Last updated: March 01, 2026
At StoryWish.ai, trust is the foundation of everything we build. As parents ourselves, we created StoryWish by parents, for parents and families, with safety, privacy, and joy at the core.
When you upload a photo for character creation:
Your family photos remain private, secure, and fully under your control.
Questions about privacy, data handling, or content safety? Our team is here to help.
Email: seth@storywish.ai
We are committed to earning and keeping your trust as your family creates magical, personal stories.
For full details, see our Privacy Policy and Terms of Service.
Storywish relies on a small set of vendors to power the Services. Each vendor below is bound by a Data Processing Addendum (DPA). We commit to notifying users by email at least 15 days before adding a new sub-processor that materially changes data flows.
| Vendor | Purpose | Data categories | Region | DPA |
|---|---|---|---|---|
| Anthropic | Text generation (Claude family models) | Story prompts, character names supplied by parent | United States | DPA |
| Google (Gemini API) | Text generation (Gemini models) | Story prompts, character names supplied by parent | United States | DPA |
| OpenAI | Text generation (GPT family) and content moderation | Story prompts, character names, generated story text | United States | DPA |
| PostHog | Product analytics and feature usage telemetry | Pseudonymous user ID, device/browser metadata, page views | United States | DPA |
| Railway | Application hosting (backend + frontend containers) | All data processed by the application at rest in transit | United States | DPA |
| Replicate | Image generation (FLUX, gpt-image, etc.) | Image generation prompts, character/style references | United States | DPA |
| Resend | Transactional and marketing email delivery | Email address, account name, story-event metadata | United States | DPA |
| Runware | Image generation (FLUX models) | Image generation prompts, character/style references | European Union | DPA |
| Sentry | Backend error monitoring | Stack traces, request metadata (no PII intentionally collected) | United States | DPA |
| Stripe | Payment processing and subscription billing | Email, billing details, payment method metadata | United States | DPA |
| Supabase | Authentication, Postgres database, and object storage | Account, story, character, image, and audio data | United States | DPA |