction, which we verify to add credits to your account; we never receive your payment details.

Refunds are decided by Apple. When you ask Apple for a refund, Apple may ask us about the purchase. Because you accepted our Terms, we then tell Apple whether the credits were delivered, what share of them was used and our refund preference, and nothing else.

We keep purchase records after you delete your account, detached from your account and content, because accounting, tax and late refunds require them. We also keep a record that the first-story offer was used, so it can be claimed only once.

8. Share links

Nothing you make is public by default. When you create a share link, anyone who has the link can open that story’s pages, text and narration on the web, so share it only with people you trust. Links use long random codes, aren’t listed anywhere and ask search engines not to index them. You can stop sharing at any time in the app and the link stops working immediately; links also stop working when you delete your account.

9. Legal bases (EEA, UK and Switzerland)

• Contract: to provide your account, characters, stories, purchases and share links.
• Consent: to process your child’s photo with our AI providers, and to send notifications. You can withdraw consent at any time by deleting the character (its photo is deleted at once) or turning notifications off; withdrawal doesn’t affect processing that already took place.
• Legitimate interests: to keep the Service secure, prevent abuse and fraud, understand usage through analytics, track our AI costs and fix problems. You can object at any time (see Your rights).
• Legal obligation: to keep financial records and answer lawful requests.

Photos are used only to draw an illustration, never with technical means to identify a person, so they are not processed as biometric data.

10. Children’s privacy

Evercrate is a service for parents and guardians, and accounts are for adults only. Children don’t create accounts, don’t sign in and can’t send us information; a child may listen to a story on a parent’s device.

Information about a child (name, photo, age, Hero Profile) is provided by the parent or guardian, who decides what to share and can delete it at any time. Add a photo of a child only if you are their parent or legal guardian, or with their parent’s or guardian’s permission. We use a child’s information only to make that family’s stories: never for advertising, profiling or sale, and never to train AI.

We don’t knowingly collect personal information directly from children under 13, or under the age of digital consent in your country. If you believe a child has sent us information, contact us and we will delete it.

11. How long we keep data

• Your child’s photo: until the character is drawn by its first story, then deleted within 24 hours; immediately if you delete the character or your account.
• Account, characters (drawing, description, Hero Profile), stories and narration: until you delete them or your account. Characters can be deleted one by one; stories are deleted with your account.
• Share links: until you stop sharing or delete your account.
• Sign-in sessions: up to 90 days, or until you sign out.
• Push tokens: until you delete your account or Apple reports the token is no longer valid.
• Purchase records: as long as accounting, tax and refund rules require, detached from your account once you delete it.
• AI cost records: kept for our accounting, with no link to you once your account is deleted.
• Analytics: kept in pseudonymous form while useful to understand how the app is used; once your account is deleted, they are no longer linked to any account data we hold.
• Emails: as long as needed to help you.

Our database provider keeps automatic recovery points for up to 30 days, so deleted database records can remain there for up to 30 days before they are overwritten; we use them only to recover from failures. Photos are not stored in the database.

12. Deleting your account

In the app, open your profile and tap “Delete account & data”. Deletion is immediate: your account, sign-in sessions, characters, photos, drawings, Hero Profiles, stories, illustrations, narration, share links, consents, push tokens, credit balance and story access are erased, and Sign in with Apple is revoked. Unused credits are lost, so use them first. We keep only the records listed above as kept after deletion (purchase records, AI cost records and the first-story offer record), with no link to your name, email or content. You can also ask us by email to delete your account.

13. Where data is processed

We are based in the United States. Cloudflare runs the Service on its global network, and our providers, including our AI providers, may process data in the United States, the European Union and other countries. When data from the EEA, the UK or Switzerland goes to a country without an adequacy decision, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, as provided in our providers’ data processing terms.

14. Security

Data is encrypted in transit (HTTPS) and at rest by our hosting provider. Nothing you upload or create is stored publicly: the app reaches your photos, illustrations and narration only through signed links that expire within two days. Sign-in sessions can be revoked, and access to our systems is limited to the people who need it. No system is perfectly secure; if a breach affects you, we will inform you as the law requires.

15. Your rights

Wherever you live, you can ask us to access, correct, delete or export your data, and you can delete your account in the app at any time.

• EEA, UK and Switzerland: you have the right of access, rectification, erasure, restriction and data portability, the right to object to processing based on legitimate interests (including analytics), and the right to withdraw consent at any time. You can also lodge a complaint with a data protection authority, for example the CNIL in France, the authority of your federal state in Germany, the AEPD in Spain or the ICO in the UK. We make no decisions about you based solely on automated processing that have legal or similarly significant effects.
• United States, including California: you have the right to know what personal information we collect, use and disclose, and to access, correct and delete it. The categories we collect are identifiers (such as your account ID and email), commercial information (purchases), app activity (analytics), approximate location (country) and the content you provide (photos, names, Hero Profiles, stories), for the purposes in this policy. We don’t sell personal information or share it for cross-context behavioral advertising, including that of children under 16, and we use sensitive information only to provide the Service. We won’t treat you differently for exercising your rights, and you may use an authorized agent.

To make a request, email contact@evercrate.app from the address linked to your account, or tell us how we can verify that the account is yours. We answer within one month.

16. Changes to this policy

If we change this policy, we will update the date at the top. For important changes we will tell you in the app before they take effect, and where your consent is needed, we will ask for it again.

17. Contact

Mollusc AI, Inc. (Evercrate)
Email: contact@evercrate.app

See also our Terms of Service.