Privacy Policy

1. Who we are

Our Path is a single-operator service that lets parents and guardians create personalized AI-narrated stories for the children in their care. The operator and data controller is Sean Stobo. Reach the operator at seanstobo@gmail.com for any privacy-related question or request.

2. What we collect

We collect three categories of information:

• Account data the parent provides at signup: email, name, password hash (never the password itself), the parental/guardian attestation, and the timestamp of Terms and Privacy acceptance.
• Story data the parent or child enters while using the product: character names and descriptions, story prompts, lesson goals, and the resulting stories, characters, and images we generate.
• Operational data our systems record automatically: IP address at signup, billing identifiers from Stripe, error and usage logs, and a record of credits granted and consumed.

3. How we use it

We use the information above only to:

• Generate and deliver the stories, images, and narration you request.
• Maintain your account, credits, and billing history.
• Detect and respond to abuse, fraud, and safety incidents.
• Send account-critical email (verification, billing receipts, support).
• Improve product reliability through error monitoring and aggregate metrics.

We do not sell personal information. We do not use story content, character data, or children's data to train third-party models.

4. Third-party processors

We rely on a small set of named processors to run the service. Each one only sees the minimum data required to do its job:

• Convex — primary database and serverless backend.
• OpenAI — story scene illustrations, character portraits, and narration text-to-speech.
• Anthropic — story writing and live-mode narration.
• Replicate — background removal on character portraits.
• Stripe — payments and billing. Card details never reach our servers.
• Resend — transactional email delivery.

5. Children's information

Our Path is a children's product. Parents and guardians enter all data on behalf of the children they create stories for. See our Children's Privacy Notice for the specific COPPA-required disclosures, including operator contact, processors, retention windows, and the parental review and deletion path.

6. Retention

Account, story, and character data persist until you ask us to delete them. Billing records are retained for seven years to satisfy tax and dispute obligations. Operational logs roll off after 90 days unless required for an active investigation.

7. Your choices

• You can delete any individual story or character at any time from inside the app.
• You can request deletion of your entire account by emailing seanstobo@gmail.com. We will confirm the request and complete deletion within 30 days.
• You can export your stories on request. We will deliver them as a downloadable archive.

8. Security

We use TLS in transit, encrypted storage at rest through our processors, and never store payment card data. Sessions are signed with rotating secrets. Access to operational data is limited to the operator.

9. International users

The service runs on infrastructure located in the United States. By using My Own Adventures you consent to your information being processed there. EU and UK users retain GDPR rights of access, rectification, erasure, restriction, and portability; contact the operator to exercise any of them.

10. Changes

When we change this policy in a material way, we will update the "Updated" date and require account holders to re-accept the policy before continuing to use the service.

11. Contact

Questions, deletion requests, and complaints all go to seanstobo@gmail.com. We aim to respond within three business days.

Draft pending legal review · do not consider final