Privacy policy

Controller

Pascal Lindenau, [TODO_LEGAL_OPERATOR], [TODO_LEGAL_ADDRESS]. Use the contact address below for privacy requests. Competent supervisory authority: [TODO_PRIVACY_AUTHORITY].

Stories, AI and digital books

Stories, recordings and photos are stored on your device and in your private iCloud. Selected text, context and photos pass through our service when you use AI or create a digital book. OpenAI processes text for the requested AI features. We do not promise immediate deletion or zero provider retention.

We store book manuscripts and the original story text used to create them on our server so you can edit and remake your book. Generated PDFs are removed from the book service after seven days.

Apple operates iCloud and device services. You decide which stories to share. Only upload material you are entitled to use, including information about other people.

Accounts, purchases and gifts

Sign in with Apple supplies an Apple identifier and, when shared, an email address. Our backend stores account, session, transaction, access-right and redemption records. Stripe processes web payments. We store purchase references and amounts, not full payment-card details.

For gifts we process the buyer email, recipient details and personal message supplied by the buyer. Resend handles purchase and gift email delivery. A recipient email is sent only when the buyer selects that option. Gift recipients can contact us about data supplied by the buyer.

Waitlist and website

The waitlist stores your email, chosen tier, who the book is for, language, consent and signup time, plus confirmation delivery status. Resend receives the address and message for delivery. You can withdraw launch-update consent through the unsubscribe link or by contacting us.

Waitlist checkout pageviews store language and selected tier without an IP address in that table. The homepage and /get sticker page also use Ahrefs Web Analytics to count cookie-free pageviews. Ahrefs receives technical request details such as the page URL, referrer, browser information and approximate location, but does not set an analytics cookie. Abuse protection temporarily uses IP addresses. Hosting systems may keep request logs. Essential browser storage supports sign-in and site functions.

Purposes, legal bases and retention

We process purchase and account data to fulfil the contract under Article 6(1)(b) GDPR, and required accounting records under Article 6(1)(c). Waitlist updates rely on consent under Article 6(1)(a). Security processing can rely on legitimate interests under Article 6(1)(f). Confirm the basis for each AI, book, pageview and hosting operation and the specific legitimate interests: [TODO_PRIVACY_LEGAL_BASES].

Confirm each processor, hosting location, international transfer safeguard and how to obtain a copy: [TODO_PRIVACY_PROCESSORS_TRANSFERS]. Confirm retention periods or criteria for accounts, purchases, gift payloads, waitlist records, logs, book files and AI providers: [TODO_PRIVACY_RETENTION].

Purchase and account information is needed to supply paid access. Optional gift details and waitlist signup are voluntary. Without required information we cannot provide the corresponding service.

Your rights

You may request access, correction, erasure, restriction and portability where the GDPR provides these rights. You may object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. You may complain to a supervisory authority, including in your country of residence or work.

Contact us using the address below. We normally answer within one month; the GDPR permits extensions in specified cases. App export and deletion controls help manage local and iCloud content. Account deletion does not replace any legal duty to retain transaction records. We do not use AI to make decisions producing legal or similarly significant effects about you.