This Privacy Policy explains how Your Story handles information for our website, app experience, personalized storybook workflow, parent accounts, child profiles, subscription features, and support communications.

The service is designed for parents and guardians who create and manage child profiles. A child may read with a parent or within a parent-managed account, but the account, subscription, profile setup, child photo upload, and approval process are intended for the parent or legal guardian.

Parent account information: name, email address, login credentials or authentication identifiers, support messages, subscription status, and billing identifiers from Stripe.

Child profile information: child first name or nickname, age, selected traits, reading preferences, language preferences, physical-character settings you provide such as hair length or eye color, uploaded child photo, approved child character render, and personalized book pages.

Book and usage information: selected stories, release status, slide review status, reading progress, decision-path choices, language selected, narration settings, and technical logs needed to operate the service.

Payment information: payments are processed by Stripe. We receive payment status, plan, invoice, customer, and subscription identifiers. We do not store full card numbers on our servers.

Child photos are used to create a private storybook-style character and child-specific book illustrations. The parent should only upload a photo if they have the right to do so and are the child's parent/legal guardian.

The parent approves the child character render before full book production begins. Book pages remain locked until personalized pages are generated, reviewed, and approved.

Generated child portraits and book pages are private to the family account and authorized operational administrators. They are not public profile images and are not sold to advertisers or data brokers.

We use carefully selected service providers to run the platform, including hosting, database, storage, authentication, payments, email or support tools, and image or narration generation.

For image and story generation, we may send the minimum information needed to generate the requested child-specific illustration, such as the approved character reference, scene prompt, child first name or nickname, and relevant profile details.

When we use the OpenAI API for generation, OpenAI states that API Platform inputs and outputs are not used to train OpenAI models by default unless the customer opts in. We still treat child images and generated artwork as sensitive data and limit their use to operating the service.

To create and manage parent accounts and child profiles.

To generate, review, approve, and release personalized storybooks.

To provide read-aloud narration, language support, reading tools, decision-path features, and customer support.

To manage subscriptions, invoices, cancellations, refunds, failed payments, and account access.

To detect errors, prevent abuse, protect children, improve product quality, and comply with legal, accounting, tax, security, and fraud-prevention obligations.

We share information only as needed to operate the service: hosting and storage providers, authentication providers, payment processors, generation providers, email or support tools, analytics/error monitoring, and authorized administrators or contractors who need access to review book quality and safety.

We may disclose information if required by law, legal process, security investigation, child safety concern, fraud prevention, or to protect the rights and safety of families, children, the platform, or others.

We do not sell child personal information. We do not share child personal information for cross-context behavioral advertising.

A parent or legal guardian can request to review, correct, export, restrict, or delete child profile information, uploaded photos, approved portraits, and generated book pages.

If a parent revokes permission for child data use or asks us to delete required child profile data, some personalized services may no longer work for that child profile.

We may need to verify the requesting adult controls the account before we disclose, correct, export, or delete child information.

Your Story is intended to be managed by parents and guardians. If we learn that we collected personal information directly from a child without appropriate parent involvement, we will take reasonable steps to delete it or obtain the required parent permission.

We aim to collect only the information reasonably necessary to provide personalized storybooks, reading tools, subscriptions, and safety review.

Parents can contact us at any time to stop further collection or use of a child profile.

We may use cookies, browser local storage, and similar technologies to keep families signed in, remember language and reading settings, store local reading state, protect the service, and understand basic product usage.

We do not use these technologies to serve targeted ads to children. Third-party payment pages, authentication providers, or hosting/security providers may use their own cookies according to their policies.

We use access controls, authenticated account flows, private storage, production security headers, administrator-only review workflows, and service-provider security controls to help protect family and child information.

No online service can guarantee perfect security. Parents should use strong passwords, keep account access private, and contact us quickly if they believe an account or child profile was accessed without permission.

We keep parent account, child profile, uploaded photo, generated portrait, generated page, subscription, and support data for as long as needed to provide the service, maintain family access to purchased or released digital books, complete review workflows, resolve disputes, satisfy legal or accounting requirements, and protect the platform.

When a parent requests deletion, we will delete or de-identify account and child profile data within a reasonable period unless we need to retain limited records for legal, billing, fraud-prevention, security, or dispute-resolution purposes.

Payment records may remain with Stripe and in accounting records as required by law.

Your Story may support multiple languages, but the service is currently operated from the United States. If you access the service from another country, your information may be processed in the United States and by service providers in other locations.

Families outside the United States may have additional privacy rights under local law. Contact us to exercise those rights.

We may update this Privacy Policy as the product, legal requirements, service providers, or safety practices change. If a change materially affects how we handle child information, we will provide appropriate notice through the site, account, or email.