Twist Tale

Privacy Policy

Draft for legal and product review · Last updated 25 October 2026

What Twist Tale does

Twist Tale is an interactive storytelling app. You create characters and story setups, make choices, and receive generated chapters. Existing saved chapters remain readable without Chapter Credits.

Information associated with your account

When you sign in with Apple, Twist Tale receives a verified Apple account subject from the authentication exchange. The service uses that subject as the account identity. It also maintains short-lived authenticated sessions; session tokens are used to authorize requests and are not intended to be displayed in the app or shared with support.

Depending on the features you use, server-side records may include account-scoped credit balances, reservations, settlement state, purchase transaction records, idempotency records, and generation records needed to deliver chapters safely. A generation record can contain the submitted generation context and the generated chapter result while the request is being completed or recovered. Twist Tale also keeps bounded, sanitized operational metrics, such as aggregate AI usage categories. Operational logs do not intentionally include passwords, JWTs, full transaction payloads, prompts, or generated story text; this does not mean that server-side generation records contain no story content.

Story content and AI processing

Character descriptions, story prompts, choices, and chapter context are used to generate your requested story. The relevant generation request is sent from the Twist Tale backend to Google Gemini, and generated output is checked by content-moderation systems before it is returned or stored. This means story-related content can be processed by an AI service; do not submit information you do not want processed for generation or moderation.

Cloudflare Workers and Durable Objects operate the authenticated API, generation coordination, credit reservation and settlement, purchase records, and related state. Server-side generation records, including the content needed to complete or recover a request, may be retained as needed for idempotency, recovery, abuse prevention, and account operations. The exact retention period is not represented as a fixed promise in this policy and may depend on the record type, operational need, and legal obligations.

Local storage on your device

Saved stories and chapters are stored locally by the iOS app using SwiftData. Local records are associated with the authenticated account where available so the app can preserve ownership boundaries. Local deletion is separate from server-side deletion: signing out does not itself delete stories, and failed account deletion does not remove them. A confirmed account deletion removes locally owned stories as part of the app’s cleanup flow.

Chapter Credits

Eligible verified accounts receive five lifetime free Chapter Credits. Each successfully generated chapter uses one Credit. Purchased Credits are one-time consumables that do not expire while the account remains active. The backend is authoritative for available, reserved, and consumed balances.

Apple StoreKit transactions are verified server-side before purchased Credits are delivered. Verified transaction identifiers are used to prevent duplicate delivery or transfer of one purchase to multiple Twist Tale accounts. Apple transaction and refund or revocation records may be retained for purchase verification, fraud prevention, support, and legal accounting.

Account deletion

Twist Tale is designed to support account deletion from Settings, but the backend deletion-readiness control is currently disabled. Do not treat the disabled control as a deletion request. When deletion is made available, it will be an authenticated server-side operation and will remove or invalidate account access and associated account data that can be safely identified.

Deletion is intended to remove saved stories belonging to the account and make remaining free and purchased Credits unusable. No automatic refund is promised. Some limited records, such as transaction ownership or fraud-prevention tombstones, may need to be retained to prevent replay or re-granting. A later registration with the same Apple identity is not intended to restore deleted Credits or grant the lifetime free allocation again.

Security and third parties

Twist Tale uses Apple for Sign in with Apple and StoreKit transactions, Cloudflare for Workers and Durable Objects infrastructure, and Google Gemini for story generation and moderation-related processing. These providers may process technical information required to provide their services and may process information internationally under their own terms and policies.

The app and service use authenticated transport and access controls appropriate to the feature. No claim of end-to-end encryption is made. Please keep your Apple account and session access secure, and do not send credentials, tokens, or signed transaction payloads to support.

Children’s privacy

Twist Tale is not directed to children under the minimum age required by applicable law. Do not use the service or submit information if you are not permitted to do so in your jurisdiction. If you believe a child has provided personal information, contact support so the request can be reviewed.

Your privacy requests

For privacy questions or account-related requests, contact littlelucktoday@protonmail.com. Never send a password, Apple identity token, session JWT, or complete Apple transaction JWS. Support may need non-sensitive information such as the app version, device environment, approximate time of an issue, and a short description.

Policy updates

This policy may be updated when Twist Tale’s features, providers, or legal requirements change. The date above identifies the version currently published. Material changes should be reviewed before the updated policy is used for release or account-deletion approval.