Parents Trust Center

Last updated: March 01, 2026

At StoryWish.ai, trust is the foundation of everything we build. As parents ourselves, we created StoryWish by parents, for parents and families, with safety, privacy, and joy at the core.

Your Photos Are Never Saved

When you upload a photo for character creation:

Your family photos remain private, secure, and fully under your control.

Data Privacy & Protection

Security

Transparency & Control

Support & Accountability

Questions about privacy, data handling, or content safety? Our team is here to help.

Email: seth@storywish.ai

We are committed to earning and keeping your trust as your family creates magical, personal stories.

For full details, see our Privacy Policy and Terms of Service.

Sub-processors

Storywish relies on a small set of vendors to power the Services. Each vendor below is bound by a Data Processing Addendum (DPA). We commit to notifying users by email at least 15 days before adding a new sub-processor that materially changes data flows.

VendorPurposeData categoriesRegionDPA
AnthropicText generation (Claude family models)Story prompts, character names supplied by parentUnited StatesDPA
Google (Gemini API)Text generation (Gemini models)Story prompts, character names supplied by parentUnited StatesDPA
OpenAIText generation (GPT family) and content moderationStory prompts, character names, generated story textUnited StatesDPA
PostHogProduct analytics and feature usage telemetryPseudonymous user ID, device/browser metadata, page viewsUnited StatesDPA
RailwayApplication hosting (backend + frontend containers)All data processed by the application at rest in transitUnited StatesDPA
ReplicateImage generation (FLUX, gpt-image, etc.)Image generation prompts, character/style referencesUnited StatesDPA
ResendTransactional and marketing email deliveryEmail address, account name, story-event metadataUnited StatesDPA
RunwareImage generation (FLUX models)Image generation prompts, character/style referencesEuropean UnionDPA
SentryBackend error monitoringStack traces, request metadata (no PII intentionally collected)United StatesDPA
StripePayment processing and subscription billingEmail, billing details, payment method metadataUnited StatesDPA
SupabaseAuthentication, Postgres database, and object storageAccount, story, character, image, and audio dataUnited StatesDPA