GDPR & Your Data Rights

Family Story Club is committed to protecting your personal data in line with the General Data Protection Regulation (GDPR). This section explains your rights and how to exercise them.

1. Who Is the Data Controller?

The operator of Family Story Club is the data controller responsible for your personal data. If you have questions about how your data is handled, you may contact Base44 support through your account dashboard.

2. Legal Basis for Processing

We process your personal data under the following lawful bases:

• Contract: to provide the service you subscribed to.
• Consent: when storytellers choose to record and enter their name.
• Legal obligation: where we are required to keep records (for example, billing).
• Legitimate interests: to keep the service secure and prevent misuse.

3. Your Rights Under GDPR

You have the following rights regarding your personal data:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: correct inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): request deletion of your data and recordings.
• Right to restriction: ask us to limit processing of your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests.
• Right to withdraw consent: at any time, without affecting processing already carried out.

4. Exercising Your Rights

To exercise any of these rights, please contact Base44 support through your account dashboard. We will respond within one month. To help protect your data, we may ask you to verify your identity before acting on a request.

5. Data We Process

• Email address, name, and subscription status.
• Storyteller names entered by invited family members.
• Audio recordings and associated playback links.
• Payment records (handled by Stripe as a data processor).

6. International Transfers

Your data may be processed by service providers located outside the EU/EEA. Where this happens, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data is protected to EU standards.

7. Data Retention

We keep your recordings only as long as needed to provide the service. When you cancel your subscription, you can request deletion of your recordings at any time. We will remove personal data that is no longer necessary for the purposes it was collected for.

8. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal or similarly significant effects on you. AI-generated stories are created on request and are reviewed by parents before sharing.

9. Lodge a Complaint

If you believe we have not handled your data correctly, you have the right to lodge a complaint with your local data protection authority. In the UK, this is the Information Commissioner's Office (ico.org.uk).

10. Contact

For any GDPR-related questions or to make a data request, please contact Base44 support through your account dashboard.