Privacy Policy

Last updated: 8 August 2026

1. Information we collect

Account information

• Email address and password (stored as a secure hash, we never store your actual password).

Family profiles

• Children's first names and age bands (e.g. 4–5 years).
• Story preferences you choose: writing style, tone, interests, and content values.
• Appearance descriptors if you opt in to AI profile portraits (requires parental consent).

Content you create

• Story text, cover art, illustrations, and audio narration generated for your family.
• Any edits you make to story titles or text.

Usage data

• Playback history (which stories were played and when).
• Page views and events via our analytics tools, only if you accept analytics cookies (see Cookies and tracking below).
• If you arrive from an ad or a shared link: the referring page, campaign tags, and any ad click IDs in the link (see Cookies and tracking below).

Payment information

• Payments are processed by Stripe. We never see or store your full card number.

Messages you send us

• If you use our contact form or email us: your email address, your name if you choose to give it (it is optional), and whatever you write in your message.
• Your message is delivered to our own inbox by Brevo, the same EU-based email provider that sends our account emails. We ask you not to include your child’s name or details, because we don’t need them to help you.
• We keep correspondence only for as long as it takes to deal with your enquiry and keep a record of what was agreed.

2. How we use your information

• To generate personalised stories, audio narration, and illustrations for your children.
• To manage your account, subscriptions, and credit balance.
• To improve our service based on aggregated usage patterns.
• To send you essential account emails (e.g. payment confirmations, password reset links, and email verification), delivered by our EU-based transactional email provider (Brevo). We do not send marketing emails unless you opt in.
• To answer you when you get in touch. We use your message and your email address to reply and to resolve whatever you raised, and for nothing else — contacting us does not sign you up to anything.

3. How AI is used

We use artificial intelligence and machine learning technologies to create personalised stories for your family. We never send your email, password, surname, or any identifying family information to AI services.

• Story text: Anthropic's AI writes each story based on your child's first name, age band, interests, tone, and any story context you provide.
• Images: Google's generative AI creates cover art, character illustrations, and page images based on story scene descriptions and age band. We never send children's names for image generation. Profile portraits require explicit parental consent.
• Audio narration: Inworld's AI voices convert the finished story into spoken audio. The full story text is sent, so your child's first name goes with it wherever the story uses it. Nothing else from their profile and no account information is sent.
• Data retention: our AI providers are contracted not to use your data to train their models. They may hold it for a short period under their own terms for safety and abuse monitoring, and for no other purpose.

4. Cookies and tracking

We use a small number of cookies to make the service work and to understand how it is used.

Cookie	Purpose	Type	Duration
wayfable_session	Keeps you signed in on this device. Resetting your password signs you out on your other devices	Essential	Until you sign out or close your browser
site_access	Lets you into the site during our invite-only early-access period	Essential	30 days
cc_cookie	Stores your cookie-banner choices	Essential	6 months
wf_marketing_consent	Remembers your consent choice so our servers can honour it too	Essential	6 months
wf_verify_dismissed	Remembers that you dismissed the “verify your email” reminder	Essential	30 days
_ga, _ga_*	Page views and usage (Google Analytics). Holds a random number identifying this browser, not you by name.	Analytics	2 years
ph_*	Our own “measure” analytics: page views, referrer and usage. Holds a random device number. Only set once you accept analytics cookies.	Analytics	1 year
_fbp, _fbc	Measure the effectiveness of our ads (Meta Pixel)	Marketing	90 days

• We use Meta (Facebook) advertising cookies only to measure whether our ads work, and only after you accept them. To improve this measurement we also share a securely hashed version of your email with Meta when you sign up or purchase, again only with your consent.
• We also run our own analytics tool (“measure”, served from our own domain) to understand which pages and ads lead to sign-ups. Like the tools above, it is not loaded until you accept analytics cookies, and it stores nothing on your device before then.
• Analytics and advertising cookies (Google Analytics, PostHog, Meta and our own measure) only load after you accept them in our cookie banner. Until you accept, none of them is downloaded, none of them stores anything on your device, and your browser does not contact them at all — including if you say no, or never answer.
• Separately from cookies, when you first arrive from an ad we record the referring page and any ad click IDs in the link (such as Google's gclid or Meta's fbclid) and, if you sign up, keep them with your account so we know which of our ads work; we do this under our legitimate interest in measuring our own advertising, and we erase these click IDs 12 months after you sign up.
• You can change or withdraw your choice at any time via the Cookie settings link in the footer.

5. Third-party services

• Stripe, processes payments securely. We never handle your card details.
• Anthropic, generates story text as described in Section 3.
• Google, generates story illustrations as described in Section 3.
• Inworld, turns story text into audio narration as described in Section 3.
• Brevo, our EU-based transactional email provider, sends essential account emails such as password resets and email verification, and delivers messages you send us through the contact form to our own inbox.
• Google Analytics, tells us how the site is used, only if you accept analytics cookies. We never send it your name, your email, or your children’s names. It does store a random number on your device that lets Google recognise the same browser for up to two years, so it is not completely anonymous.
• PostHog (EU-hosted), collects product analytics, only with your consent.
• Meta, measures whether our ads work, only with your consent (see Section 4).
• Cloudflare, provides the “are you human?” check (Turnstile) that protects our signup form from bots.
• Yoto, if you connect your Yoto account, we send story audio and metadata when you push a story. You can disconnect at any time from Settings.

6. Children's privacy

• Accounts are created by parents or guardians, not by children.
• We collect only the minimum data needed: a child's first name and age band.
• AI profile portraits require explicit parental consent.
• We never contact children directly.
• We never use children's data to train AI models.
• We never sell children's data and we never share it for advertising. It goes only to the providers in section 5 that write, illustrate and narrate the story — Anthropic, Google and Inworld — and to Yoto if you connect a Yoto account. Each of them processes it on our instructions, to make your stories and for nothing else.

7. What we don't do

• We never sell your data, and we never share it so that anyone else can advertise to you. The one advertising-related disclosure we make is the consent-based ad measurement described in section 4.
• We never use your data to train AI models.
• We do not build advertising profiles based on your usage.
• We do not send unsolicited marketing emails.

8. Data storage and security

• Wayfable runs on Google Cloud. Our database, our file storage and the servers that run the site are all in Google's London region (europe-west2), so your family's data is stored in the United Kingdom.
• Story audio, illustrations and profile portraits are held in Google Cloud Storage, in a private bucket that is never publicly readable.
• When you delete stories or images, they are removed from Wayfable straight away. Copies can remain in our storage provider's recovery systems for up to 7 days before they are permanently erased, so the deletion described in Section 9 finishes within 7 days rather than instantly.
• Passwords are hashed using industry-standard algorithms.
• All connections are encrypted via HTTPS.
• Payment data is handled entirely by Stripe and never touches our servers.

9. Data deletion

• You can delete your entire account from Settings > Delete Account.
• You can delete individual child profiles, removing their stories, audio, and AI portrait.
• Deletion permanently removes all associated data from our servers.
• Yoto cards already pushed remain on Yoto's servers, delete those from the Yoto app.
• You can also email us to request data deletion at any time.

10. Your rights (UK GDPR)

If you are in the United Kingdom or European Economic Area:

• Access, request a copy of your data via Settings > Export Data, or email us.
• Rectification, edit your children's profiles and preferences at any time.
• Erasure, delete your account or child profiles from Settings, or email us.
• Data portability, your export is provided as a JSON file.
• Withdraw consent, opt out of consent-based features (e.g. AI portraits) at any time.
• Restrict processing, contact us to limit how we use your data.
• Object, object to processing based on legitimate interests at any time.
• Lodge a complaint, contact the ICO at ico.org.uk.

11. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify you by email or through a notice on the service.

12. Contact

The data controller is Healthynest Ltd, trading as Wayfable — registered in England and Wales, company number 16549428, registered office 71-75 Shelton Street, Covent Garden, London WC2H 9JQ. For privacy questions, data access requests, or deletion requests:

info@wayfablestories.com

Or use our contact form.

We respond to all data requests within 30 days, as required by UK GDPR.