Privacy Policy
How My Story collects, uses, stores and protects personal information.
1. Who we are
My Story is a private life-archive service that allows people to preserve memories, stories, media and personal information, and to share selected content with trusted people.
My Story is operated by My Story App.
Website: https://my-storyapp.com/wp/wp
Email: info@mystoryapp.com
For data-protection purposes, My Story App is the controller of the personal data described in this policy.
2. Information we collect
Account and authentication information
When you create and use an account, we may process your email address, user and account identifiers, encrypted authentication credentials and tokens, account creation, login and security information, and trial, plan, storage allowance and purchase-entitlement information.
Payment card details are normally handled by the app store or payment provider used at checkout. We do not ordinarily receive or store your full card details.
Profile and legacy information
You may choose to provide your name, profile photograph, biography and life information, date of birth, date of death, next of kin or legacy-contact name and email address, legacy preferences, and other optional profile details.
Legacy preferences may include whether your profile may become public after death, remain private, be accessed through authorised family access, or be added to family groups.
You should only provide another living person’s contact details where you have permission or another lawful reason to do so.
Content you create
You may upload or create photos, videos, audio and voice recordings, written stories and memories, timeline events, pet and music information, galleries, family group posts and comments, captions, relationships and other user-generated content.
You retain ownership of your content.
Connections and sharing information
We process information about people you connect with, family groups you create or join, invitations and relationship labels, and your privacy, visibility and sharing choices.
Technical and security information
We may process limited technical information needed to operate and protect the service, including device, browser and session information, security and diagnostic logs, error and performance information, and IP address where required for security, fraud prevention or service operation.
Where the app requests access to your camera, photographs, files or microphone, access is used only when you choose the relevant feature and grant permission.
3. How we use information
We use personal data to create and manage accounts, provide trials, plans, storage and paid features, store and display user content, provide connections and family groups, operate sharing and privacy controls, provide legacy and deceased-profile features, authenticate users, protect the service, prevent misuse and fraud, provide customer support, maintain and improve the service, and comply with legal obligations.
Our main legal bases are contract, legitimate interests, consent where required, and compliance with legal obligations.
We do not sell personal data and do not use user content for third-party advertising.
4. Content visibility
Private content is available only according to the access and sharing choices provided by the service.
Content may be visible to the account holder, people the account holder connects with or authorises, members of relevant family groups, or the public where the profile owner has chosen public visibility.
If a profile owner enables public-after-death access and the profile is later marked deceased, the profile may become publicly accessible.
Public content can be viewed, copied, photographed, recorded or captured by other people outside My Story’s control.
5. Deceased profiles and legacy contacts
A user may nominate a legacy contact and choose which limited actions that person may take after the user’s death.
A legacy contact does not receive the deceased person’s password and does not take over the deceased person’s account. Their access is limited to the permissions selected by the profile owner and the features made available by My Story.
We may ask for information or evidence before accepting or acting on a death report. We may pause legacy actions while a dispute is investigated.
6. Sharing with service providers and others
We may share information where needed to operate the service, including with providers of cloud hosting, database services, authentication, media storage, email delivery, customer support, app-store services, payment and purchase-entitlement services, security, diagnostics and error monitoring.
These providers process information for the purposes of providing their services to us and are expected to protect it appropriately.
We may also disclose information where required by law, to protect rights or safety, or as part of a genuine business transfer.
Where ownership of the service changes, users will be informed where required.
7. International transfers
Some service providers may process information outside the United Kingdom.
Where required, we use appropriate contractual or legal safeguards for international transfers.
8. Data retention and long-term availability
My Story is designed for long-term preservation, including the continued display of memorial or deceased profiles. However, My Story does not promise that any profile or content will be stored forever.
An active profile may be retained while the account or profile remains active, retention remains lawful and technically feasible, and My Story continues to operate.
A deceased or memorial profile may remain active for as long as My Story continues to operate unless it is deleted by an authorised person, removal is legally required, or continued storage is no longer reasonably possible.
A one-off purchase does not create a right to permanent or perpetual hosting.
If My Story is discontinued, we will use reasonable efforts to give users notice and an opportunity to export their data where reasonably practicable. We cannot guarantee indefinite operation, storage or availability.
When an account or profile is deleted, its active data is removed within a reasonable period. Limited copies may remain temporarily in secure backups, logs or records where required for recovery, security, fraud prevention, legal compliance, or the establishment or defence of legal claims. These will be removed or anonymised under normal retention processes.
9. Your rights
Depending on the law that applies, you may have rights to access personal data, correct inaccurate data, download or receive a copy of data, delete an account and associated data, restrict or object to certain processing, withdraw consent where processing is based on consent, and complain to a data-protection authority.
Account deletion is available within the app.
Further information is available at:
https://my-storyapp.com/wp/wp/account-deletion
To make a privacy request, contact:
We may need to verify your identity before completing a request.
10. Children’s privacy
My Story is not intended for children under 13.
We do not knowingly allow children under 13 to create accounts. If we become aware that an under-13 account has been created, we may remove it.
11. Security
We use reasonable technical and organisational measures intended to protect information, including secure connections, authentication and access controls.
No online service can guarantee absolute security. Users should protect their login credentials and contact us promptly if they suspect unauthorised access.
12. Changes to this policy
We may update this policy to reflect changes to My Story, our providers or the law.
The current version will be available in the app and at:
https://my-storyapp.com/wp/wp/privacy-policy
We will provide additional notice where a change is significant and the law requires it.
13. Contact and complaints
Privacy enquiries:
Website:
You may also have the right to complain to the UK Information Commissioner’s Office or another applicable data-protection authority.