Privacy Policy

How we protect your family stories and personal information

Effective Date: January 1, 2024Last Updated: January 1, 2024

At MyStoryFlow, your family's stories are precious, and so is your privacy. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our family storytelling platform. We're committed to being transparent about our practices and giving you control over your data.

Quick Summary: We only collect information that helps us provide and improve our storytelling service. You have complete control over your privacy settings and can export or delete your data at any time.

1. Contact Information

Data Controller: MyStoryFlow, Inc.

Privacy Team

Email: hello@mystoryflow.com
Response Time: Within 72 hours
Phone: +1 (555) 123-STORY

Mailing Address

MyStoryFlow Privacy Team
123 Story Lane, Suite 456
San Francisco, CA 94102
United States

European Representatives: For users in the European Union, our GDPR representative can be reached at hello@mystoryflow.com

2. What Information We Collect

We collect different types of information depending on how you interact with MyStoryFlow and what privacy choices you make. We are committed to minimizing data collection and only gathering what's necessary to provide our services.

🍪 Cookie Consent and Analytics Tracking

Privacy First: We respect your privacy choices. When you first visit our site, we only use necessary cookies required for the website to function. All other tracking requires your explicit consent.

🔴 Necessary Only (No Consent Required)

When you choose "Necessary Only" or before you make a choice, we collect minimal anonymous data:

  • Page views - Which pages you visit (cookieless, no tracking across sessions)
  • Basic technical data - Browser type, device type, screen size
  • Anonymized location - Country/region only (from IP address, which is immediately anonymized)
  • Session duration - How long you're on our site (session ends when you close the browser)
  • Error tracking - If something breaks, we log it to fix it

This data is completely anonymous, uses no cookies, and cannot be used to identify you.

📊 Statistics (With Your Consent)

If you consent to statistics cookies, we additionally collect:

  • User sessions - Track your visits across multiple pages
  • Engagement metrics - How you interact with features
  • Conversion tracking - Which features lead to signups
  • Performance data - Page load times and errors
  • Referral sources - How you found us

Uses Google Analytics 4 with IP anonymization and no data sharing with Google for advertising.

⚙️ Preferences (With Your Consent)

If you consent to preference cookies, we remember:

  • Language preferences - Your chosen language
  • Display settings - Dark mode, font size
  • Feature preferences - Which features you've tried

📢 Marketing (With Your Consent)

If you consent to marketing cookies, we may use:

  • Remarketing pixels - Show relevant ads on other platforms
  • Conversion tracking - Measure ad effectiveness
  • Interest categories - Understand what content interests you

Currently not implemented - we don't use any marketing cookies.

Managing Your Cookie Preferences

You can change your cookie preferences at any time:

  • • Click the cookie icon in the bottom corner of any page
  • • Visit your privacy settings (for logged-in users)
  • • Email us at hello@mystoryflow.com to request changes

👤 Account Information

When you create an account, we collect:

  • Basic profile: Name, email address, profile picture (optional)
  • Authentication: Encrypted password or OAuth tokens (Google/Facebook login)
  • Preferences: Language, timezone, notification settings
  • Subscription: Plan type, billing information (processed by Stripe)

📝 Content You Create

The heart of MyStoryFlow is your family stories:

  • Stories and memories: Text, audio recordings, transcriptions
  • Photos and media: Images you upload to illustrate stories
  • Family connections: Relationships between family members
  • Comments and interactions: Feedback on family stories

3. How We Use Your Information

We use your information only for the purposes you'd expect - to provide and improve our storytelling service. Here's exactly how:

🎯 To Provide Our Core Service

  • • Store and organize your family stories securely
  • • Enable sharing with family members you invite
  • • Generate books and exports of your stories
  • • Send notifications about family story updates
  • • Process payments for premium features

📈 To Improve Our Service

  • • Understand which features are most valuable
  • • Fix bugs and improve performance
  • • Develop new features based on usage patterns
  • • Personalize your experience (with preference cookies)
  • • Provide customer support when you need help

🔒 For Security and Legal Compliance

  • • Protect against fraud and abuse
  • • Comply with legal obligations
  • • Enforce our terms of service
  • • Respond to legal requests (with notice to you when possible)

We Never: Sell your personal information, use your private stories for advertising, share your content without permission, or access your stories except for support (with your consent).

5. Information Sharing and Disclosure

We're extremely careful about who has access to your information. Here's our complete sharing policy:

👨‍👩‍👧‍👦 With Your Family (Your Choice)

Stories and information you explicitly choose to share with family members you invite. You control all family sharing settings.

🔧 With Service Providers

We work with trusted partners who help us run MyStoryFlow:

  • Stripe: Payment processing (they never see your stories)
  • Amazon Web Services: Secure cloud hosting
  • SendGrid: Email delivery
  • Google Analytics: Anonymous usage statistics (only with consent)

All providers are GDPR compliant and sign data protection agreements.

⚖️ For Legal Reasons (Rare)

We may disclose information if required by law, but we'll notify you unless legally prohibited.

🏢 Business Transfers

If MyStoryFlow is acquired, your information would be transferred, but still protected under this privacy policy.

6. Story Sharing and Community Hub

MyStoryFlow offers features that allow you to share your family stories with others through our community hub. This section explains how story sharing works and what privacy controls you have.

Your Choice: All story sharing is completely optional. By default, your stories remain private and visible only to family members you invite. You have full control over what you share and with whom.

🔒 Privacy Levels for Stories

Private (Default)

Visible only to you and family members you specifically invite. Not searchable or visible in our community hub.

Family Shared

Visible to extended family members who join your family network. Still not public or searchable outside your family.

Community Shared

Visible in our community story hub with personal details removed. Other families can read for inspiration, but cannot identify your family.

Public

Publicly viewable and searchable with your explicit consent. You choose what personal information to include.

Data Usage for Community Features

When you choose to share stories in our community hub, we may use this content to:

  • • Improve our story suggestion algorithms
  • • Create anonymized research about family storytelling trends
  • • Develop better writing prompts and story templates
  • • Generate insights for improving our platform
  • • Create educational content about family history preservation

Note: This usage never includes personal identifying information and you can opt out anytime in your privacy settings.

Your Stories, Your Control: We believe your family stories belong to you. Even when shared publicly, you retain all rights to your content and can remove it from our platform at any time. We never claim ownership of your stories or use them for commercial purposes without your explicit consent.

7. International Data Transfers

MyStoryFlow is based in the United States. When you use our service from outside the US, your information may be transferred to and processed in the US.

For European Union Users

We ensure your data is protected when transferred outside the EU through:

  • • Standard Contractual Clauses with all data processors
  • • Using services that are Privacy Shield certified where applicable
  • • Implementing additional safeguards like encryption and access controls

By using MyStoryFlow, you consent to the transfer of your information to the United States and other countries where we operate, with the understanding that data protection laws may differ from those in your country.

8. Data Retention and Deletion

We keep your information only as long as necessary to provide our service and comply with legal obligations.

📅 Retention Periods

  • Account data: As long as your account is active
  • Stories and content: Until you delete them or close your account
  • Analytics data:
    • - Necessary analytics: 90 days (anonymous)
    • - Statistics analytics: 14 months (Google Analytics default)
  • Backup data: 30 days after deletion
  • Legal compliance data: As required by law (typically 7 years)

🗑️ Your Right to Delete

You can delete your data at any time:

  • • Delete individual stories from your dashboard
  • • Request account deletion in your account settings
  • • Email hello@mystoryflow.com for immediate deletion

When you delete your account, we permanently remove all your personal data within 30 days, except what we're legally required to keep.

9. Your Privacy Rights

You have comprehensive rights over your personal information. Here's what you can do and how:

🔍 Access Your Data

Request a copy of all data we have about you

→ Export your data

✏️ Correct Your Data

Update any inaccurate information

→ Edit your profile

🗑️ Delete Your Data

Remove your personal information

→ Delete account

📦 Port Your Data

Export in machine-readable format

→ Download JSON export

🚫 Restrict Processing

Limit how we use your data

→ Contact privacy team

❌ Object to Processing

Opt out of certain data uses

→ Manage preferences

California Privacy Rights (CCPA)

California residents have additional rights:

  • • Right to know what personal information we collect
  • • Right to delete personal information
  • • Right to opt-out of sale (we don't sell your data)
  • • Right to non-discrimination for exercising privacy rights

To exercise these rights, email hello@mystoryflow.com or call +1 (555) 123-STORY

10. Security Measures

We take the security of your family stories seriously. Here's how we protect your data:

🔐

Encryption

All data is encrypted in transit (TLS 1.3) and at rest (AES-256)

🔑

Access Controls

Role-based access, two-factor authentication, regular access reviews

🛡️

Infrastructure Security

AWS hosting, DDoS protection, regular security patches

🔍

Monitoring

24/7 security monitoring, intrusion detection, audit logging

Security Best Practices

Help us keep your account secure:

  • • Use a strong, unique password
  • • Enable two-factor authentication
  • • Keep your email account secure
  • • Report suspicious activity immediately

11. Children's Privacy

MyStoryFlow is designed for adults to record family stories. We take special care when it comes to children's information.

Age Requirements

You must be at least 18 years old to create a MyStoryFlow account. We do not knowingly collect personal information from children under 13.

Children in Family Stories

While adults create accounts, family stories often include children. When including children in stories:

  • • You control all privacy settings for stories mentioning children
  • • Consider extra care when sharing stories publicly
  • • You can redact or anonymize children's information
  • • Children cannot access stories without your permission

If you believe a child under 13 has provided us with personal information, please contact us immediately at hello@mystoryflow.com and we will delete it.

12. Changes to This Policy

We may update this privacy policy to reflect changes in our practices or for legal reasons. Here's our commitment to you:

📧 We'll Notify You

For significant changes, we'll email you at least 30 days before they take effect

📅 Review Changes

The "Last Updated" date at the top shows when we last modified this policy

🚪 Your Choice

If you disagree with changes, you can export your data and close your account

By continuing to use MyStoryFlow after changes take effect, you agree to the updated policy.

Need Help or Have Questions?

Privacy Questions

hello@mystoryflow.com
Response within 72 hours

Privacy Settings

Manage Your Privacy
Update preferences anytime

General Support

hello@mystoryflow.com
+1 (555) 123-STORY

This privacy policy is written in plain English to be as clear and understandable as possible. If you have suggestions for making it even clearer, please let us know at hello@mystoryflow.com.

Privacy-First Family Storytelling

Now that you know how seriously we take your privacy, experience the peace of mind that comes with preserving your family's stories on a platform built for trust.

🔐
Bank-Level Security
Your stories are encrypted and protected
👨‍👩‍👧‍👦
Family-Only Access
You control who sees your stories
🏠
Your Data, Your Control
Export or delete anytime

No credit card required • Private by default • GDPR compliant