Fantasify Privacy Policy
Last updated: July 4, 2026
Fantasify is operated by Martin Aichler, IČO 88306321, registered office Stránského 1049/24, 412 01 Litoměřice, Czech Republic, who is the data controller for the purposes of the EU GDPR.
On-Device Story Encryption
Your story content is encrypted on your device before it ever leaves your browser, and we store only the encrypted result (ciphertext). This means:
- ✅ Your stories are stored as encrypted text, not readable content
- ✅ We don't read your stories, use them to train AI, or sell them — they exist only to be served back to you
- ✅ A breach at the database level would expose only unreadable encrypted data, not your stories
What We Collect
- Your email address and display name
- Stories you generate (stored encrypted, linked to your account)
- Story preferences: character names, setting, mood, intensity
- Subscription status and usage counts (stories generated, continuations, edits per month)
- Email addresses you choose to share or send a story to
- Payment info — processed entirely by Stripe (web) or the Apple App Store / Google Play (mobile); we never see your card details
What We Never Do
- ✅ Sell your data to anyone
- ✅ Use your stories to train AI models
- ✅ Let other users see your stories without your action
- ✅ Read your stories for any purpose other than serving them back to you
Sharing Your Stories
Stories are private by default. You control sharing:
- ✅ Keep them private — only you can see them
- ✅ Share with someone by email or a private link
- ✅ Export to PDF for personal use (premium feature)
- ✅ Stories are never shared without your deliberate action
Third-Party Services
- OpenRouter — receives your story preferences to generate content. They process the request and return the result; your content is not retained by them for training.
- Stripe — handles web payments. Fantasify never stores your card details.
- Apple App Store / Google Play & RevenueCat — process in-app purchases and subscription status in the mobile apps. Card details stay with Apple/Google.
- Base44 — the platform that powers the app backend, database, and authentication.
Your Rights & Data Deletion
- ✅ Delete any story at any time
- ✅ Delete your entire account from the Profile page — all data removed within 30 days
- ✅ Request a copy or full deletion of your data by emailing us
- ✅ EU/GDPR users: right to access, correct, export, and erase your data
- ✅ EU/GDPR users may also lodge a complaint with their supervisory authority (in the Czech Republic, the Office for Personal Data Protection, ÚOOÚ)
Security
- Story content is encrypted client-side before storage — unreadable by anyone but you
- Authentication and access control enforce that only you can access your account
- Payments are PCI-compliant via Stripe
Contact
For privacy questions or data requests, email info@fantasify.app — Martin Aichler, IČO 88306321.