Last updated: 2026-07-06
The controller of your personal data is Influencer Media Group s. r. o., Dobrovičova 16, 811 09 Bratislava – mestská časť Staré Mesto, Slovensko, IČO 57 776 164, registered at Obchodný register Mestského súdu Bratislava III, oddiel: Sro, vložka č. 202127/B. We have not appointed a data protection officer; privacy questions go to privacy@story-tellers.app. Full company details are on our imprint page.
StoryTellers connects businesses with content creators around events. This policy explains what personal data we process when you use the StoryTellers mobile app or website, why we process it, and the rights you have. It applies to creators (influencers), businesses, and website visitors.
Account data: your email address and sign-in identity (email/password, Google, or Apple), your role (creator or business), and verification status.
Creator profile: name, profile photo, Instagram handle, follower count, content niches, city, gender, nationality, and date of birth where you provide them. Parts of this profile (name, photo, handle, niches) are visible to businesses on the platform — that is what matching is for.
Business data: brand name, logo, establishment names, addresses and photos (visible to creators), plus owner contact details (name, position, email). Owner contact details are stored separately with restricted access — they are never visible to other users.
Activity data: events you create or join, QR check-ins at events, story screenshots you submit as barter proof, in-app notifications, and credit-ledger entries for business plans.
Billing data: subscription plan, status, and credit balance. Card details are collected and stored by Stripe, our payment processor — they never touch our servers.
Device data: a push-notification token if you allow notifications (stored with restricted access), and crash reports via Sentry when the app encounters an error (stack trace, device model, OS version — no name or email attached).
What we do NOT do: no advertising trackers, no analytics SDKs, no location tracking (you pick a city manually; a business address is geocoded to show it on the map), and we never sell personal data.
To operate the platform (matching creators with business events, check-ins, barter proof), secure accounts and prevent abuse (moderation, rate limiting, ban enforcement), handle payments and credits, send transactional email and push notifications, respond to support requests and reports, and comply with legal obligations.
Contract performance (providing the service you signed up for), legitimate interests (platform security, abuse prevention, defending legal claims), consent where required (push notifications), and compliance with legal obligations (tax and accounting records).
We use trusted processors: Google Firebase (authentication, database, file storage, cloud functions — hosted in the US, region us-central1), Vercel (hosting for this website — it processes your IP address and request logs whenever you visit, including anything you type into a form before it reaches our database), Stripe (payments and subscriptions), SendGrid (transactional email), Expo (push-notification delivery), Sentry (crash reporting in the mobile app only), and Google reCAPTCHA (bot protection on this website — it receives your IP address and browser signals). This website also loads fonts from Google Fonts, which receives your IP address when a page loads. Each receives only the data needed for its function. We do not sell personal data to anyone.
You can delete your account in the app: Settings → Account → Delete account. This permanently removes your profile, events, notifications, credit ledger, private contact data, and uploaded photos, and cancels any active subscription immediately.
Some records survive deletion for legitimate reasons: Stripe invoices (tax/accounting law), moderation and audit-log entries (abuse prevention and legal defence), and event-participation records held by the businesses whose events you attended (their operational record, e.g. check-ins and submitted story proofs). See our data-deletion page for the full breakdown.
How long we keep things. Account and profile data are kept for as long as the account exists, and removed on deletion. The records that survive deletion are kept only as long as their reason requires: invoices and payment records for 10 years(Slovak accounting and tax law), moderation and audit entries for 3 years from the decision (abuse prevention and legal defence), and a minimal deletion record indefinitely, so a deleted account cannot be silently recreated. Crash reports are kept for 90 days. Where a business holds its own record of an event you attended, that is their retention decision, not ours.
Our infrastructure runs on Google Firebase in the United States (region us-central1), and Vercel, Stripe, SendGrid, Expo, Sentry, Google reCAPTCHA and Google Fonts also process data outside the EEA. Those transfers rely on the European Commission's Standard Contractual Clauses, and on the EU–US Data Privacy Framework where the provider is certified under it. You can ask us for a copy of the safeguards that apply.
You may request access, correction, deletion, portability, and objection to or restriction of processing, subject to legal limits. Where we rely on your consent — push notifications — you can withdraw it at any time in the app's notification settings, without affecting anything done before you withdrew it.
How to exercise them. Email privacy@story-tellers.app from the address on your account. If we cannot tell it is you, we will ask for something that confirms it — we would rather ask than hand your data to someone else. We answer within one month, and will tell you if we need longer.
If you think we have handled your data wrongly you can complain to Úrad na ochranu osobných údajov Slovenskej republiky, Hraničná 12, 820 07 Bratislava 27 (https://dataprotection.gov.sk), or to the authority where you live.
We do not make decisions about you by automated means alone. A daily check flags accounts that accepted an event and did not attend, or redeemed a barter without posting the agreed content — but a person reviews every flag before any warning or suspension, and you can contest the outcome by replying to the notice you receive.
Access to personal data is restricted by server-enforced rules rather than by client code, sensitive fields (contact details, wallet, billing state) live in owner-only storage, card details never touch our servers, and administrative actions are recorded in an audit log. If a breach puts your rights at risk we will tell the supervisory authority within 72 hours and notify you without undue delay.
StoryTellers is for adults: you must be at least 18 to use it, and we ask for a date of birth during profile setup to enforce that. We do not knowingly collect data from anyone under 18. If you believe a minor has an account, tell us and we will delete it.
Privacy requests: privacy@story-tellers.app · General support: support@story-tellers.app