Help Center

Privacy and child safety

Data we collect

What you tell us about your children, such as their names, ages, looks and interests, and the story ideas and settings you enter.
Account and subscription details needed to run the service.
Records of what happens in your account, such as pages opened, sign-ins and stories made, kept for 60 days.

Child photo handling

When you add a photo, we keep the photo itself, so every picture in your stories can look like your child.
A parent or guardian has to agree before a child's photo is uploaded.
To draw your child, the photo is sent to the AI services that make your pictures: fal.ai and OpenAI.
It is stored encrypted and never shown publicly. A photo no story uses is deleted within 30 days; one a story was made from is kept until you delete the photo, those stories or your account.
Removing a photo while you make a story only takes it out of that story. To delete a photo for good, use “Delete this photo” beside it on your Family page.

Your rights

Request access, correction, or deletion of your data.
Export story data in a portable format.
Withdraw consent for child data processing at any time.

Who handles your data

zeStory works with these services, and this is what each one does with your family's data:

OpenAI writes the story text and checks what is typed for safety. It also reads your child's photo to describe their features, and it can draw the pictures.
fal.ai draws the pictures from your child's photo and makes the narration and video.
Stripe and PayPal take payments.
Lulu, Gelato, Prodigi and Printful print and deliver the books you order, using the book and the delivery address you give.
Vercel runs the website, MongoDB Atlas holds accounts, stories and the encrypted child photos, and Cloudflare R2 stores the pictures, narration and films made for your stories.

Cookies and analytics

There are no advertising cookies on zeStory, and no outside analytics or tracking scripts.
The cookies we set are the ones the site needs: one keeps you signed in for up to 30 days, and others remember your language, your family settings (such as kid mode and which child is reading) and your workspace. Signing in with Google or Facebook uses a check that lasts ten minutes.
zeStory keeps its own record of what happens in your account, such as pages opened, drafts started, sign-ins, stories made and purchases, to keep the service working and to fix problems. These records are deleted after 60 days.
Stripe and PayPal take payment on their own pages, and Google and Facebook sign-in happens on theirs; those sites set their own cookies under their own policies.

Deleting a photo, a story or your account

“Delete this photo”, beside each photo on your Family page, deletes that photo straight away. “Delete this story and all its media”, on each story in your library, reader and editor, deletes the story with its pictures, narration, film and book files. “Delete account”, on your account page under Preferences, deletes your profile, your children's profiles, every photo you added and every story you made.

Open account preferences

Contact

Have a question about your privacy or your family's data? Email us at privacy@zestory.art and we'll get back to you.

Loading page