Storynook Privacy Policy

Storynook is built for private family memories. We know that the photos, stories and information you store in Storynook can be deeply personal, especially where they concern children.

We are committed to being transparent about how we use personal data and to giving you control over what you store and whom you share it with.

We do not sell your personal data, photographs, stories or other private family content to advertisers or data brokers. Storynook is currently free to use, and our business model is not based on reducing the privacy of our users. In the future, we expect to generate revenue primarily through optional products and services that users choose to purchase, such as personalised photobooks.

This Privacy Policy explains what personal data Storynook processes, why we process it, with whom it may be shared, how it is protected and what rights you have.

Storynook is a family-memory application that allows parents and other adults to preserve photographs, stories and memories about their children and family life, and to connect with people they choose.

When you use Storynook, we process personal data about you. If you add information about your children or other people, we may also process personal data about them.

Storynook is intended to be managed by adults. Children do not need to create their own Storynook accounts.

Personal data is processed in accordance with applicable data-protection law, including the General Data Protection Regulation (“GDPR”). For GDPR purposes, the provider of Storynook is the controller of the personal data described in this Privacy Policy.

If you have questions about this Privacy Policy or about how Storynook processes personal data, you can contact us at info@storynookapp.com.

If we materially change how we process personal data, we will update this Privacy Policy and, where required, inform you before the new processing begins.

When you create a Storynook account, we process information such as your name, email address and authentication information required to create and secure your account.

We use this information to create your account, authenticate you and provide Storynook.

The legal basis for this processing is the performance of our agreement with you.

Depending on how you use Storynook, we may process:

• your name and email address;
• photographs you upload;
• stories, captions and other text you add;
• names of children you add to Storynook;
• other information you voluntarily include in memories;
• who you follow and who follows you;
• follow requests you send or receive; and
• whether follow requests are accepted or declined.

We process this information to provide Storynook, including storing, organising and displaying your memories and providing the sharing and social functionality you choose to use.

For information relating directly to you, the legal basis is generally the performance of our agreement with you.

Where content contains personal data about other people, including children, we process that information where necessary to provide the private family-memory service requested by the account holder and where we have an appropriate legal basis under applicable law.

Storynook is designed to allow parents and other authorised adults to preserve memories involving children.

This may include a child’s:

• name;
• photographs;
• stories or descriptions about them; and
• other information that an adult chooses to include in a memory.

Storynook is not intended for children to independently create or manage accounts.

We treat children’s personal data with particular care. We do not use children’s personal data for targeted advertising, advertising profiles or the sale of personal data.

We do not intentionally use private family content to infer sensitive characteristics about children for advertising or profiling purposes.

Parents and guardians are responsible for deciding what information to store and with whom to share it. We encourage parents and guardians to take a child’s privacy and wishes into account as the child grows older.

You decide which photographs, stories and other memories you add to Storynook.

We process this content to provide the features you use. For example, we need to store a photograph in order to display it back to you and to people with whom you have chosen to share it.

We may also process your content to provide, personalise or improve features for you, including features that organise, analyse, transform or generate outputs from your own User Content for your private use.

We do not sell your User Content, use private User Content for third-party advertising, or use it to build advertising profiles.

We do not currently use private photographs or stories stored in Storynook to train general-purpose artificial-intelligence or machine-learning models.

If we introduce a feature that materially changes how private User Content is processed, we will update this Privacy Policy and provide any additional information or choices required by law.

The ownership and rights relating to User Content are further described in our Terms of Use.

Storynook allows users to connect through follower relationships.

Another user may send you a follow request. You can accept or decline that request. We process follow requests and follower relationships to provide this functionality.

Your private family content is not made public merely because you create an account.

Content is made available to other users only according to the sharing functionality and permissions available within Storynook.

You remain in control of whether you accept another user as a follower.

However, once you intentionally share information with another person, Storynook cannot completely control what that person does with information they have legitimately seen, such as taking a screenshot or otherwise recording it outside Storynook.

The legal basis for processing follower and sharing information is the performance of our agreement with you.

We collect limited information about how Storynook is used so that we can understand whether the app works as intended, identify problems and improve the Service.

Depending on the analytics and technical tools we use, this may include:

• screens or features you use;
• actions taken within the app;
• frequency and duration of app usage;
• app version;
• device type and operating system;
• language and general technical settings;
• IP address or similar network information;
• crash reports, error logs and performance information; and
• authentication, request and security logs.

We use this information to improve Storynook, understand which features are useful, diagnose technical problems, monitor stability, prevent abuse and keep the Service secure.

We do not use the contents of your private photographs, stories or other family memories for general product analytics.

Where analytics have little impact on your privacy and do not require consent under applicable law, we rely on our legitimate interest in understanding and improving Storynook.

Where applicable law requires your consent for a particular analytics or tracking technology, we will ask for consent before using it and you will be able to withdraw that consent.

We do not use analytics data for third-party advertising or cross-service advertising tracking.

We may use your email address to send messages necessary to operate and secure your Storynook account.

These may include:

• account confirmation emails;
• authentication or security messages;
• password-reset emails; and
• important notices about Storynook, our Terms of Use or this Privacy Policy.

These are service communications and are not third-party advertising.

Storynook does not currently sell photobooks or other physical products, but we may introduce this functionality in the future.

If you choose to purchase a personalised photobook or other product, we expect to process additional information necessary to create, pay for and deliver the order.

This may include:

• your Storynook account information;
• the photographs, stories and other content selected for the product;
• your name;
• your shipping address and other delivery information;
• order information; and
• payment and billing information.

We will process this information because it is necessary to fulfil the purchase you choose to make.

Payment information may be processed by a specialist payment provider. Where possible, Storynook will not itself store complete payment-card details.

To produce and deliver a photobook, we will share only the information reasonably necessary with the companies involved in payment, printing, production, fulfilment and delivery.

For example, a printing provider may need access to the photographs and stories contained in your book, while a delivery provider may need your name and shipping address.

We will not provide private family content to a printing or fulfilment provider merely because that content exists in Storynook.

When photobooks or other purchases are introduced, we will update this Privacy Policy with any additional information required about the providers involved and how order information is processed and retained.

We may process personal data where reasonably necessary to:

• investigate fraud or misuse;
• protect the security of Storynook;
• enforce our Terms of Use;
• protect the rights or safety of Storynook, our users or other people;
• respond to lawful requests from courts, law-enforcement authorities or regulators; or
• comply with applicable legal obligations.

The legal basis will depend on the circumstances and may include compliance with a legal obligation or our legitimate interests in protecting the Service and its users.

We do not sell your personal data to third parties for commercial purposes.

We share personal data only where necessary to provide Storynook, where you choose to share information with another user, where a service provider processes information on our behalf, or where disclosure is required by law.

Storynook uses Supabase as backend infrastructure for services including authentication, database storage and storage of photographs and other User Content.

This means that account information, family information, follower relationships, photographs and stories may be stored and processed using Supabase infrastructure.

Supabase processes this information on our behalf as a service provider and does not obtain ownership of your User Content.

Storynook’s primary Supabase project data is hosted in an EU region.

Supabase may use subprocessors to provide its services. If personal data is transferred outside the European Economic Area (“EEA”), appropriate safeguards required by applicable data-protection law will be used.

We may use service providers to help us measure app usage, diagnose crashes, monitor performance or protect the security of Storynook.

Where these providers process personal data on our behalf, they may use it only for the purposes for which we engage them, subject to applicable contractual and data-protection requirements.

We do not allow analytics providers to use Storynook users’ private family content for advertising.

Information is shared with another Storynook user where this is necessary to provide a feature you choose to use.

For example, another user may receive your follow request or see that you have accepted their follow request.

Where a person has been given access to your family content through Storynook, that content may be displayed to that person in accordance with the permissions available within Storynook.

If you choose to order a photobook in the future, we may share the information necessary to complete your order with:

• payment providers;
• printing and production partners;
• fulfilment providers; and
• delivery or postal services.

These parties will receive only the information reasonably necessary for their role in fulfilling your order.

We may disclose personal data where required by a valid legal obligation, court order or lawful request from a competent authority.

We take the protection of personal data stored in Storynook seriously and use appropriate technical and organisational measures intended to protect it against unauthorised access, loss, misuse, alteration or disclosure.

Storynook uses Supabase infrastructure for the storage and security of its primary application data.

No online system can guarantee absolute security. We aim to use safeguards appropriate to the nature of the information stored through Storynook, particularly because the Service may contain private family information and information about children.

We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

In general:

• account information is retained while your Storynook account remains active;
• photographs, stories and other User Content are retained until you delete the relevant content or your account;
• follower relationships and follow requests are retained for as long as necessary to provide the relevant functionality;
• analytics and performance information is retained only for as long as reasonably necessary to understand and improve the Service; and
• technical and security information is retained only for as long as reasonably necessary for security, troubleshooting and operation of the Service.

When User Content or an account is deleted, the information is removed from the active Service.

Copies may temporarily remain in backups or technical systems until they are deleted or overwritten through normal backup and disaster-recovery processes.

Information may also be retained where we have a legal obligation to do so.

If purchases are introduced, certain order, billing or transaction information may need to be retained for longer periods where required by tax, accounting, consumer-protection or other applicable laws.

Under the GDPR, depending on the circumstances, you may have the right to:

• access the personal data we process about you;
• correct inaccurate or incomplete personal data;
• request deletion of your personal data;
• restrict certain processing;
• object to processing based on legitimate interests;
• receive certain personal data in a portable format; and
• withdraw consent at any time where processing is based on your consent.

Where Storynook provides controls that allow you to change or delete information yourself, you may exercise those options directly through the Service.

To exercise your privacy rights or ask a question about your personal data, contact us at info@storynookapp.com.

These rights are subject to the conditions and exceptions provided by applicable law.

Because Storynook may contain information about children and other family members, requests concerning shared content may sometimes require us to consider the rights and interests of more than one person.

You also have the right to lodge a complaint with the competent data-protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.

Storynook will continue to develop, and we may update this Privacy Policy as our Service, technology or data-processing activities change.

If a change materially affects how we use personal data, we will inform users and obtain consent where required before the new processing begins.

The date at the top of this Privacy Policy shows when it was most recently updated.

If you have questions about this Privacy Policy, the personal data we process or your privacy rights, you can contact us at:

info@storynookapp.com