Privacy Notice

The Story Project ("Service") is operated by Bradley Jay LLC ("we", "us", "our"). This notice explains what personal data we collect, why we collect it, how we use it, and the rights you have. We are the data controller for the personal data described here.

Data we collect

• Account details: name, email address, and password credentials for the account owner and invited family members.
• Family & storyteller info: names, relationship notes, contact channels (email/SMS) for the senior storyteller.
• Stories & content: video recordings, transcripts, prompts, and notes you or your family members submit.
• Support messages: any content of emails or feedback you send to us.
• Usage & device data: pages visited, actions taken, IP address, browser and device identifiers, and cookies strictly needed to keep you signed in and secure the Service.

Payment information (card number, billing address, tax details) is collected and processed directly by Paddle, our Merchant of Record. We do not store your full payment details.

How we use your data

• Create and secure your account and family workspace.
• Deliver the Service: send prompts, record and transcribe stories, maintain your private family archive, and unlock Vault deliveries.
• Communicate with you about your account, service changes, and support requests.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Improve reliability and product quality (aggregate diagnostics).
• Meet legal, tax, and accounting obligations.

Legal bases

Where the GDPR or UK GDPR applies, we rely on: performance of a contract with you (providing the Service), our legitimate interests (security, product improvement, direct communications with existing customers), your consent (optional marketing, cookies that are not strictly necessary), and compliance with legal obligations (tax, accounting, responding to lawful requests).

Who we share data with

• Paddle.com Market Ltd. — our reseller and Merchant of Record. Paddle handles checkout, billing, tax, invoicing, subscription management, and refund requests.
• Infrastructure & subprocessors — hosting, managed database and storage, transactional email delivery, and error monitoring, used to operate the Service.
• Family members you invite — invited members see the storyteller profile and stories you share within your workspace.
• Professional advisers & authorities — legal, accounting, or regulatory recipients where required by law.

We never sell your personal data or your family's stories.

International transfers

Data may be processed in the United States and other countries where our providers operate. Where personal data of individuals in the UK or EEA is transferred, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an applicable adequacy decision.

How long we keep data

We keep account and story data for as long as your account is active. If you close your account, we delete or anonymize personal data within 90 days, except where we must retain records for legal, tax, security, or dispute-resolution purposes. You can request earlier deletion at any time.

Your rights

Subject to your local law you may have the right to access, correct, delete, restrict, or object to processing of your personal data, to withdraw consent, to receive a portable copy, and to lodge a complaint with your local data protection authority. To exercise any of these rights, email hello@storyproject.app. We respond within 30 days.

Security

We apply appropriate technical and organizational measures — including encryption in transit, encryption at rest for stored video and transcripts, access controls, and least-privilege authentication — to protect your data. No online service is completely secure; please use a strong, unique password.

Cookies

We use a small number of cookies and equivalent storage. Strictly necessary cookies keep you signed in and protect the Service. If we add analytics or marketing cookies in the future, we will ask for your consent and let you manage preferences.

Children

The Service is intended for adults. We do not knowingly collect personal data from children under 16. If you believe a child has provided personal data to us, please contact us and we will delete it.

Contact

Bradley Jay LLC — email hello@storyproject.app.

Changes

We may update this notice from time to time. Material changes will be announced by email or in the app before they take effect.