Privacy Policy

Last updated: 29 May 2025

This Privacy Policy explains how StorySteps ("we", "us", or "our"), operated by Brent Proctor, collects, uses, and protects your information when you use our service at storysteps.org.

We take your privacy seriously. StorySteps is designed for use with children, and we handle all data with particular care.

1. Who we are

StorySteps is operated by Brent Proctor, an individual based in Brazil. For privacy enquiries, please contact us at storystepscontact@gmail.com.

2. What information we collect

We collect the following information when you use StorySteps:

  • Account information: your email address and password when you register.
  • Story content: the concerns you describe when generating stories (e.g. "my child struggles to make friends"), and your child's age and name if you choose to provide them.
  • Usage data: which features you use, how many stories you generate, and basic technical information such as your browser type and IP address.
  • Payment information: if you subscribe to a paid plan, payment is processed by Stripe. We do not store your card details.

3. How we use your information

We use your information to:

  • Generate personalised stories based on the concern you describe.
  • Maintain your account and story history.
  • Process subscription payments.
  • Send transactional emails (e.g. account confirmation, password reset).
  • Improve the service.

We do not use your data for advertising. We do not sell your data to third parties.

4. Information about children

StorySteps is a tool for parents and professionals, not for direct use by children. You may provide information about your child (such as their age, name, and emotional concerns) to generate stories. This information is used solely to generate the story and is not shared with third parties, sold, or used to train AI models.

We do not knowingly collect personal information directly from children. If you believe a child has provided us with personal information without parental consent, please contact us at storystepscontact@gmail.com.

5. Who we share your information with

We use the following third-party services to operate StorySteps:

  • Supabase — database and authentication (data stored in the EU).
  • OpenAI — AI story generation. Story content is sent to OpenAI to generate responses. OpenAI's data usage policy applies.
  • Stripe — payment processing.
  • Resend — transactional email delivery.
  • Vercel — hosting and infrastructure.

Each of these providers has their own privacy policy. We only share the minimum information necessary for each service to function.

6. Data retention

We retain your account data for as long as your account is active. Story history is retained until you delete it or close your account. You can request deletion of your data at any time by contacting us at storystepscontact@gmail.com.

7. Your rights

Depending on where you are located, you may have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data.
  • Object to or restrict how we process your data.
  • Receive your data in a portable format.

To exercise any of these rights, contact us at storystepscontact@gmail.com. We will respond within 30 days.

8. Cookies

StorySteps uses only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

9. Security

We take reasonable technical and organisational measures to protect your data. All data is transmitted over HTTPS. Passwords are hashed and never stored in plain text. However, no system is completely secure, and we cannot guarantee absolute security.

10. International transfers

StorySteps is operated from Brazil and uses services based in the United States and European Union. By using StorySteps, you acknowledge that your data may be transferred to and processed in these countries. Where required, we ensure appropriate safeguards are in place.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by displaying a notice in the app. Continued use of StorySteps after changes constitutes acceptance of the updated policy.

12. Contact

If you have any questions about this Privacy Policy, please contact us at storystepscontact@gmail.com.