Privacy Policy

Last updated: 2 April 2026

Storytime Baker ("we", "us", "our") is a trading name of mendmyi Limited, a company registered in England and Wales. Our registered address is 20-22 Wenlock Road, London, N1 7GU.

We take the privacy of our users — especially children — extremely seriously. This policy explains what data we collect, how we use it, and your rights.

1. Our Commitment to Children's Privacy

Storytime Baker is designed for children aged 3-8, used with parental involvement. We comply with:

• The UK Data Protection Act 2018 and UK GDPR
• The Children's Online Privacy Protection Act (COPPA)
• Apple's App Store Guidelines for Kids' apps
• The ICO's Age Appropriate Design Code

We do not:

• Display any advertising
• Use any third-party analytics or tracking
• Collect personally identifiable information from children
• Share any user data with third parties for marketing purposes
• Use data for profiling or behavioural targeting

2. What Data We Collect

2.1 Device Identifier

When you first use the app, a random unique identifier (UUID) is generated and stored on your device. This is not your Apple ID, device serial number, or any personally identifiable information. It is used solely to associate your stories and settings with your device.

2.2 Kid Profiles

The app allows creation of kid profiles with:

• A first name (chosen by the parent/guardian)
• An age range (3-4, 5-6, or 7-8)
• Names of family members and friends and their relationship (e.g. "Uncle Riki")

These names are used solely to personalise the stories generated within the app. They are stored on our servers to enable the service and are never shared with third parties.

2.3 Stories

Stories generated by the app are stored on our servers so you can read them again. Story text, the options you selected (scene, mood, characters), and audio narrations are stored. Stories are private by default and only visible to the device that created them.

2.4 Optional: Sign in with Apple

If a parent chooses to sign in with Apple (to sync across devices), we receive:

• An Apple-assigned user identifier (not your Apple ID email unless you choose to share it)
• Optionally, a relay email address

This is used solely to enable cross-device sync and data recovery.

2.5 Purchases

In-app purchases are processed entirely by Apple via the App Store. We do not collect or store any payment card information. We receive transaction identifiers from Apple to manage your subscription status.

2.6 What We Do NOT Collect

• Location data
• Photos or camera access (except the future optional character photo feature, with explicit consent)
• Contacts or address book
• Advertising identifiers (IDFA)
• Browsing history
• Precise age or date of birth

3. How We Use Data

We use the data we collect for these purposes only:

• Story generation — names and preferences are sent to our AI provider (DeepSeek) to generate personalised stories. Only character names and story preferences are sent, never device IDs or personal details.
• Audio narration — story text is sent to OpenAI's text-to-speech service to generate audio. No personal data is included.
• Content safety — all user-entered names are checked against a content filter to prevent inappropriate content. This uses OpenAI's free moderation API.
• Service delivery — storing stories, managing profiles, and processing purchases.

4. Third-Party Services

We use the following third-party services in the operation of Storytime Baker:

Service	Purpose	Data Shared
Cloudflare	Hosting, content delivery	Encrypted traffic only
DeepSeek	Story generation (AI)	Character names + story preferences (no personal data)
OpenAI	Audio narration + content moderation	Story text for narration; entered names for safety check
Apple	Authentication (Sign in with Apple), payments	Apple user ID (if opted in), transaction IDs

None of these services receive personally identifiable information about children. We do not use any advertising networks, analytics platforms, or social media SDKs.

5. Data Storage and Security

• All data is stored on Cloudflare's infrastructure within the EU (Western Europe region).
• All data is encrypted in transit (TLS/HTTPS) and at rest.
• Access to our systems is restricted to authorised personnel only.
• We do not store any data on the device beyond the random device identifier and cached content for offline reading.

6. Data Retention

• Stories and profiles are retained for as long as you use the app.
• If you delete your account (Settings → Delete Account), all data is permanently deleted within 24 hours, including all profiles, stories, audio files, and any linked Apple ID.
• If you uninstall the app without signing in with Apple, your data remains on our servers but is not accessible. It will be automatically deleted after 12 months of inactivity.

7. Sharing Stories

Users may optionally choose to "Share with the World" to submit a story for public display. Shared stories:

• Are reviewed by our moderation team before being made public
• Display a chosen display name only (never real names of children)
• Replace character names with generic placeholders (e.g. "Hero 1") in the public version
• Can be withdrawn by the user at any time

8. Parental Rights

Parents and guardians have the right to:

• Review all data stored for their child by viewing profiles and stories in the app
• Delete any profile, story, or the entire account at any time via the app's Settings
• Refuse further data collection by simply uninstalling the app
• Request a copy of all data by emailing us at hello@storytimebaker.com

9. Your Rights Under UK GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Data portability
• Object to processing

To exercise any of these rights, contact us at hello@storytimebaker.com.

10. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated through the app. The "last updated" date at the top of this page indicates the most recent revision.

11. Contact

If you have any questions about this privacy policy or our data practices, please contact us:

• Email: hello@storytimebaker.com
• Address: mendmyi Limited, 20-22 Wenlock Road, London, N1 7GU, United Kingdom

If you are not satisfied with our response, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.