Privacy Policy
1. Who We Are
Interactable Stories ("we", "our", "us") operates the website and platform at interactablestories.com and app.interactablestories.com. If you have any questions about this policy, contact us at [email protected].
2. Information We Collect
We collect information you provide directly and information generated by your use of the service:
- Account data: Your email address and encrypted password when you register.
- Usage data: Story choices, progress, and session activity to personalise your experience.
- Device & browser data: IP address, browser type, operating system, and referring URL for security and analytics purposes.
- Communications: Any messages you send us via email or support channels.
We do not collect payment card details directly. Payments are handled by a PCI-compliant third-party processor.
3. How We Use Your Information
- To create and manage your account.
- To deliver and personalise the interactive storytelling experience.
- To send transactional emails such as password resets or account notices.
- To improve the platform through aggregated, anonymised analytics.
- To detect and prevent fraud or security incidents.
- To comply with legal obligations.
We will not send you marketing emails without your explicit consent.
4. Cookies & Tracking
We use essential cookies required for authentication, including tokens stored in your browser. We also use Umami for anonymous, aggregate website analytics, PostHog for product analytics inside the app, and Sentry for error monitoring. These tools may process account identifiers such as your public user ID, email address, display name, and plan, along with device, browser, referrer, and interaction metadata so we can debug issues and improve the product.
We do not use advertising cookies or third-party tracking pixels.
5. Data Sharing & Third-Party Processors
We do not sell, rent, or trade your personal data. We share data only with trusted sub-processors that help us operate the platform. Each processor receives only the data necessary for their specific function:
- Stripe — payment processing and subscription management (billing data, email address). Privacy Policy
- Amazon Web Services (AWS) — cloud hosting, file storage (S3), and infrastructure. Privacy Policy
- OpenAI — AI story generation, text-to-speech, and image generation (story content you provide as input). Privacy Policy
- ElevenLabs — text-to-speech audio generation (story narration text). Privacy Policy
- Amazon Polly — text-to-speech audio generation (story narration text). Privacy Policy
- PostHog — product analytics and feature usage tracking (pseudonymous user ID, events, device metadata). Privacy Policy
- Sentry — error monitoring and crash reporting (error context, pseudonymous user ID, device metadata). Privacy Policy
- Umami — anonymous website analytics (no personal data, no cookies). Privacy Policy
- Resend / email provider — transactional email delivery (email address, first name). Privacy Policy
- Replicate — AI image and video generation (image prompts, story content). Privacy Policy
We also share data with law enforcement or regulators when required by applicable law.
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove your personal data within 30 days unless a longer retention period is required by law.
7. Your Rights
Depending on your location, you may have rights that include:
- Accessing the personal data we hold about you.
- Requesting correction of inaccurate data.
- Requesting deletion of your account and data.
- Objecting to or restricting certain processing.
- Data portability, meaning receiving your data in a machine-readable format.
To exercise these rights, email us at [email protected].
8. Security
We use industry-standard security measures including HTTPS encryption, hashed passwords, and JWT-based authentication. No system is completely secure, so please use a strong, unique password and contact us immediately if you suspect unauthorised access to your account.
9. Children's Privacy
Interactable Stories is not directed at children under 13 years of age. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with data, please contact us and we will delete it promptly.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on this page with an updated date. Continued use of the service after changes take effect constitutes acceptance of the revised policy.
11. Contact Us
Questions or concerns? Reach us at [email protected].