Privacy.

For a plain summary of how we keep your child safe, including how every story and picture is checked, see Safety.

What we keep

• Your email address, to sign you in and send stories.
• Your child’s first name, pronouns, reading level and, if you give it, birth year. We never ask for an exact date of birth.
• The details you add to shape stories: people, pets and toys, favourite things, and anything to leave out.
• If you choose, how your child should look in pictures (hair, skin tone, glasses). You pick these from a list, never a photo, and we use them only to paint the pictures.
• The stories we write for your child, their pictures and narration, and any feedback you leave.
• For the free story without an account, your IP address, only to limit free stories to a few a day.
• Which ad or link brought you to us, if any, so we can tell which ads work.
• When a story is ready, opened, finished, read again or rated, and when your plan starts, converts or ends (with Stripe’s reason code, never your own words), so we can see what families enjoy. This stays in our own database and is never shared.

Who helps us

• An AI model writes each story from your child’s details, and a separate AI model checks it for safety.
• Image and voice services make the pictures and narration on Storybook and Storybook+Film.
• Stripe handles payments. We never see or store your card number.
• Resend sends our emails.
• Meta and Google measure our ads. Their cookies run on our public pages only, never inside your account. When you make a free story, start a trial or first pay, we tell them so, with your IP address, browser details and a scrambled (hashed) copy of your email. They never receive your child’s details or stories.

Where your data goes

Our website and database run in Sydney, Australia. Some of the services that help us are overseas, so your details may be processed outside Australia:

• Vercel (hosting and stored pictures, narration and films) and Supabase (our database, in Sydney).
• Anthropic (United States): writes each story and checks stories and pictures for safety.
• OpenAI and Replicate (United States): make the pictures and narration.
• fal.ai (United States): animates pictures into short films on Storybook+Film.
• Stripe: payments. Resend (United States): emails.
• Meta and Google: ad measurement, as described above.

How long we keep it

• Your account, your children’s profiles and their stories, pictures, narration and films: for as long as you have an account, so your library stays yours even if your plan ends.
• A free story you don’t save: 48 hours, then it’s deleted.
• The IP address behind a free story: 24 hours, then it’s removed.
• When a story was ready, opened, finished, read again or rated: 12 months, then it’s deleted.
• Sign-in links work once and expire after 24 hours.
• When you delete your account, we delete everything above straight away. Copies can remain in our database provider’s encrypted backups for up to 30 days before they’re overwritten.
• Stripe keeps records of payments for as long as the law requires, including after you delete your account.

The services that help us keep what we send them for a short time:

• Anthropic and OpenAI delete what we send them within 30 days and don’t use it to train their models. They can keep material longer only if it’s flagged as breaking their usage rules.
• Replicate deletes picture requests within an hour. fal.ai keeps no copy of our film requests, and deletes the files it makes after a day.
• Resend keeps records of the emails we send for 30 days.
• Vercel and Supabase hold our stored files and database for as long as we keep them, as described above.
• Meta and Google keep ad measurement data under their own privacy policies.

Your choices

Before we save a child’s details, we ask you to confirm you’re 18 or over and their parent or guardian, and we record when you did.

You can edit or remove a child’s profile at any time from your account. Removing a profile removes their stories.

You can turn off story emails from the link at the bottom of any story email, or on Your plan. Stories still arrive in your library.

You can delete your whole account on Your plan. That cancels your plan at once and permanently deletes every profile, story, picture and narration we hold for you.

Your rights

The Australian Privacy Principles give you rights over the personal information we hold. To use any of them, email hello@moonmothstories.com from the email address on your account.

• Ask for a copy of what we hold about you and your children. We’ll send it within 30 days.
• Correct anything that’s wrong. Most details you can change yourself in your account.
• Ask us to delete it, or delete your account yourself on Your plan.

If you’re unhappy with how we’ve handled your information, tell us first and we’ll respond within 30 days. If we can’t sort it out, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992.

Who we are

Moon Moth Stories is run by Studio C85 Pty Ltd (ABN 35 679 609 039), Victoria, Australia. Questions about privacy: hello@moonmothstories.com.