AnimeStory turns a photo of you into the lead character of an illustrated story. That only works if you hand us a picture of your face, so we would rather be blunt than vague about what happens to it. This page explains what the app collects, why, who else ever sees it, and how to make it go away.
The 30-second version
Picking a photo doesn't send it anywhere. The upload starts when you confirm a panel and spend the credits — and only that one image goes.
Our illustrator model copies a likeness. It never builds a faceprint, never measures your face for matching, and can't recognise you in another photo.
Once your panels are rendered, the picture you supplied is purged from our processing storage within 24 hours. The artwork stays until you delete it.
We don't sell your data, we don't rent it to data brokers, and your photos are never folded into anyone's training set.
AnimeStory is published by the Lunivora team ("we", "us"). This notice covers the AnimeStory iOS app and the backend services it talks to, and nothing else. If you follow a link out of the app — to the App Store, to a payment receipt, to a page someone shared with you — you land under that company's rules, not ours.
Using the app means this notice describes the deal. If a term here doesn't sit right with you, the honest answer is not to upload a photo.
Every illustrated panel starts from an image you choose from your photo library or take with the camera. Here's the sequence, step by step:
The image is fed to a generative image model that redraws the subject in the art style of the story you picked. In the course of drawing, the model works with the visual features of the face — that is what "keeping the likeness" means. What it does not do is equally important: no biometric template is derived, no faceprint is stored, nothing is indexed for later matching, and there is no way to look you up from a second photograph. We do not run face recognition, age estimation, or emotion detection, and we don't attempt to work out who you are from the picture.
Generation runs on commercial cloud infrastructure and specialist model providers we contract with. They act as processors: bound by written agreements, permitted to use the image only to return your result, and barred from retaining it for their own purposes or training. They are located in the United States and the European Union.
On first launch the app creates an anonymous device account so you can start immediately — that's a random identifier and your credit balance, no name required. If you later choose Sign in with Apple or Google, we store the account identifier that provider returns plus your display name and email if you allow them to share it. Choosing Apple's private-relay address is entirely fine; we never need your real one.
Story worlds you open, roles and scenes you select, the prompts assembled from those choices, generated panels and clips, generation status, and your progress through a story.
Credit packs are bought through Apple's In-App Purchase. Apple handles the money; we receive a transaction identifier, the product bought, and whether it completed, so we can add credits to your balance. Your card number, billing address, and Apple ID password never touch our servers and we could not see them if we wanted to.
Device model, OS version, app version, language and region, time zone, coarse country inferred from your IP address, a generated install identifier, crash and error traces, and a signed device fingerprint used for fraud and abuse checks. We do not collect precise GPS location and the app never asks for it.
If you send feedback or rate the app in-app, we keep the message, any screenshot you attach, and enough account context to reply sensibly.
We use Adjust, a mobile measurement service, to work out which advertisement or link led to an install. Adjust receives your install identifier, device and OS details, IP address, and app events such as "first launch" or "purchase completed" — never your photos or your artwork.
On iOS, before anything is measured, the system asks whether you'll allow tracking across apps
and websites. Decline and no IDFA is read; attribution falls back to
privacy-preserving aggregate signals, and the app works exactly the same. You can revisit the
decision any time in Settings → Privacy & Security → Tracking.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. A limited set of parties see a limited slice, for a stated reason:
| What | How long we keep it |
|---|---|
| Photo you uploaded for a render | Deleted from processing storage within 24 hours |
| Generated panels and clips | Until you delete them, or 12 months after the account goes dormant |
| Account record and credit balance | Life of the account, then 30 days after a deletion request |
| Purchase and order records | Up to 7 years, because tax law says so |
| Crash and diagnostic logs | Up to 90 days |
| Fraud and abuse signals | Up to 12 months |
| Support messages | 24 months after the conversation closes |
| Aggregate, non-identifying statistics | Indefinitely — this data can't be traced back to you |
Settings → AnimeStory → Photos.
The app still runs; you just can't start a new panel.Exercising any of these costs nothing and we won't degrade the app because you did. We reply within 30 days, and we may need to confirm you control the account before acting.
In the past 12 months we collected the categories in §03: identifiers, commercial information, internet activity, and visual information (your photo). It came from you and from your device. We disclosed it for business purposes only, to the processors in §06. We have not sold or shared personal information, including that of anyone under 16. You may request access, correction, deletion, and a statement of what we collect, and you may appoint an agent to ask on your behalf.
We rely on: contract, to deliver renders and credits you paid for; consent, for the photo and any special-category inference within it, and for tracking — withdrawable at any time; legitimate interests, for security, fraud prevention, and product improvement; and legal obligation, for financial records. You may lodge a complaint with your national supervisory authority, though we'd appreciate the chance to sort it out first.
Illinois BIPA, Texas CUBI, and Washington's My Health My Data all turn on identification. As set out in §02, AnimeStory does not create, store, or use a biometric identifier or faceprint, and does not identify anyone from an image. If that ever changes, we will obtain express written consent before it does.
Our servers and model providers sit in the United States and the European Union, so using the app means your information travels there. For transfers out of the EEA, the UK, or Switzerland we rely on the European Commission's Standard Contractual Clauses together with the UK Addendum, and we assess each provider's safeguards before sending anything.
Traffic between the app and our backend is encrypted in transit and the request payload is encrypted again at the application layer. Uploads use single-use, expiring URLs. Stored data is encrypted at rest, access is restricted to staff who need it, and API tokens are scoped and rotated.
No system is untouchable, and we won't pretend otherwise. If a breach ever affects your information, we'll notify you and the relevant regulator within the deadlines the law sets.
AnimeStory is for users aged 13 and over — 16 and over where local law sets that bar. We don't knowingly collect anything from a child below that age. If you believe a child has used the app, write to us and we'll delete the account and its contents promptly. Parents and guardians: please don't upload photos of your children as the lead character.
We'll revise this page as the app grows. The date under the title always reflects the current version. If a change materially affects how we handle your information, we'll flag it in the app before it takes effect — and where the law requires consent, we'll ask for it rather than assume it.
Privacy questions, access and deletion requests, or a complaint about any of the above:
Put "Privacy request" in the subject line and tell us which account you mean, and we'll get to it faster.