Privacy Policy
Last updated:
1. Who we are
("we", "us", "our") is provided by , , with its registered address at .
Company number: .
The data controller responsible for your personal data is . For any privacy question or to exercise your rights, contact .
2. Who this service is for
Accounts on are held by adults (see our Terms for the minimum age). Children do not create accounts or sign in. A parent or guardian sets up "reader profiles" for children, which contain only a nickname and a colour — no other information about a child is required.
3. What personal data we collect
When you create an account: your email address and a password. Your password is handled securely by our authentication provider and is never stored by us in readable form. We do not collect your name at signup.
Your account record contains: your email, your subscription tier, your account role, and the date you joined.
Reader profiles (for children): a nickname and a colour only. We deliberately collect no other personal information about children through reader profiles. Children do not sign in and provide no contact details.
When you create a story: the choices you make — such as the virtue, age band, setting and style — and, optionally, a name for the main character. Section 6 explains how these are used to generate the story.
As you use the service: we record reading activity and quiz results linked to a reader profile, saved stories, bookmarks, playlists, and general account usage, so the service works and remembers your preferences.
Analytics (only with your consent): if you accept analytics, we collect anonymised usage data — see Section 7.
We do not currently collect payment information, as paid subscriptions are not yet active. When they launch, payment will be handled by a third-party provider and this policy updated.
4. Why we use your data, and our lawful basis
| What | Why | Lawful basis (UK GDPR) |
|---|---|---|
| Email, password, account | To create and run your account | Performance of a contract |
| Reader profiles, reading records, saved stories | To provide the reading experience and remember progress | Performance of a contract |
| Character name (if provided) | To personalise the story you asked us to create | Performance of a contract |
| Analytics | To understand and improve the service | Consent (withdrawable anytime) |
| Security, abuse prevention, records | To keep the service safe and meet obligations | Legitimate interests / legal obligation |
5. Cookies and local storage
We set no cookies at all when you are signed out and have not accepted analytics. We use:
- Strictly-necessary local storage — to keep you signed in and remember display preferences (theme, font, active reader profile) and your cookie choice. This is essential and does not require consent.
- Analytics cookies (only with consent) — if you accept, Google Analytics sets cookies. Reject or withdraw and they are not set (existing ones are removed). Change your choice anytime via "Cookie settings" in the footer.
6. How stories are generated (and the AI providers involved)
To create a story, the details you give us — including an optional name for the main character — are sent to third-party AI providers, which generate the words, the pictures and the narration:
- Story text — an AI language provider (Anthropic, United States).
- Illustrations — an AI image provider (Google Gemini, United States).
- Narration audio — an AI voice provider (ElevenLabs, United States).
The character name is simply what the child in the story is called: it can be any name you like and does not need to be a real one. Whatever you enter becomes part of the story text and the narration audio, and is stored with the story in your library.
7. Analytics
If — and only if — you accept, we use Google Analytics 4, configured to: anonymise IP addresses, disable advertising features and cross-device ("Google signals") tracking, load only after you consent, and remove its cookies if you withdraw consent. We use it only to improve the service, not to advertise to you.
8. Who we share your data with
We use a small number of service providers ("processors") to run the Service. They act on our instructions and may only use your data to provide their service to us. Below we list the categories of recipient rather than every supplier name, so that we can change supplier without republishing this policy.
We name our AI providers specifically. A name you enter for a story character is sent to them, so we think you should know exactly who they are.
| Category of recipient | What they do for us | Where they process data |
|---|---|---|
| Hosting, database and authentication | Stores your account, reader profiles, stories and reading activity, and handles signing in | European Union |
| Content delivery, media storage and security | Serves the website and the story images and audio, and protects the Service from abuse | Western Europe, with global edge delivery |
| Story-generation infrastructure | Runs the process that assembles your story | May be outside the UK/EEA — see section 9 |
| AI story text — Anthropic | Generates the words of your story from your request | United States |
| AI illustrations — Google | Generates the pictures for each scene | United States |
| AI narration — ElevenLabs | Generates the spoken audio for each scene | United States |
| Analytics (only if you consent) | Measures how the site is used so we can improve it | United States |
| Transactional email | Sends account emails such as confirmation and password resets | United Kingdom / European Union and United States |
| Business email | Handles our correspondence with you | European Union |
We do not sell your personal data. We share it only with these categories of provider to run the Service, or where we are required to by law.
Want the specific names? You are entitled to know who processes your data. If you would like the current supplier names behind any category above, contact and we will tell you.
9. International transfers
Our AI providers — Anthropic, Google and ElevenLabs — are located in the United States, as is our analytics provider. Some of our infrastructure and email providers may also process data outside the UK and EEA.
Where personal data — including the details you enter when creating a story — is transferred outside the UK or EEA, we rely on appropriate safeguards, such as the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or another transfer mechanism approved under UK data protection law. You may request further information about these safeguards, including a copy of the relevant terms, by contacting .
10. How long we keep your data
- While your account is active, we keep your account data, profiles, stories, and reading records so the service works.
- If you delete your account, it is deactivated immediately and permanently deleted after a 30-day grace period (signing back in during that period cancels deletion). After the grace period, your account and associated data are permanently removed by an automated process.
11. Your rights
Under UK GDPR you may: access your data; correct it; delete it; restrict or object to processing; obtain portability; and withdraw analytics consent anytime. To exercise any of these, contact .
You have the right to complain to the at www.ico.org.uk. You can also contact us directly at .
12. Children's privacy
is designed so adults hold accounts and manage children's use. We follow the principles of the ICO's Age Appropriate Design Code: we minimise children's data (reader profiles are nickname + colour only), we do not require children to provide personal information, and children do not sign in.
13. Changes
We may update this policy. The "last updated" date shows the latest version; significant changes will be notified appropriately.
14. Contact
, . Privacy enquiries: .
--- ---