1. Who we are
StoryOlive is operated by Latitude Point Ltd, a company registered in England and Wales ("we", "us", or "our"). We are the data controller for personal data processed through storyolive.com and related apps.
This policy explains what we collect, why we use it, who we share it with, and your rights under UK GDPR and the Data Protection Act 2018.
2. Information we collect
2.1 Information you give us
- Account: if you sign in with Google, we receive your name, email address, and profile picture. If you sign in with email, you provide an email address, a password (stored as a hash), and a display name if you add one. We may send verification or password-reset emails.
- Apple sign-in: where available, we receive an Apple account identifier, your email address (which may be an Apple private relay address), and the name you choose to share. We retain encrypted authorization credentials to check access and revoke authorization when you delete your account. We do not receive your Apple password.
- Other: account preferences, feedback you submit in the product, and messages you send us.
2.2 Payment information
Website Premium payments are processed by Polar, our merchant of record. Polar handles card and billing details. We receive subscription and customer information needed to provide Premium. Polar's own terms and privacy notice apply to the checkout.
Purchases made through the iOS or Android app are billed by Apple or Google Play where offered. We use RevenueCat to verify those purchases and keep Premium access in sync across the app and website. RevenueCat processes an identifier linked to your StoryOlive account, purchase and subscription records, and store information such as currency and country. We do not send your name, email address, saved words, or reading content to RevenueCat. We do not receive your payment card details from the app stores.
2.3 Information from how you use StoryOlive
- Learning data: such as stories you use, vocabulary, progress, and similar activity.
- Technical and usage data: such as device and browser information, log data, and analytics about how the Service is used, so we can operate, secure, and improve it.
On the website, we use DataFast for visits and purchase attribution and PostHog for page views, sign-in, checkout and learning-action analytics. When you sign in, an account identifier can link your visits to the same account, including across our StoryOlive-to-StoryOlive rebrand. The web PostHog integration has session recording and automatic interaction capture disabled.
In mobile versions that offer App analytics, optional PostHog analytics starts only after you enable it in Account. It records actions such as opening a screen or completing practice, along with SDK-generated identifiers and technical app/device context. These events do not include your name, email, word lookups, story text, or authentication tokens. Session recording and automatic interaction capture are disabled. You can turn App analytics off in Account without losing learning features.
2.4 Cookies and similar technologies
We use cookies, local storage, and similar technologies to run the Service (for example to keep you signed in and remember preferences) and to understand and improve how it is used. We do not sell your personal information or use it for third-party advertising.
3. How we use your information
- Provide, operate, and improve the Service.
- Create and authenticate your account.
- Verify subscriptions and provide Premium through Polar, the app stores, and RevenueCat, depending on where you buy.
- Remember your progress and preferences.
- Send service emails (for example account and billing messages) and, where appropriate, product emails. You can opt out of non-essential email from your account or the unsubscribe link.
- Analyze usage, keep the Service secure, and comply with the law.
4. Legal bases (UK GDPR)
- Contract: providing the Service and fulfilling a subscription.
- Legitimate interests: operating, securing, and improving the Service, and communicating with you about it, where this does not override your rights.
- Legal obligation: where the law requires us, or Polar as merchant of record, to keep or process information.
- Consent: where we rely on consent, you may withdraw it.
5. Who we share data with
We do not sell your personal information. We use trusted providers to run the Service, including for hosting, authentication (including Google and Apple), payments (Polar, Apple, Google Play, and RevenueCat), email, analytics (including DataFast, PostHog web analytics, and optional PostHog mobile analytics), fonts, and audio. They process data on our behalf or as independent controllers for their own services (for example Polar for checkout). We may also disclose information if required by law, or if we transfer the business, with appropriate protections.
6. International transfers
We are based in the United Kingdom. Some providers process data in the UK, the EEA, the United States, or other countries. Where we transfer personal data out of the UK, we rely on appropriate safeguards such as the UK's adequacy regulations or standard contractual clauses, as applicable to that provider.
7. Retention
We keep personal data while your account is active and as needed to provide the Service. If you ask us to delete your account, we will delete or anonymize personal data within a reasonable period, except where we must keep records for legal, security, or billing purposes.
8. Security
We use HTTPS, hashed passwords for email accounts, access controls, and hosting providers who implement their own security measures. No online service is completely secure. Please use a strong unique password for email sign-in and keep your Google account protected if you use Google.
9. Your rights
Under UK GDPR you can ask us to:
- Access a copy of your personal data.
- Correct inaccurate data.
- Delete your data, including by asking us to close your account. In the mobile app, you can start this from Account > Delete account. Deleting the app or your StoryOlive account does not itself cancel an Apple or Google Play subscription; manage that separately in the store where you subscribed.
- Restrict or object to certain processing.
- Receive a copy of data you provided, where applicable.
Email support@storyhebrew.com. We will respond within one month. You can also complain to the UK Information Commissioner's Office at ico.org.uk. If you live in the EEA you may complain to your local supervisory authority.
10. Children
The Service is not aimed at children under 13. We do not knowingly collect personal data from children under 13. If you think we have, contact us and we will delete it.
11. California and other regions
If you are in California, we do not sell or share personal information for cross-context behavioral advertising as those terms are used in the CCPA/CPRA. You can make the same access, correction, and deletion requests described above.
12. Changes
We may update this policy. The new "Last updated" date will appear at the top. If a change is material we will take additional reasonable steps to notify you, such as an email or a notice in the product.
13. Contact
Privacy questions: support@storyhebrew.com.