Storynook Privacy Policy

Storynook is built for private family memories. We know that the photos, stories and information you store in Storynook can be deeply personal, especially where they concern children.

We are committed to being transparent about how we use personal data and to giving you control over what you store and whom you share it with.

We do not sell your personal data, photographs, stories or other private family content to advertisers or data brokers. Storynook is currently free to use, and our business model is not based on reducing the privacy of our users. In the future, we expect to generate revenue primarily through optional products and services that users choose to purchase, such as personalised photobooks.

This Privacy Policy explains what personal data Storynook processes, why we process it, with whom it may be shared, how it is protected and what rights you have.

Storynook is a family-memory application that allows parents and other adults to preserve photographs, stories and memories about their children and family life, and to connect with people they choose.

When you use Storynook, we process personal data about you. If you add information about your children or other people, we may also process personal data about them.

Storynook is intended to be managed by adults. Children do not need to create their own Storynook accounts.

Personal data is processed in accordance with applicable data-protection law, including the General Data Protection Regulation (“GDPR”). For GDPR purposes, the provider of Storynook is the controller of the personal data described in this Privacy Policy.

If we materially change how we process personal data, we will update this Privacy Policy and, where required, inform you before the new processing begins.

When you create a Storynook account, we process information such as your name, email address and authentication information required to create and secure your account.

We use this information to create your account, authenticate you and provide Storynook. The legal basis is the performance of our agreement with you.

Depending on how you use Storynook, we may process:

• your name and email address;
• photographs you upload;
• stories, captions and other text you add;
• names of children you add to Storynook;
• other information you voluntarily include in memories;
• who you follow and who follows you;
• follow requests you send or receive; and
• whether follow requests are accepted or declined.

We process this information to provide Storynook, including storing, organising and displaying your memories and providing the sharing and social functionality you choose to use.

For information relating directly to you, the legal basis is generally the performance of our agreement with you. Where content contains personal data about other people, including children, we process that information where necessary to provide the private family-memory service requested by the account holder and where we have an appropriate legal basis under applicable law.

Storynook is designed to allow parents and other authorised adults to preserve memories involving children. This may include a child’s name, photographs of them, stories about them and other information that an adult chooses to include in a memory.

Storynook is not intended for children to independently create or manage accounts.

We treat children’s personal data with particular care. We do not use children’s personal data for targeted advertising, advertising profiles or the sale of personal data. We do not intentionally use private family content to infer sensitive characteristics about children for advertising or profiling purposes.

Parents and guardians are responsible for deciding what information to store and with whom to share it, and we encourage them to take a child’s privacy and wishes into account as the child grows older.

You decide which photographs, stories and other memories you add to Storynook.

We process this content to provide the features you use. For example, we need to store a photograph in order to display it back to you and to people with whom you have chosen to share it.

We may also process your content to provide, personalise or improve features for you, including features that organise, analyse, transform or generate outputs from your own User Content for your private use.

We do not sell your User Content, use private User Content for third-party advertising, or use it to build advertising profiles.

We do not currently use private photographs or stories stored in Storynook to train general-purpose artificial-intelligence or machine-learning models.

If we introduce a feature that materially changes how private User Content is processed, we will update this Privacy Policy and provide any additional information or choices required by law.

Storynook allows users to connect through follower relationships.

Another user may send you a follow request. You can accept or decline that request. We process follow requests and follower relationships to provide this functionality.

Your private family content is not made public merely because you create an account. Content is made available to other users only according to the sharing functionality and permissions available within Storynook.

You remain in control of whether you accept another user as a follower. However, once you intentionally share information with another person, Storynook cannot completely control what that person does with information they have legitimately seen, such as taking a screenshot outside Storynook.

The legal basis for processing follower and sharing information is the performance of our agreement with you.

We collect limited information about how Storynook is used so that we can understand whether the app works as intended, identify problems and improve the Service.

Depending on the analytics and technical tools we use, this may include:

• screens or features you use;
• actions taken within the app;
• frequency and duration of app usage;
• app version;
• device type and operating system;
• language and general technical settings;
• IP address or similar network information;
• crash reports, error logs and performance information; and
• authentication, request and security logs.

We use this information to improve Storynook, understand which features are useful, diagnose technical problems, monitor stability, prevent abuse and keep the Service secure.

We do not use the contents of your private photographs, stories or other family memories for general product analytics.

Where analytics have little impact on your privacy and do not require consent under applicable law, we rely on our legitimate interest in understanding and improving Storynook. Where applicable law requires your consent for a particular analytics or tracking technology, we will ask for consent before using it and you will be able to withdraw that consent.

We do not use analytics data for third-party advertising or cross-service advertising tracking.

We may use your email address to send messages necessary to operate and secure your Storynook account, such as account confirmation emails, authentication or security messages, password-reset emails and important notices about Storynook or our legal documentation.

These are service communications, not third-party advertising.

Storynook does not currently sell photobooks or other physical products, but we may introduce this functionality in the future.

If you choose to purchase a personalised photobook or other product, we expect to process additional information necessary to create, pay for and deliver the order. This may include your account information, the photos and stories selected for the product, your name, shipping address, delivery information, order information, and payment or billing information.

We will process this information because it is necessary to fulfil the purchase you choose to make.

Payment information may be processed by a specialist payment provider. Where possible, Storynook will not itself store complete payment-card details.

To produce and deliver a photobook, we will share only the information reasonably necessary with the companies involved in payment, printing, production, fulfilment and delivery. For example, a printer may need access to the content of the book, while a delivery provider may need your name and shipping address.

When this functionality is introduced, we will update this Privacy Policy with any additional information required about the providers involved and how order data is retained.

We may process personal data where reasonably necessary to investigate fraud or misuse, protect the security of Storynook, enforce our Terms of Use, protect the rights or safety of Storynook or others, respond to lawful requests from authorities, or comply with legal obligations.

The legal basis will depend on the circumstances and may include compliance with a legal obligation or our legitimate interests in protecting the Service and its users.

We do not sell your personal data to third parties for commercial purposes.

We share personal data only where necessary to provide Storynook, where you choose to share information with another user, where a service provider processes information on our behalf, or where disclosure is required by law.

Storynook uses Supabase as backend infrastructure for services including authentication, database storage and storage of photographs and other User Content.

This means that account information, family information, follower relationships, photographs and stories may be stored and processed using Supabase infrastructure.

Supabase processes this information on our behalf as a service provider and does not obtain ownership of your User Content.

Storynook’s primary Supabase project data is hosted in an EU region. Supabase may use subprocessors to provide its services. If personal data is transferred outside the European Economic Area, appropriate safeguards required by applicable data-protection law will be used.

We may use service providers to help us measure app usage, diagnose crashes, monitor performance or protect the security of Storynook.

Where these providers process personal data on our behalf, they may use it only for the purposes for which we engage them, subject to applicable contractual and data-protection requirements.

We do not allow analytics providers to use Storynook users’ private family content for advertising.

Information is shared with another Storynook user when necessary to provide a feature you choose to use, such as sending a follow request or making content available to an accepted follower according to Storynook’s sharing permissions.

If you choose to order a photobook in the future, we may share the information necessary to complete your order with payment providers, printing and production partners, fulfilment providers and delivery or postal services.

We may disclose personal data where required by a valid legal obligation, court order or lawful request from a competent authority.

We take the protection of personal data stored in Storynook seriously and use appropriate technical and organisational measures intended to protect it against unauthorised access, loss, misuse, alteration or disclosure.

Storynook uses Supabase infrastructure for the storage and security of its primary application data. No online system can guarantee absolute security, but we aim to use safeguards appropriate to the nature of the information stored through Storynook, particularly because it may contain private family information and information about children.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general, account information and User Content are retained while your account remains active or until you delete the relevant content. Follow relationships are retained for as long as necessary to provide that functionality. Analytics, technical and security data are retained only for as long as reasonably necessary for analytics, troubleshooting, security and operation of the Service.

When User Content or an account is deleted, the information is removed from the active Service. Copies may temporarily remain in backups or technical systems until they are deleted or overwritten through normal backup and disaster-recovery processes.

If purchases are introduced, certain order, billing or transaction information may need to be retained for longer where required by tax, accounting, consumer-protection or other laws.

Under the GDPR, depending on the circumstances, you may have the right to access personal data we process about you, correct inaccurate data, request deletion, restrict processing, object to certain processing, receive certain data in a portable format, and withdraw consent where processing is based on consent.

Where Storynook provides controls that allow you to change or delete information yourself, you may exercise those options directly through the Service.

These rights are subject to the conditions and exceptions provided by applicable law. Because Storynook may contain information about children and other family members, requests concerning shared content may require us to consider the rights of more than one person.

You also have the right to lodge a complaint with the competent data-protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Storynook will continue to develop and we may update this Privacy Policy as our Service, technology or data-processing activities change.

If a change materially affects how we use personal data, we will inform users and obtain consent where required before the new processing begins.

The date at the top of this Privacy Policy shows when it was most recently updated.