Last updated: 19 July 2026
Stories Like Ours ("we", "us", "our") makes personalised children's stories from the details you share with us about your child. This policy explains what we collect, why, and what rights you and your family have over it.
Stories Like Ours is a UK-based service.
Stories Like Ours, 9 White Court, WF4 1TB.
[Company registration number to be added, if trading as a limited company.]
For privacy questions or to exercise your rights, contact us at [privacy@storieslikeours.uk — confirm inbox before publication].
| Category | What |
|---|---|
| Account details | Your email address and password (password is hashed by our authentication provider — we never see it in plain text). Confirmation that you are 18 or over. |
| Child profile details | Name, age, and your relationship to the child; free-text answers you give during the story questionnaire (memories, obsessions, upcoming excitements, personality, and physical description including hair, eyes, ethnicity, and build). |
| Story content | The stories generated for your family, and short structured notes ("story references") kept so future stories can build on earlier ones. |
| Anything else you choose to share | Parents sometimes mention sensitive real-world context (e.g. a hard week at school) to help the story reflect what's going on. See Section 6. |
| Payment details | Handled directly by our payment processor (Stripe) — we do not store your card details ourselves. [Payments not yet live.] |
We use a small number of specialist providers to run the service. None of them may use your family's data for their own purposes.
| Provider | What they process | Location |
|---|---|---|
| Anthropic | Conversation transcripts and questionnaire answers, to generate story text | United States |
| Supabase | Account and database hosting | Frankfurt, Germany (EU) |
| Vercel | Website and serverless function hosting | Washington, D.C., USA |
| Neolemon | Visual descriptions, for illustration (planned, not yet live) | [TBC] |
| Stripe | Payment details (planned, not yet live) | [TBC] |
| Lulu / Gelato | Story content and postal address, for printed books (planned, not yet live) | [TBC] |
We use Anthropic's Claude API to generate story content. Under Anthropic's commercial API terms, data sent through the API is not used to train Anthropic's general models — you can read Anthropic's current terms at anthropic.com/legal.
Where a provider is based outside the UK/EEA — this currently includes Anthropic and Vercel, both US-based, while Supabase hosts your data in Frankfurt, Germany (EU) — we rely on appropriate safeguards such as Standard Contractual Clauses. [Data Processing Agreements with each provider are being finalised — see internal action log.]
We never sell your family's data, and we don't share it for advertising.
We only keep the specific words of a questionnaire conversation for a short time. Here's how that works:
Some questions — like your child's ethnicity — help us describe them accurately for the story (and, in future, for illustration). This is optional. You don't have to share it, and leaving it out won't stop you creating a story.
Parents also sometimes mention something difficult going on for their child — a hard day, a big change at home, something unkind that happened. We understand this is offered in good faith, as context. Our system is specifically instructed to take only the general emotional shape of anything sensitive you share (for example, "going through a big change") and never to reproduce the specific words, incident details, or other people involved — either in the story, or in what we keep afterwards.
Please only share what you're comfortable with. Sensitive information is never required to create a story.
Your child is who this service is about, but they are not our customer and do not use the questionnaire, sign up, or manage any settings themselves — you do, as the account holder. This is a deliberate design choice, and it shapes how this policy applies: your child's information is provided, viewed, and controlled entirely through your account.
If your child is old enough to want to exercise their own data protection rights directly with us in future, we'll have a process for that — for now, please contact us and we'll help.
Under UK GDPR, you can ask us to:
To do any of these, contact us using the details in Section 1. You can also complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at any time.
Access to your data is protected by row-level security at the database layer, meaning your account's data is only ever returned to your own authenticated session — not just filtered by the app, but enforced by the database itself. All traffic to the site is encrypted (HTTPS). Passwords are hashed, never stored in plain text.
See our separate Cookies Policy for details on the (very few) things we store in your browser.
If we make material changes, we'll update the date at the top of this page and, where appropriate, let account holders know directly.
[privacy@storieslikeours.uk — to be confirmed]