Your child's safety is our priority
We're parents too, so we understand how important it is to keep your family's information safe. Here's exactly how we protect your child's data.
Last updated: 8 October 2026
In plain English
A 30-second summary for busy parents. The full legal text is below.
-
We never sell your data
Ever. Not to advertisers, not to data brokers.
-
Parents own the account
We don't collect info from children directly — only what you add to create stories.
-
Encrypted in transit and at rest
Bank-level encryption protects accounts, stories, and payments.
-
Delete your family's data anytime
One click in Account Settings — we remove it within 30 days.
Your Family's Privacy Matters
At My Story Wish, we take your family's privacy seriously. This Privacy Policy explains how we keep your personal information safe when you use our story creation service.
Our child safety promise
- We never collect personal information from children under 13 — all accounts are created by parents
- All stories are age-appropriate and educational — we use strict content filters
- We follow COPPA and UK GDPR rules for children's data. Parents set up the account and stay in control of what we hold.
- Your child's details are only used to make your stories. They are never sold or used for advertising, and only go to the services listed in section 3 that create and deliver your stories.
- You can delete your child's data anytime — complete control over your family's information
1. Information We Collect
Personal Information
We collect information you provide directly to us, such as:
- Account information (name, email address, password)
- Profile information and preferences
- Story prompts and character descriptions
- Payment information (processed securely through our payment processors)
- Communications with our support team
Usage Information
We automatically collect certain information about your use of our service:
- Device information (type, operating system, browser)
- Usage patterns and feature interactions
- IP address and general location data
- Cookies and similar tracking technologies
Photos and details about your child
To create a character, you can add your child's first name, age, appearance and, if you choose, a photo. Photos are optional. We use them only to draw your child's character in your stories, through the illustration services listed in section 3. If you would like a photo removed, email us at hello@mystorywish.com and we will delete it.
Your Children's Information
We never collect personal information directly from children under 13. Our service is designed for parents to create stories for their little ones. If you think we've accidentally collected information from a child under 13, please let us know right away.
2. How We Use Your Information
We use the information we collect to:
- Create amazing stories for your family
- Make stories that your children will love
- Handle payments and subscriptions safely
- Keep you updated about your account
- Help you whenever you need support
- Make our service better for families
- Keep everything secure and safe
- Follow all the rules and regulations
3. Information Sharing and Disclosure
We never sell, trade, or rent your personal information to anyone. We only share your information in these specific situations:
-
Service Providers: With trusted third-party vendors who process data on our behalf to run the service. They may only use it to provide their service to us:
- OpenAI and Anthropic: writing and checking stories from your prompts and character details. If you add a character photo, OpenAI also receives it to describe your child's appearance.
- fal.ai: drawing illustrations, including from a character photo if you add one
- ElevenLabs: narration audio
- Fly.io and our cloud storage provider: hosting the app and storing stories and images
- Stripe, Apple, Google and RevenueCat: payments and subscriptions
- Resend: account and story emails
- PathCue: the support chat widget on our website, which receives your IP address and any messages you send. It does not run inside our iOS and Android apps.
- Sentry: error reports so we can fix bugs
- Google Analytics and Microsoft Clarity: measuring how our website is used, with cookies only if you consent. These do not run inside our iOS and Android apps.
- Legal Requirements: When required by law or to protect our rights and safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets
- Consent: When you explicitly consent to sharing your information
4. Data Security
We implement appropriate technical and organisational measures to protect your personal information:
- Encryption of data in transit and at rest
- Regular security assessments and updates
- Access controls and authentication measures
- Secure data centres and infrastructure
- Employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
5. Data Retention
We retain your personal information for as long as necessary to provide our service and fulfil the purposes outlined in this Privacy Policy. When you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.
6. Your Rights and Choices
You have the following rights regarding your personal information:
- Access: Request access to your personal information
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Portability: Request a copy of your data in a portable format
- Opt-out: Unsubscribe from marketing communications
- Account Management: Update your account information at any time
To exercise these rights, please contact us using the information provided below.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience:
- Essential Cookies: Required for basic functionality
- Analytics Cookies: Help us understand how you use our service
- Preference Cookies: Remember your settings and preferences
You can control cookie settings through your browser preferences, but disabling certain cookies may affect the functionality of our service.
8. Third-Party Services
Our service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to these third parties. We encourage you to review their privacy policies before providing any personal information.
We use trusted third-party service providers to help us operate our service, including:
- Payment Processors: To securely process subscription payments and transactions
- Analytics Services: To understand how our service is used and improve user experience
- Cloud Hosting Providers: For secure data storage and processing
- Story creation partners: To create your personalised stories and character illustrations
9. International Data Transfers
Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Email: hello@mystorywish.com
12. Compliance
This Privacy Policy complies with applicable data protection laws, including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and Children's Online Privacy Protection Act (COPPA).