Privacy Policy
Effective date: [10.10.2024]
Last updated: [06.11.2026]
1. Who We Are and Scope
Pastory (“Pastory”, “we”, “us” or “our”) provides the website at https://pastory.app, the Pastory mobile applications,
any related online services and testing programmes (together, the “Service”). This Privacy Policy explains how personal
data is collected, used, shared and protected when adults, children using parent-managed profiles, website visitors,
beta testers and people contacting Pastory use the Service.
Pastory is the name used to provide and operate the Service. For privacy questions or to exercise applicable rights,
contact support@pastory.app.
This Policy does not mean that pseudonyms, account identifiers or viewing history are anonymous. Data relating to an
identifiable parent or child can still be personal data.
2. Children, Parent-Controlled Accounts and Video Selection
An adult parent or legal guardian creates and manages the account and each child profile. A child does not need a
personal email address or legal name to use a parent-managed profile. We encourage parents to use nicknames or other
non-identifying labels.
The parent may select and approve particular videos, or enable Pastory to select or recommend videos automatically
according to settings and preferences chosen by the parent. The parent can choose the approach and remains responsible
for monitoring what the child watches and for reviewing whether the automated approach is appropriate for the child.
Pastory records the child’s viewing activity and associates it with the child profile on our servers. Parents can use
the Service to view activity, manage access and supervise use. We do not sell children’s personal data or use it for
third-party behavioural advertising.
Where consent or other parental authorisation is legally required, we seek it in the manner required by applicable law.
A parent-controlled account alone does not always satisfy every jurisdiction’s parental consent requirements.
3. Categories of Personal Data
Adult account information: email address, login or authentication details, optional name or nickname, account and
subscription status, parent settings, support communications, and feedback.
Child profile information: nickname or other label selected by a parent, any age or age range supplied, parental content
settings, approved or blocked content, viewing history, associated usage activity and time limits where used.
Technical and usage information: device and browser characteristics, app version, approximate region inferred from
technical information, IP address where processed, security and access logs, error and crash diagnostics, feature
interactions and website usage information.
Beta participation and communications: details submitted in surveys, bug reports, optional feedback or testing
communications. We do not intentionally request sensitive categories of personal data or precise location for ordinary
Service use.
4. Purposes and Legal Bases
We process adult account information to register and authenticate adults, deliver the requested Service, provide account
support, administer subscriptions where applicable and communicate operational information. The applicable basis may
include performance of a contract and compliance with legal obligations.
We process child profile settings and related activity to operate parent-selected or automated viewing arrangements,
show the parent viewing history and maintain parental-control features. Depending on the specific processing activity
and applicable law, legal bases may include legitimate interests assessed against children’s rights, or consent or
parental authorisation where required. We do not assume that the parent’s contract automatically provides a legal basis
for every use of a child’s data.
We process technical information for security, fraud prevention, troubleshooting and service improvement where justified
by legitimate interests, legal obligations or another applicable legal basis. Optional analytics or marketing
technologies are used subject to consent where required.
We may use parent-selected settings to support automated recommendations and classification. We do not use children’s
data for third-party behavioural advertising. We do not use automated decisions that produce legal or similarly
significant effects on children as part of the standard service.
5. Parent Controls and Viewing History
Adults can manage child profiles, select manual or automated content-selection settings, modify the approved content and
relevant preferences, and access the viewing history available in the Service.
The Service does not currently offer deletion of individual viewing-history entries. A parent can delete a child profile
or the entire account through the available account-deletion process; removing a profile also removes its associated
history from the active Service, subject to technical processing, backups and legally justified retention.
Requests for erasure or other rights which applicable law requires Pastory to address can be submitted to
support@pastory.app. We will evaluate the request in accordance with applicable law; deletion of an entire account is
not a precondition to exercising a statutory right where that would be unlawful.
6. YouTube API Services and External Content
The Service may use YouTube API Services and an embedded YouTube player to display videos, metadata and related content
selected or recommended within Pastory.
Use of these features is subject to the YouTube Terms of Service: https://www.youtube.com/t/terms. Google’s Privacy
Policy is available at https://policies.google.com/privacy.
When an embedded player loads or a video plays, Google or YouTube may receive technical and playback-related information
directly, including information relating to the device, network connection and use of the embedded player, in accordance
with their applicable practices.
Pastory does not sell personal data to Google or YouTube. We seek to configure embedded video and related integration
consistently with applicable obligations for child-directed services.
7. App Stores, Beta Testing and AI Features
Apple and Google may process personal data in connection with app downloads, in-app subscriptions and test distribution
in accordance with their own policies. If you take part in a beta programme, we process the data needed to enrol you,
communicate with you and evaluate reported issues.
Pastory may use automated or AI-assisted tools to organise or recommend videos based on parent-selected content and
child profile settings. The tools may not always produce accurate or age-appropriate results. Where additional
processing requires consent or further disclosures, we will comply with the applicable requirements.
8. Cookies, Analytics and Similar Technologies
Our website and applications may use cookies, local storage, SDKs and similar technologies to maintain sessions, support
security, remember settings, diagnose problems, understand usage and improve performance.
We may engage third-party analytics platforms and technical service providers. Depending on configuration, those
platforms may receive usage, device and technical information. We seek to minimise information shared in connection with
child profiles and do not use children’s data for third-party behavioural advertising.
Where applicable law requires consent before placing or accessing non-essential technologies, we will obtain it before
enabling those technologies. You may have choices through the consent interface, browser controls or device settings.
These statements must be read together with the actual technologies in use.
9. Sharing and Service Providers
We may share personal data with providers that support hosting, database infrastructure, authentication, payment or
subscription operations, email, customer support, security, analytics, technical diagnostics, test distribution and
video playback, as needed for the Service.
We may also disclose information where required by law, to respond to lawful requests, protect users and the Service,
investigate suspected misuse, or complete a lawful business transfer subject to appropriate safeguards.
We do not sell personal data. Where a provider acts on our instructions, we seek appropriate contractual and technical
safeguards.
10. International Data Transfers
Because Pastory and its users operate internationally, data may be processed in countries outside the United Kingdom and
the location of a user. Where applicable law requires safeguards for an international transfer, we use an appropriate
lawful mechanism or other recognised protection.
11. Retention and Deletion
We retain personal data while it is needed for the purposes for which it was collected, including providing an active
account, child profile, viewing history, security and support, and for additional periods where legally necessary or
otherwise justified. Retention is assessed by the type of data, whether the profile or account remains active,
operational needs and applicable legal requirements.
Viewing history is retained in connection with the child profile and its parental-control functionality while the
profile is active and retention remains necessary for that purpose. A parent can end that retention in the active
Service by deleting the child profile or account through the available deletion process. Pastory does not currently
offer a separate history-clearing tool.
After deletion, records may persist for a limited period in backup or recovery systems, or where retention is required
or permitted by law. We do not keep personal data indefinitely without a valid purpose. You may contact us about
applicable erasure rights.
12. Your Privacy Choices and Rights
Depending on the law that applies, individuals may be entitled to request access, correction, deletion, restriction,
portability or to object to certain processing, and may withdraw consent where consent is the legal basis. These rights
are not always absolute.
Parents or legal guardians may contact us about data linked to a child profile, subject to verification and the child’s
own applicable rights. Requests can be sent to support@pastory.app. We respond within the period required by applicable
law.
You may also have the right to lodge a complaint with the competent data-protection supervisory authority. This Policy
does not limit rights granted by applicable law.
13. Security
We use technical and organisational safeguards appropriate to the sensitivity of the data, which may include access
controls, secure authentication, encryption where appropriate, restricted administrative access and monitoring of
technical issues. No online service can guarantee absolute security.
Please contact support@pastory.app if you suspect unauthorised access to an account or misuse of personal information.
14. Changes to this Policy
We may update this Privacy Policy from time to time by publishing the current version with a revised date. Where
applicable law requires separate notice or consent for a particular change or processing purpose, we will comply with
that requirement. Continued use does not override consent or other rights required by law.
15. Contact
Pastory
Email: support@pastory.app
