Privacy Policy

We collect the little that is needed to make a story feel like it was written for your child. We do not sell it, we do not advertise, and we use no third-party tracking or analytics.

About your child: a first name and age, and optionally a favourite animal, colour, thing they love, and a story preference. All of it is optional except the name and age, and a nickname works perfectly well.

Characters your family invents: if you use My Characters, the names and descriptions you give them — what they look like, what they are like, what they want and fear, and how they know your child.

Your own story ideas: if you type an idea for a story, the words you type.

About you: an email address, only if you create an account. There is no password — we email you a sign-in link instead.

The stories themselves: the text of each adventure and the choices made, so they can be read again without being regenerated. For an Endless story, also a short summary of what has happened so far — who your child has met, what they are carrying, what they promised and chose — so it can carry on another night.

How much the account has used: counts of the stories and scenes made, so that the daily and monthly limits work, and a record of what each one cost us to make.

If you report a problem with a story: the part of the story you reported, the reason you chose, and any note you add. A person reads it, and it is used only to make the stories safer.

If you subscribe: whether your subscription is active, when it renews, and which store it was bought through. Your payment details go to Stripe (on our website) or Google Play (in the Android app), never to us — we do not see or store your card number.

On your device: a cookie that keeps you signed in, and a few settings, such as whether the music is on. No advertising cookies.

We do not collect location, contacts, photos, device identifiers for advertising, or any behavioural profile.

Everything is stored in our database, hosted by Supabase in Sydney, Australia. It is readable only by your own account, and that is enforced by the database itself rather than only by the app.

The app's servers are run by Vercel in the United States, so each request passes through them on its way to the database and back.

This includes stories made before you give us an email address. When you first open the app we create a guest account for you automatically, so that a story is saved the moment it is made. Your child's profile and every story are kept in that account from the start.

A guest account has no email on it, so it cannot be recovered. It is tied to the browser you opened the app in: if you clear that browser or move to another device you lose access to it permanently, though the stories themselves remain in our database until they are deleted. Adding an email address later keeps the same account and everything already in it, and makes it reachable from any device.

Anthropic writes the stories. Each request sends what is needed to write the next scene: your child's first name, age and favourites, any characters and story idea you have given, and the story so far. Anthropic deletes it within 30 days, except content that breaks its usage policies, and under its commercial terms does not use it to train its models.

Supabase stores accounts and saved stories, in Sydney.

Vercel runs the app's servers and, like any web host, keeps standard request logs, which include IP addresses.

Resend delivers sign-in emails. It sees your email address, never your child's details.

Stripe, if you subscribe on our website, takes the payment. It receives your email address and payment details; we receive only whether the subscription is active.

Google, if you subscribe in our Android app, takes the payment through Google Play, using your Google account. We send it a scrambled, one-way code made from your account number — never your email or your child's details — so a purchase can be matched to your account. We receive whether the subscription is active and when it renews.

Anthropic, Vercel, Resend, Stripe and Google are based in the United States, so what each of them handles leaves Australia.

No one else. We do not sell your data, and we do not share it with anyone for their own use.

This app is meant to be set up and used by a parent or guardian. The account belongs to the adult, not the child. We ask for a child's first name and age only to shape the story, and we would rather you used a nickname than a full name. Nothing about your child is used outside the app, or for anything but making and showing their stories.

Your account, your child's profile and your stories are kept until you delete them. A guest account in which no child's profile was ever created is removed automatically after 30 days.

You can sign out at any time from Settings. To delete everything, go to Settings and choose Delete my account. It removes your account, your child's profile, your characters, any reports you have made and every saved story immediately, and cannot be undone. If you have a subscription, it is cancelled first, so you are not charged again. Stripe and Google keep their own records of any payments, as the law requires them to.

On a guest account — one with no email address on it yet — that option is not offered in the app today. Adding an email address keeps the same account and everything in it, and makes deletion available. You can also write to us at the address below and we will remove it.

Clearing your browser is not the same as deleting. It ends your access to a guest account, but the stories stay in our database until they are deleted.

hello@pickthepath.com

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Office of the Australian Information Commissioner, at oaic.gov.au.