Storybook Forest
Privacy Policy
Effective 2026-09-23
JNH (the “Company”) processes the personal information of Storybook Forest users in accordance with the Personal Information Protection Act of the Republic of Korea, as described below.
1. Purposes of Processing
- Membership: identifying you, signing in, protecting your account, and handling account deletion
- Service: story reading and audiobooks, reading records, “continue reading” and recommendations
- My Voice: creating audio of stories read in a voice you registered
- Paid services: granting and managing subscriptions and narration tickets, verifying payments, refunds, purchase emails
- Support: answering in-app and email inquiries, sending notifications
- Preventing misuse and improving the Service: reviewing access records, usage statistics
- Offers and events: sent only to members who opted in
2. Information We Process
| Category | Items | How we get it |
|---|---|---|
| Email sign-up | Email address, password (stored encrypted), display name | Sign-up screen |
| Social sign-up | Account identifier, email address, and name as provided by Kakao, Naver, Google, or Apple | From that service when you sign in |
| Service use | Stories you opened (story and time), app language and country, favorites, audiobook lists | Generated as you use the app |
| Device and access | Device name, operating system, IP address, sign-in and sign-out records, push notification token | Generated as you use the app |
| My Voice (optional) | Voice files you recorded or uploaded, voice names, AI voice models, story audio made with those voices | The first time you upload a voice (separate consent) |
| Paid services | Order number, product, amount and currency paid, App Store or Google Play transaction ID, subscription period and cancellation status, email that received the purchase notice | When you pay through the App Store or Google Play |
| Support | Contents of in-app inquiries and attached screenshots; sender address, subject, body, and attachments of email inquiries | When you contact us |
| Notification consent (optional) | Whether you opted in to offers and events, and when | Settings screen |
| Account deletion | Reason for deletion, email at the time of deletion, number of narration tickets forfeited | When you delete your account |
Payment details such as card numbers are handled by the store you pay through (Apple or Google); the Company does not receive them. We do not collect phone numbers.
3. Retention
- We destroy personal information without delay when you delete your account. We erase the account's email, name, password, and social identifier, and delete your registered voices and the audio made with them (including AI voice models at the outside provider).
- The following is kept separately for the periods below as required by law, then destroyed.
| Information kept | Period | Basis |
|---|---|---|
| Records of contracts and withdrawals, payments, and supply of goods (order, payment, and refund history) | 5 years | Korean E-Commerce Act |
| Records of consumer complaints and disputes (inquiry contents) | 3 years | Korean E-Commerce Act |
| Sign-in records (IP address, etc.) | 3 months | Korean Protection of Communications Secrets Act |
| Account deletion records of members who used paid services (email at deletion, reason for deletion, number of forfeited narration credits) | 5 years from the last transaction | Korean E-Commerce Act (identifying whose orders and payments they were) |
| Consent records (which edition you agreed to, and when) | Kept after deletion | Evidence of consent |
For members who never used paid services, or whose last transaction was more than 5 years ago, we do not keep the email when they delete their account, and the reason for deletion remains only as statistics that cannot be linked to anyone.
Usage history such as reading records remains after account deletion for statistics, but the account information is erased so it can no longer be linked to you. Order and payment history is kept for the period in the table above, together with the email that received the purchase notice.
4. How We Destroy Information
Electronic files are deleted in a way that cannot be recovered, and information whose retention period has ended is destroyed regularly.
5. Children Under 14
Only people aged 14 or older may sign up, and children use the Service through their guardian's account. If we learn that someone under 14 has signed up, we delete the account and its information. A child's voice is processed only if the guardian member consents when uploading it.
6. Sharing With Third Parties
The Company does not provide personal information to third parties, except where required by law, such as requests from investigative authorities. Social sign-in and App Store or Google Play payments that you choose are handled directly between you and those services.
7. Service Providers
Servers and databases run on servers the Company operates directly in Korea. We entrust processing to the providers below.
| Provider | Task |
|---|---|
| Cloudflare, Inc. | File storage (voices, story audio, inquiry attachments), receiving email inquiries |
| Amazon Web Services, Inc. (Seoul region) | Sending verification and purchase emails |
| Hanabi AI Inc. (Fish Audio) | Creating AI voices and story audio in those voices |
| Google LLC (Firebase Cloud Messaging) | Sending push notifications |
| Telegram Messenger Inc. | Notifying staff that an inquiry has arrived |
Under its own terms of use, Fish Audio may use the audio and story text it receives to improve its own AI models. The Company sets the AI voices it creates at Fish Audio to private, so other Fish Audio users cannot use them.
8. Overseas Transfer
To provide the Service and perform our contract with you, we transfer personal information overseas as below (Article 28-8 of the Personal Information Protection Act). Transfers happen when you use each feature, by encrypted network transmission. Retention is as in section 3.
| Recipient | Country | Items | Purpose |
|---|---|---|---|
| Cloudflare, Inc. | Asia-Pacific region | Voice files, story audio, inquiry attachments, email inquiries | File storage, receiving email |
| Hanabi AI Inc. (Fish Audio) | United States | Voice files, story text to be read | Creating AI voices and story audio |
| Google LLC (Firebase) | United States | Push notification token, notification contents | Push notifications |
| Telegram Messenger Inc. | British Virgin Islands | Sender address and subject of email inquiries, subject of in-app inquiries | Staff notifications |
If you do not want this transfer, you may stop using the relevant feature or delete your account. Refusing the voice-related transfer only prevents you from using My Voice; refusing the transfers needed for file storage and push notifications makes the Service difficult to use.
9. Your Rights
- You may at any time ask to access, correct, or delete your personal information, or to stop its processing.
- In the app you can: change your name (My > Profile), delete voices (My Voice), turn off offer notifications (Settings), and delete your account (My > Delete account).
- For other requests, email support ([email protected]) and we will handle them without delay.
10. How We Protect Information
- Passwords are stored with one-way encryption.
- All communication between the app and our servers is encrypted (HTTPS).
- Voice files and inquiry attachments are kept in non-public storage and opened only through short-lived links.
- Admin screens that handle personal information are available only to people with admin rights.
11. Automatic Collection
The app does not use cookies. Sign-in credentials are kept in the device's secure storage and are removed when you delete the app.
12. Information We Receive When You Sign In with a Social Account
When you sign in with a Kakao, Naver, Google, or Apple account, the Company receives from that service only the information below, within the scope you agreed to share. We do not request access to any other data, such as your contacts, photos, Drive, or email.
| Service | Information we receive |
|---|---|
| Kakao | Kakao member number, email, nickname |
| Naver | Naver member identifier, email, nickname |
| Google account identifier, email, name | |
| Apple | Apple user identifier, email (a relay address created by Apple if you choose Hide My Email), name (first sign-in only) |
- How we use it: the identifier to recognize you as the same member when you sign in; the email for account verification, purchase receipt emails, and replies to your inquiries; and the name or nickname as your initial display name in the app (you can change it).
- Storage: Received over encrypted connections (HTTPS) and stored as your member information on servers the Company operates directly in Korea.
- Sharing: We do not sell information received from social services or use it for advertising, and we do not use it to train AI models or send it to Fish Audio. We do not share it with anyone except as needed to provide the Service (Amazon Web Services, which sends verification and purchase emails for us) or when required by law.
- Protection: The safeguards in section 10 apply equally.
- Retention and deletion: Kept until you delete your account, then deleted as described in section 3. When you delete your account, we also disconnect it from the social service. You can also disconnect it yourself in that service's account settings (such as connected apps) — for Google, under “Third-party apps & services” at myaccount.google.com.
- The Company's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements.
13. Privacy Officer
- Officer: Ha Jiin (Representative)
- Contact: [email protected]
14. Remedies
If you need help with a privacy infringement, you may contact the Korean authorities below.
- Personal Information Dispute Mediation Committee: +82-1833-6972 (www.kopico.go.kr)
- Personal Information Infringement Report Center: 118 (privacy.kisa.or.kr)
- Supreme Prosecutors' Office: 1301 (www.spo.go.kr)
- Korean National Police Agency: 182 (ecrm.police.go.kr)
15. Changes to This Policy
This Policy takes effect on September 23, 2026. We announce changes in the app and on this page at least 7 days in advance (30 days for significant changes). Earlier editions are available under “Earlier editions” below. If the Korean and English versions differ, the Korean version prevails.