← Back

Last updated: June 10, 2026

Story Harvest is built by Senior Care Partners, a division of KTL Consulting LLC ("we," "us," or "our"). Story Harvest helps you turn a memory into a personal letter. You have a voice conversation with an AI guide, your words become a letter draft, and you can refine it by typing, switching writing styles, or resuming the conversation to add more.

Your stories are personal. We treat them that way. This policy explains what information we collect, why, who can see it, and how you stay in control.

1. What We Collect

Information You Give Us

Account details

• What: Your first name, last name, email address, and password.
• Why: To create your account, sign you in, and contact you about account-related matters.
• How protected: Stored in our database with row-level security so only you can access your account record. Your password is hashed before storage — we never store or see your actual password.

Your voice and conversations

• What: Audio recordings of your voice during AI-guided conversations, text transcripts of those recordings, and your responses to story prompts and follow-up questions.
• Why: To power the voice conversation with the AI guide, generate letter drafts from what you said, and let you return to your conversations later.
• How protected: Audio files are stored in access-controlled cloud storage; download links require temporary access tokens that expire after one hour. Transcripts are stored under your user ID in a database that enforces strict separation — only you can access yours.

Your letters and content

• What: Letter drafts generated from your conversations, edits you make to letters (spoken or typed), letter titles, and any photos you add from your camera or photo library.
• Why: To save your letters so you can return to them, refine them, print them, or share them.
• How protected: Stored in access-controlled cloud storage under your user ID with row-level security — only you can access your letters.

Payment details

• What: Your subscription status and an anonymous purchase identifier from Apple.
• Why: To know which subscription plan you have so the correct features are unlocked.
• How protected: Purchases are handled entirely by Apple's In-App Purchase system; your card details are collected by Apple and never touch Story Harvest's servers. We receive only an anonymous purchase identifier from Apple (via RevenueCat, our subscription management provider).

Sharing choices

• What: Email addresses of people you choose to share letters with, and any optional passwords you set to protect those shared letters.
• Why: To deliver shared letters to the recipients you specify and to honor any access controls you add.
• How protected: Stored under your account with row-level security. Optional shared-letter passwords are stored using one-way hashing so we cannot read them in their original form.

Consent records

• What: When you grant or withdraw consent (for example, recording consent or data sharing consent), we log the action along with your IP address and device information (such as device model and operating system).
• Why: To maintain a record of your consent choices — required by privacy regulations such as GDPR Article 7.
• How protected: Stored under your user ID with row-level security; never shared with any third party unless required by law.

Information We Collect Automatically

Share activity

• What: When someone views a letter you shared, we record when they first opened it, when they last viewed it, and how many times they viewed it.
• Why: So you can see whether your letter was received and read.
• How protected: Recorded under your letter's record in our database, accessible only to you.

What is stored on your device only

• What: Your login session, notification preferences (reminder times you choose), and whether you turned on Face ID or Touch ID.
• Why: To keep you signed in, deliver reminders at the times you choose, and remember your biometric login preference between app launches.
• How protected: Stored in your phone's secure on-device storage and never sent to our servers. We never access or store your actual biometric data — Face ID and Touch ID are handled entirely by your phone.

What We Do Not Collect

• Location data
• Contacts or address book
• Advertising identifiers
• Data from other apps or websites
• Biometric data (Face ID / Touch ID is handled by your phone, not by us)

We only collect information that is needed to provide the app's features. Nothing extra.

2. How We Use Your Information

• Run your account — your name and email let us create and manage your account
• Have voice conversations — your voice audio is streamed to OpenAI's AI in real time so it can listen and ask follow-up questions
• Create transcripts — your voice is converted to text so we can generate letters from what you said
• Generate letter drafts — your conversation transcripts are sent to Anthropic's AI to write a letter draft in your voice
• Refine your letter — three paths: (a) switch editing styles (My Words / With An Editor / Tell My Story) — your transcript and style choice are sent to Anthropic's AI to regenerate the letter; (b) resume the conversation by voice to add or clarify details — your continued voice is sent to OpenAI for real-time transcription, and the updated transcript is sent to Anthropic's AI to regenerate the letter with the new context; (c) type inline edits directly into a paragraph — those edits stay on your account and are not sent to any AI
• Store your work — your conversations, letters, drafts, photos, and audio are saved so you can come back to them
• Process payments — purchases are handled by Apple In-App Purchase; we never see your card details
• Share letters — when you choose to share, we send your letter to the people you pick
• Send reminders — if you turn on reminders, we send local notifications on your phone (these never leave your device)
• Show safety resources — if our automated keyword check detects words associated with severe distress in conversation text, the app shows mental health resources such as the 988 Suicide & Crisis Lifeline
• Respond to support requests — your email and account info help us help you

We do not use your information for advertising, marketing to others, or training AI models.

3. How AI Works With Your Stories

Story Harvest uses two AI services to power conversations and generate letters. Because your stories are personal, here is exactly what happens with your data:

Voice Conversations (OpenAI)

When you start a conversation, your voice streams directly from your phone to OpenAI through a secure, direct connection. OpenAI's AI listens, understands, and asks follow-up questions in real time. A separate service converts your speech into written text.

Letter Generation, Style Switching, and Add More (Anthropic)

After your conversation, your written transcript is sent from our server to Anthropic's Claude AI, which writes a letter draft based on what you said. You have three ways to refine the draft afterward:

• Switch editing styles — choose My Words, With An Editor, or Tell My Story. Your transcript and chosen style are sent to Claude to regenerate the letter in the new style.
• Add more by voice — tap Resume to continue the conversation. Your continued voice goes to OpenAI for real-time transcription (same flow as the initial conversation), and your updated transcript is sent to Claude to regenerate the letter with the additional context.
• Type inline edits — tap a paragraph and type changes directly. These edits stay on your account and are NOT sent to Claude or any other AI service.

You Control the AI's Involvement

• "My Words" — the AI just cleans up formatting; your exact words are kept
• "With an Editor" — the AI reorganizes and polishes while keeping your phrases
• "Tell My Story" — the AI transforms your words into a full narrative in your voice

4. Who Can See Your Data

We share your data only with the service providers listed below, and only what is needed for each to do its job. Each provider is required to protect your data to the same standard described in this policy.

OpenAI — Voice Conversations and Transcription

• Receives: your voice audio (streamed directly from your phone)
• Purpose: real-time conversation and speech-to-text

Anthropic — Letter Generation and Editing

• Receives: your conversation transcripts and letter content (sent from our server, not your phone)
• Purpose: writing and editing letter drafts

Supabase — Database and Storage

• Receives: your account information, conversations, letters, audio files, photos, and all app data
• Purpose: securely storing and serving your data
• Each user can only access their own data

Apple — App Store and In-App Purchases

• Receives: your payment method (handled entirely by Apple — we never see your card number)
• Purpose: processing subscriptions, free trials, restores, and refunds through the App Store

RevenueCat — Subscription Management

• Receives: an anonymous purchase identifier from Apple and your subscription status
• Purpose: keeping your subscription state in sync with our servers so the right plan is unlocked

PostHog — Product Analytics

• Receives: an anonymous identifier (your Story Harvest user ID) and behavior events such as which screens you open, how long conversations last, and which editing styles you choose
• Purpose: understanding how the app is used so we can improve it
• Tracking: PostHog cannot follow you to other apps or websites; we have disabled session replay so your letters never appear in analytics recordings
• Never sent: your story content, letter text, transcripts, or personal details

No one else. We do not share your data with advertising networks, data brokers, or any other third parties. We do not sell your personal information to anyone, for any reason.

5. How We Protect Your Data

• All data sent between your phone and our servers travels over encrypted connections
• Voice conversations use a secure, direct connection between your phone and OpenAI
• Our database enforces strict separation — each user can only access their own data
• AI service passwords and keys are stored on our servers and never appear on your phone
• Card payments are handled entirely by Apple In-App Purchase — your card information never touches Story Harvest's systems
• Your password is scrambled before storage — we cannot read it
• Audio files in private storage require temporary access links that stop working after one hour
• Photos and letters are stored in access-controlled cloud storage

6. How Long We Keep Your Data

While your account is active

Your account information, conversations, letters, audio, photos, and drafts are kept as long as your account exists.

When you delete things

You can delete individual conversations, letters, or drafts at any time. Deleted items are removed permanently.

When you delete your account

You can request account deletion from the Privacy & Security section in the app. All your data will be permanently removed within 30 days.

If you stop purchasing

Your existing data (conversations, letters, audio, photos) remains accessible. You do not lose your content if you stop buying letters.

Safety records

Records created by our crisis detection and content safety systems are retained for ongoing safety monitoring.

Payment data

Apple and RevenueCat retain your payment and subscription information according to their own retention policies. We only keep an anonymous purchase identifier and your purchase history.

Data on your phone

Login sessions, notification preferences, and biometric settings stored on your device are cleared when you sign out or delete the app.

7. Your Rights and Choices

No matter where you live, you have the following rights in Story Harvest:

See and export your data

You can download a complete copy of everything we have — your profile, conversations, letters, and audio — at any time from Privacy & Security in the app.

Delete your data

You can delete individual items anytime, or delete your entire account and all data from Privacy & Security. Account deletion is completed within 30 days.

Withdraw consent

You can turn off recording consent or data sharing consent from the app's settings at any time. This may limit some features.

Control device permissions

You can turn off microphone, camera, or photo library access at any time in your phone's Settings app.

Manage notifications

You can turn reminders on or off, or change the time, from within the app. Reminders are local to your phone.

Manage biometric login

Face ID / Touch ID is optional. You can turn it on or off at any time. We never access your biometric data.

Manage shared letters

You can revoke any shared letter at any time. Revoking immediately removes the recipient's access.

California Residents

Under the California Consumer Privacy Act (CCPA), you can ask us what personal information we collect, request deletion, and opt out of data sales. We do not sell personal information. Use the export and deletion features in the app, or email support@storyharvest.app.

European Residents

Under the General Data Protection Regulation (GDPR), you also have the right to correct your data, restrict processing, object to processing, and get a copy of your data in a format you can take elsewhere. You can also file a complaint with your local data protection authority. Contact support@storyharvest.app.

8. Content Safety Information

Automated safety-keyword check

Story Harvest includes an automated keyword check that scans conversation text for words associated with severe distress (such as suicide or self-harm). If the check matches, the app shows mental health resources including the 988 Suicide & Crisis Lifeline and Crisis Text Line.

Important limitations

This feature is provided for informational purposes only. It is a basic keyword match, not a clinical assessment, and may miss or misidentify content. It is NOT a substitute for professional mental health care or emergency services. If you or someone you know is in crisis, call or text 988, contact 911, or go to your nearest emergency room.

Records of detections

When the keyword check matches, we log a brief record (the type of match and a short excerpt of up to 200 characters) so we can monitor patterns. These records are not shared with any third party unless required by law.

Prohibited content

We also check for content that violates our Terms of Service, including violence, hate speech, and child safety concerns. Repeated violations may result in warnings or account suspension.

Reporting content concerns

If you encounter content in Story Harvest that concerns you or violates our Terms, you can report it by emailing support@storyharvest.app. We review reports within two business days.

9. Children's Privacy

Story Harvest is not for children under 13. We do not knowingly collect information from anyone under 13. If you are a parent or guardian and believe your child under 13 has used Story Harvest, contact us at support@storyharvest.app and we will delete their information promptly.

Users between 13 and 17 may use Story Harvest with parental or guardian consent.

10. International Data Transfers

Our service providers (Supabase, OpenAI, Anthropic, Apple, RevenueCat, PostHog) operate in multiple countries. Your data may be processed outside your home country as needed to provide the app's features. Each provider maintains data protection standards consistent with this policy.

11. Do Not Track

Some web browsers send a "Do Not Track" signal. Story Harvest is a mobile app that does not track you across websites or apps, so this signal does not change how the app works. We do not track you regardless.

12. Changes to This Policy

If we make changes to this policy, we will update the date and notify you within the app. For significant changes, we will give you notice within the app before the changes take effect. Continuing to use Story Harvest after a change means you accept the updated policy.