Privacy Policy

Effective date: [10.10.2024]
Last updated: [13.07.2026]

Pastory is designed to help parents and caregivers create a safer, more useful video experience for children. We take privacy seriously, especially where children’s information is involved.

This Privacy Policy explains how Pastory, Inc. (“Pastory”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal data when you use our website, mobile application, beta testing programme, and related services, including pastory.app and any Pastory websites, apps, or online services that link to this Privacy Policy.

This Privacy Policy applies to:

  • parents, guardians, and caregivers using Pastory;
  • children using Pastory through a parent or caregiver account;
  • website visitors;
  • beta testers;
  • people who contact us or submit forms through our website or testing programme.

If you do not agree with this Privacy Policy, please do not use Pastory.

1. Who we are

Pastory, Inc. is the controller of the personal data described in this Privacy Policy, unless we state otherwise.

Company name: Pastory, Inc.
Privacy contact: support@pastory.app

If you have any questions about this Privacy Policy or how we process personal data, you can contact us at:

 support@pastory.app

2. Our approach to children’s privacy

Pastory is intended to be used by families. Children may use the child-facing parts of the app, but the account is created and managed by an adult parent, guardian, or caregiver.

We aim to protect children’s privacy by default. This means that we seek to collect only the data needed to provide the service, give parents control over their child’s experience, and avoid unnecessary sharing of children’s personal data.

We do not sell children’s personal data.

We do not use children’s personal data for third-party behavioural advertising.

We do not intentionally allow child users to access external links from the child-facing app environment unless an adult user takes an action such as entering a password, answering a security question, or otherwise approving access.

Where consent is required for the processing of a child’s personal data, we rely on consent from the parent, guardian, or person with parental responsibility.

3. Personal data we collect

We collect different types of information depending on how you use Pastory.

3.1 Parent, guardian, or adult user data

We may collect:

  • name;
  • email address;
  • account login details;
  • Google or Apple login information, where you choose to sign in using these services;
  • password or parent access settings, where applicable;
  • communication preferences;
  • support messages, feedback, and survey responses;
  • beta testing responses, where you participate in a beta test.

3.2 Child profile data

When an adult user sets up a child profile, we may collect:

  • child’s first name or nickname;
  • age or date of birth;
  • school stage or education setting, where provided;
  • content interests and preferences;
  • selected topics, categories, channels, curricula, or activities;
  • viewing history within Pastory;
  • time limit settings;
  • parent-approved or blocked content settings.

We recommend that parents use a child’s first name, nickname, or other non-identifying label rather than a full legal name.

3.3 Device and technical data

We may collect limited technical data needed to operate, secure, and improve the service, such as:

  • device type;
  • operating system;
  • app version;
  • browser type, where you use our website;
  • technical logs;
  • crash reports;
  • error reports;
  • approximate country or region, where needed for service operation or testing.

We do not ask for precise location data as part of the standard Pastory experience.

3.4 Usage data

We may collect information about how the app is used, including:

  • screens viewed;
  • features used;
  • videos, curricula, channels, or activities opened within Pastory;
  • content saved, liked, approved, or blocked;
  • time limit settings and usage status;
  • onboarding progress;
  • app performance and technical events.

3.5 Beta testing data

If you participate in Pastory beta testing, we may collect:

  • name;
  • email address;
  • country;
  • device type and operating system;
  • information about your children, such as age range and education setting;
  • feedback about the app;
  • screenshots, videos, or bug reports you choose to share;
  • communication through email, forms, Google Drive, WhatsApp, or other testing channels.

We use beta testing data only to manage your participation, provide test access, communicate with you, understand issues, fix bugs, and improve Pastory before launch.

3.6 Information we do not intentionally collect

We do not intentionally collect:

  • biometric identification data, such as facial geometry or voice prints;
  • precise GPS location;
  • information about race or ethnicity;
  • political opinions;
  • religious beliefs, except where you voluntarily provide information about a school type such as a faith school;
  • sexual orientation;
  • health information;
  • financial information from children.

If you believe sensitive personal data has been submitted to us by mistake, please contact us at support@pastory.app

 

4. How we use personal data

We use personal data for the following purposes.

Purpose Examples of data used Legal basis
To create and manage an adult user account Name, email, login data Performance of a contract
To set up and manage child profiles Child name or nickname, age, preferences, parent settings Performance of a contract; parental consent where required
To provide the child video experience Content preferences, curricula, viewing history, approved or blocked content Performance of a contract; legitimate interests; parental consent where required
To personalise content within Pastory Age range, interests, selected categories, curricula, content settings Performance of a contract; legitimate interests; parental consent where required
To provide parental controls Time limits, category settings, profile settings Performance of a contract
To improve safety and product quality Usage data, error reports, feedback Legitimate interests
To provide support Contact details, support messages, technical data Performance of a contract; legitimate interests
To run beta testing Email, device data, feedback, bug reports Consent; legitimate interests
To maintain security and prevent misuse Logs, technical data, account activity Legitimate interests
To comply with legal obligations Account data, communications, legal requests Legal obligation
To send important service messages Email address, account status Performance of a contract; legitimate interests
To send optional marketing communications Email address, communication preferences Consent, where required

Where we rely on legitimate interests, we consider whether our interests are balanced against the rights and freedoms of users, especially children. We do not rely on legitimate interests where the impact on a child’s privacy would override our interest.

 

5. Children’s data and parental control

Pastory is designed so that an adult user creates and manages the account. Children should use Pastory only with the involvement of a parent, guardian, or caregiver.

Adult users can:

  • create and edit child profiles;
  • choose or update content preferences;
  • approve, block, or manage content;
  • set or edit time limits;
  • view parts of the child’s activity within the app;
  • request deletion of a child profile;
  • request deletion of account data.

We use child profile data to provide the Pastory service, including child-safe video feeds, curricula, activities, content settings, and parental controls.

We do not sell children’s personal data. We do not use children’s personal data for third-party behavioural advertising. We do not knowingly share children’s personal data except where needed to provide the service, comply with the law, protect users, or work with service providers under appropriate data protection safeguards.

6. YouTube API Services and Google services

Pastory may use YouTube video hosting and the YouTube API Services to display, organise, or retrieve video-related content within the app.

By using features that rely on YouTube API Services, you also agree to be bound by the YouTube Terms of Service, available at:

https://www.youtube.com/t/terms

Google’s Privacy Policy is available at:

https://policies.google.com/privacy

Where you choose to sign in with Google or use features connected to Google or YouTube, Google may process your data according to its own privacy policy and terms.

Pastory does not use YouTube or Google data to sell children’s personal data or show third-party behavioural advertising to children.

 

7. Apple, Google Play, and beta testing access

If you participate in beta testing, we may use Apple TestFlight or Google Play testing tools to provide access to test versions of the app.

For iOS users, Apple may process information according to Apple’s own privacy policy and TestFlight terms.

For Android users, Google may process information according to Google Play and Google account policies.

We use these tools only to provide app access, manage testing, and collect feedback needed to improve Pastory.

8. Artificial intelligence and content recommendations

Pastory may use content preferences, age range, curriculum selections, and other parent-approved settings to help organise or recommend educational content inside the app.

We do not use children’s personal data to sell advertising or to create third-party advertising profiles.

Where AI-assisted features are used, they are intended to support the organisation, selection, or improvement of educational content within Pastory. We aim to keep parents in control of the child’s content experience.

If a specific AI feature involves additional data use, we will explain this in the app or in an updated version of this Privacy Policy.

9. Cookies, local storage, and similar technologies

Pastory does not use cookies or similar technologies to show third-party behavioural advertising to children.

Our website or app may use cookies, local storage, SDKs, or similar technologies where necessary to:

  • keep users signed in;
  • remember app settings;
  • provide security;
  • understand technical performance;
  • fix bugs;
  • improve the service.

In the app, some authentication or session information may be stored locally on the device to keep the service working correctly.

If we use analytics, crash reporting, or similar tools, we aim to configure them in a privacy-conscious way and avoid collecting more data than necessary.

10. When we share personal data

We may share personal data with trusted service providers where necessary to operate Pastory. These may include:

  • hosting and infrastructure providers;
  • database and cloud storage providers;
  • authentication providers;
  • email and communication tools;
  • analytics and crash reporting tools;
  • customer support tools;
  • beta testing tools, such as Apple TestFlight and Google Play testing;
  • Google Forms or Google Drive, where used for beta testing;
  • WhatsApp, where you choose to join a beta testing group;
  • Google and YouTube services, where YouTube API Services or Google login are used.

We require service providers to process personal data only for the purposes we specify and to protect the data appropriately.

We may also share personal data where necessary to:

  • comply with the law;
  • respond to lawful requests from public authorities;
  • protect the rights, safety, or security of users, children, Pastory, or others;
  • investigate fraud, misuse, or security issues;
  • complete a business transaction, such as a merger, acquisition, or asset transfer, subject to appropriate safeguards.

We do not sell personal data.

 

11. International transfers

Pastory and some of our service providers may process personal data in countries outside the United Kingdom.

Where we transfer personal data outside the UK, we take steps designed to protect it in accordance with applicable data protection laws. These steps may include using adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or other appropriate safeguards.

If you would like more information about international transfers, please contact us at support@pastory.app

 

12. How long we keep personal data

We keep personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Data type Retention period
Adult account data For as long as the account is active, and for a reasonable period after closure where needed for legal, security, or operational reasons
Child profile data For as long as the child profile or account is active, unless deletion is requested earlier
Viewing history and content settings For as long as needed to provide the service and parental controls, unless deleted or reset
Beta testing data For the duration of the beta test and up to 12 months afterwards to analyse feedback and fix issues
Support messages For as long as needed to handle the request and maintain records
Technical logs and crash reports Usually for a limited period, unless needed to investigate security or technical issues
Marketing data Until you unsubscribe or withdraw consent

You may request deletion of your account or personal data by contacting us at support@pastory.app

13. Withdrawing consent

Where we rely on consent, you can withdraw your consent at any time.

For example, if you participate in beta testing, you may ask us to stop using your beta testing data or delete your responses by contacting us at support@pastory.app

Withdrawing consent does not affect processing that happened before the withdrawal.

14. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

These measures may include:

  • access controls;
  • encryption where appropriate;
  • secure authentication;
  • limited staff access;
  • monitoring for technical issues;
  • data minimisation;
  • regular review of service providers.

No online service can be guaranteed to be completely secure. If you believe your account or personal data may have been compromised, please contact us immediately at support@pastory.app

 

15. Third-party links and external services

Pastory may include links to third-party services or content. Where external links are available, we aim to restrict child access unless an adult user approves access.

Third-party websites, services, or platforms are governed by their own privacy policies and terms. We are not responsible for the privacy practices of third parties.

 

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time.

If we make material changes, we will take reasonable steps to notify users, such as posting an updated version on our website, updating the effective date, or sending a notice through the app or by email.

Your continued use of Pastory after the updated Privacy Policy becomes effective means that the updated policy applies to your use of the service.

 

17. Contact us

If you have any questions about this Privacy Policy or how Pastory handles personal data, please contact us:

Pastory, Inc
Email: support@pastory.app