Storybook Forest

Privacy Policy

Effective 2026-09-23

JNH (the “Company”) processes the personal information of Storybook Forest users in accordance with the Personal Information Protection Act of the Republic of Korea, as described below.

1. Purposes of Processing

  • Membership: identifying you, signing in, protecting your account, and handling account deletion
  • Service: story reading and audiobooks, reading records, “continue reading” and recommendations
  • My Voice: creating audio of stories read in a voice you registered
  • Paid services: granting and managing subscriptions and narration tickets, verifying payments, refunds, purchase emails
  • Support: answering in-app and email inquiries, sending notifications
  • Preventing misuse and improving the Service: reviewing access records, usage statistics
  • Offers and events: sent only to members who opted in

2. Information We Process

CategoryItemsHow we get it
Email sign-upEmail address, password (stored encrypted), display nameSign-up screen
Social sign-upAccount identifier, email address, and name as provided by Kakao, Naver, Google, or AppleFrom that service when you sign in
Service useStories you opened (story and time), app language and country, favorites, audiobook listsGenerated as you use the app
Device and accessDevice name, operating system, IP address, sign-in and sign-out records, push notification tokenGenerated as you use the app
My Voice (optional)Voice files you recorded or uploaded, voice names, AI voice models, story audio made with those voicesThe first time you upload a voice (separate consent)
Paid servicesOrder number, product, amount and currency paid, App Store or Google Play transaction ID, subscription period and cancellation status, email that received the purchase noticeWhen you pay through the App Store or Google Play
SupportContents of in-app inquiries and attached screenshots; sender address, subject, body, and attachments of email inquiriesWhen you contact us
Notification consent (optional)Whether you opted in to offers and events, and whenSettings screen
Account deletionReason for deletion, email at the time of deletion, number of narration tickets forfeitedWhen you delete your account

Payment details such as card numbers are handled by the store you pay through (Apple or Google); the Company does not receive them. We do not collect phone numbers.

3. Retention

  1. We destroy personal information without delay when you delete your account. We erase the account's email, name, password, and social identifier, and delete your registered voices and the audio made with them (including AI voice models at the outside provider).
  2. The following is kept separately for the periods below as required by law, then destroyed.
Information keptPeriodBasis
Records of contracts and withdrawals, payments, and supply of goods (order, payment, and refund history)5 yearsKorean E-Commerce Act
Records of consumer complaints and disputes (inquiry contents)3 yearsKorean E-Commerce Act
Sign-in records (IP address, etc.)3 monthsKorean Protection of Communications Secrets Act
Account deletion records of members who used paid services (email at deletion, reason for deletion, number of forfeited narration credits)5 years from the last transactionKorean E-Commerce Act (identifying whose orders and payments they were)
Consent records (which edition you agreed to, and when)Kept after deletionEvidence of consent

For members who never used paid services, or whose last transaction was more than 5 years ago, we do not keep the email when they delete their account, and the reason for deletion remains only as statistics that cannot be linked to anyone.

Usage history such as reading records remains after account deletion for statistics, but the account information is erased so it can no longer be linked to you. Order and payment history is kept for the period in the table above, together with the email that received the purchase notice.

4. How We Destroy Information

Electronic files are deleted in a way that cannot be recovered, and information whose retention period has ended is destroyed regularly.

5. Children Under 14

Only people aged 14 or older may sign up, and children use the Service through their guardian's account. If we learn that someone under 14 has signed up, we delete the account and its information. A child's voice is processed only if the guardian member consents when uploading it.

6. Sharing With Third Parties

The Company does not provide personal information to third parties, except where required by law, such as requests from investigative authorities. Social sign-in and App Store or Google Play payments that you choose are handled directly between you and those services.

7. Service Providers

Servers and databases run on servers the Company operates directly in Korea. We entrust processing to the providers below.

ProviderTask
Cloudflare, Inc.File storage (voices, story audio, inquiry attachments), receiving email inquiries
Amazon Web Services, Inc. (Seoul region)Sending verification and purchase emails
Hanabi AI Inc. (Fish Audio)Creating AI voices and story audio in those voices
Google LLC (Firebase Cloud Messaging)Sending push notifications
Telegram Messenger Inc.Notifying staff that an inquiry has arrived

Under its own terms of use, Fish Audio may use the audio and story text it receives to improve its own AI models. The Company sets the AI voices it creates at Fish Audio to private, so other Fish Audio users cannot use them.

8. Overseas Transfer

To provide the Service and perform our contract with you, we transfer personal information overseas as below (Article 28-8 of the Personal Information Protection Act). Transfers happen when you use each feature, by encrypted network transmission. Retention is as in section 3.

RecipientCountryItemsPurpose
Cloudflare, Inc.Asia-Pacific regionVoice files, story audio, inquiry attachments, email inquiriesFile storage, receiving email
Hanabi AI Inc. (Fish Audio)United StatesVoice files, story text to be readCreating AI voices and story audio
Google LLC (Firebase)United StatesPush notification token, notification contentsPush notifications
Telegram Messenger Inc.British Virgin IslandsSender address and subject of email inquiries, subject of in-app inquiriesStaff notifications

If you do not want this transfer, you may stop using the relevant feature or delete your account. Refusing the voice-related transfer only prevents you from using My Voice; refusing the transfers needed for file storage and push notifications makes the Service difficult to use.

9. Your Rights

  1. You may at any time ask to access, correct, or delete your personal information, or to stop its processing.
  2. In the app you can: change your name (My > Profile), delete voices (My Voice), turn off offer notifications (Settings), and delete your account (My > Delete account).
  3. For other requests, email support ([email protected]) and we will handle them without delay.

10. How We Protect Information

  • Passwords are stored with one-way encryption.
  • All communication between the app and our servers is encrypted (HTTPS).
  • Voice files and inquiry attachments are kept in non-public storage and opened only through short-lived links.
  • Admin screens that handle personal information are available only to people with admin rights.

11. Automatic Collection

The app does not use cookies. Sign-in credentials are kept in the device's secure storage and are removed when you delete the app.

12. Information We Receive When You Sign In with a Social Account

When you sign in with a Kakao, Naver, Google, or Apple account, the Company receives from that service only the information below, within the scope you agreed to share. We do not request access to any other data, such as your contacts, photos, Drive, or email.

ServiceInformation we receive
KakaoKakao member number, email, nickname
NaverNaver member identifier, email, nickname
GoogleGoogle account identifier, email, name
AppleApple user identifier, email (a relay address created by Apple if you choose Hide My Email), name (first sign-in only)
  • How we use it: the identifier to recognize you as the same member when you sign in; the email for account verification, purchase receipt emails, and replies to your inquiries; and the name or nickname as your initial display name in the app (you can change it).
  • Storage: Received over encrypted connections (HTTPS) and stored as your member information on servers the Company operates directly in Korea.
  • Sharing: We do not sell information received from social services or use it for advertising, and we do not use it to train AI models or send it to Fish Audio. We do not share it with anyone except as needed to provide the Service (Amazon Web Services, which sends verification and purchase emails for us) or when required by law.
  • Protection: The safeguards in section 10 apply equally.
  • Retention and deletion: Kept until you delete your account, then deleted as described in section 3. When you delete your account, we also disconnect it from the social service. You can also disconnect it yourself in that service's account settings (such as connected apps) — for Google, under “Third-party apps & services” at myaccount.google.com.
  • The Company's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.

13. Privacy Officer

14. Remedies

If you need help with a privacy infringement, you may contact the Korean authorities below.

  • Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
  • Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
  • Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
  • Korean National Police Agency: 182 (ecrm.police.go.kr)

15. Changes to This Policy

This Policy takes effect on September 23, 2026. We announce changes in the app and on this page at least 7 days in advance (30 days for significant changes). Earlier editions are available under “Earlier editions” below. If the Korean and English versions differ, the Korean version prevails.