A Story or TwoEvery moment has a story or two behind it.

Your family’s privacy

Privacy Policy

Family memories are unusually personal. This policy explains what A Story or Two collects, why it is needed, who can see it, and the choices available to you.

Last updated August 31, 2026

The short version

  • Family material is private to its family space unless the contributor chooses “Only me.”
  • We do not sell personal information or use it for targeted advertising.
  • Original recordings and photos remain separate from AI-generated suggestions and polished text.
  • You can correct, export, or delete your account and the material attributed to it.

1. Scope and principles

This Privacy Policy applies to the A Story or Two websites, mobile applications, family spaces, and related services (together, the “Service”). The Service operates under the name “A Story or Two.” “We,” “us,” and “our” refer to the operator of the Service.

A family archive belongs to more than one person. We design the Service around source preservation, visibility choices, and distinct perspectives. We use personal information only to provide, protect, improve, and support the Service; comply with law; and carry out the other purposes described here.

2. Information we collect

The information we collect depends on how you use the Service and what your family chooses to preserve. The main categories are listed below.

CategoryExamplesWhere it comes from
Account and profileEmail address or phone number, name, profile photo, pronouns, birth information, biography, and sign-in records.You, and the authentication service used to sign you in.
Family graphFamily-space name, people, relationships, living or deceased status, family branches, aliases, and invitation contact details.You and other members of the same family space.
Stories and archive materialVoice recordings, text stories, raw and polished transcripts, photos, captions, dates, places, prompts, visibility choices, comments, reactions, and shared moments.You and other members who contribute to the family space.
Suggested and derived materialSuggested titles, summaries, themes, people or relationships mentioned, story connections, and the source citations supporting those suggestions.Generated from family material by our transcription and AI tools.
Invitations and communicationsInvite recipient, delivery channel and status, support messages, and email or text-message activity needed to deliver the Service.You, other family members, and our communications providers.
Membership and purchase recordsPlan, entitlement, trial or renewal dates, subscription status, and transaction or provider identifiers. We do not receive full payment-card details.You, RevenueCat, an app store, or the payment processor shown at checkout.
Device and service activityIP address, browser or app version, operating system, request timestamps, security events, diagnostic logs, and error details.Collected automatically when you use the Service.

We do not use recordings to create biometric voiceprints or photos for facial recognition. We do not request government identifiers or collect precise device location. A place named in a story or family profile is family content, not device-location tracking.

On the web, we use essential session cookies and similar local storage to keep you signed in, protect the Service, and remember necessary choices. We do not use advertising cookies or cross-site tracking pixels.

3. How we use information

We use the categories above to:

  • create and secure accounts, family spaces, and invitations;
  • store, play, transcribe, organize, connect, display, and export family material;
  • apply each contributor’s visibility choices and prevent unauthorized access;
  • send sign-in codes, invitations, service notices, and family activity messages;
  • provide memberships, purchases, trials, entitlements, and customer support;
  • operate transcription and AI-assisted features as described below;
  • diagnose errors, prevent misuse, protect the Service, and maintain reliability; and
  • comply with legal obligations and enforce our Terms of Service.

We may create aggregated or de-identified statistics that do not reasonably identify a person or family. We use them to understand reliability and broad product usage, not to build advertising profiles.

4. Family sharing and visibility

Family spaces are not public social networks. Current members of a family space can see family-profile and people information needed to understand that shared space. A story or photo marked “My family” is available to current members of that family. Material marked “Only me” is available only to its contributor, except for narrowly limited access needed to operate, secure, or comply with law.

Changing a story or photo from “My family” to “Only me” removes other family members’ access to that item. Related stories contributed by other people keep their own visibility and remain distinct. Invitations include enough family context to explain who invited the recipient and which family space they are being asked to join.

Other family members control the material they contribute. Your ability to view material can therefore change if its contributor changes visibility, leaves a family, or deletes an account.

5. AI and transcription

The Service uses speech-to-text and artificial-intelligence providers to transcribe recordings, lightly polish transcripts, and suggest titles, summaries, themes, people, relationships, questions, or connections between stories. The relevant recording, transcript, or family context is sent to the configured provider only when needed for that feature.

Original recordings and raw transcripts are kept separate from polished or AI-generated material. Suggested family facts are reviewable and can be corrected or rejected. AI can be wrong, and the Service does not treat a model’s suggestion as a definitive family fact. Family-wide AI features exclude “Only me” material. A contributor may separately choose a personal feature that processes their own private material, but that does not make it available to family-wide AI.

We use provider API or business services to process family material on our behalf. We do not sell family material to model providers or use it to target advertising.

6. When information is disclosed

Family members and invitees

We disclose information within a family space according to the visibility rules above and show limited invitation context to invited recipients.

Service providers

Providers receive only the information reasonably needed for their function. Depending on the configured feature, these providers include:

  • Supabase for authentication, database, and file storage;
  • Vercel and Fly.io for application hosting and processing;
  • OpenAI or Anthropic for AI-assisted features, and OpenAI or Deepgram for transcription;
  • Resend and Twilio for email and text-message delivery;
  • RevenueCat, app stores, and payment processors for purchases and subscription status; and
  • Sentry for error tracking and service diagnostics.

Legal, safety, and business events

We may disclose information if we reasonably believe it is required by law; needed to protect a person, prevent fraud or abuse, or secure the Service; or necessary to establish, exercise, or defend legal claims. If the Service is involved in a merger, financing, acquisition, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to appropriate confidentiality and this policy’s protections.

No sale or targeted advertising

We do not sell or rent personal information. We do not share personal information for cross-context behavioral advertising or use family stories, recordings, photos, or relationships for targeted advertising.

7. Retention

Family source material is designed to last while its contributor keeps an account. We keep an active family’s stories, recordings, photos, transcripts, family graph, visibility history, and provenance while the family uses the Service, including when a paid membership lapses. A lapsed membership does not make the existing archive unreadable. A verified account-deletion request removes material attributed to that account as described below.

We keep account, invitation, purchase, security, and diagnostic records for as long as reasonably necessary for the purposes described in this policy. Retention depends on the record’s nature, the family’s choices, security and dispute needs, provider cleanup schedules, and legal obligations. Deletion from backups and provider systems may take additional time.

We may retain de-identified records that cannot reasonably be linked back to you. When information is no longer needed, we delete it or de-identify it using reasonable measures.

8. Your choices and privacy rights

Depending on the feature and applicable law, you can:

  • review and correct your profile, people information, stories, and visibility choices;
  • download a family archive in an open, portable format;
  • leave a family space or delete your account;
  • ask for access to, correction of, deletion of, or a portable copy of personal information about you;
  • object to or restrict certain processing where applicable; and
  • appeal a denied privacy request where applicable law provides that right.

To exercise a request that is not available in the app, email info@storyortwo.com. We may need to verify your identity and authority over the relevant account or family material. We will not discriminate against you for exercising a privacy right. If local law gives you a right to complain to a privacy regulator, you may also do so.

9. Account deletion

You can initiate account deletion from Profile on the web or Account in the mobile app. The Service verifies the request with a one-time code and shows what will happen before deletion becomes final. If you cannot sign in, contact info@storyortwo.com.

Deletion removes your sign-in identity, memberships, profile and linked person entries, stories, recordings, transcripts, photos, comments, reactions, shared moments, invitations, and relationship records that the Service can attribute to your account. This includes material you shared with a family and material marked “Only me.” Other family members keep the stories and material they contributed. If another person responded to one of your stories, their response remains as their content but no longer links to your deleted story.

If you are the only organizer, the longest-standing current member is promoted so the family is not left without an organizer. If nobody else belongs to a family space, that empty family space is deleted. Deleting an account does not cancel a subscription billed by an app store or another billing provider; manage that subscription with the provider before deleting. Some de-identified, security, transaction, guardian-consent, backup, or legal records may be retained for the limited periods and purposes described above.

10. Security and international transfers

We use technical and organizational measures intended to protect personal information, including authentication, access controls, private storage, encrypted network connections, database row-level security, and service monitoring. No system can guarantee absolute security, so please use a secure email or phone account and tell us promptly if you suspect unauthorized access.

We and our providers may process information in the United States and other countries. Those countries may have different privacy laws. Where required, we use legally recognized safeguards for international transfers.

11. Children and teens

The Service is intended for family-memory projects organized by adults. A person must be at least 13 to hold an account. An invited person under the age of majority may use the Service only with a parent or legal guardian’s consent and supervision. We do not knowingly allow a child under 13 to create an account or provide personal information directly to the Service.

An adult may include family-history information about a child in a person’s profile, story, or photo when the adult is authorized to share it. Please share only what is appropriate for the family audience. If you believe a child under 13 has created an account or provided information directly, email info@storyortwo.com so we can investigate and delete it.

12. Changes and contact

We may update this policy as the Service or law changes. We will post the new date here and provide additional notice when a change materially affects how we use family material or your rights.

Questions, privacy requests, and concerns about a child’s information can be sent by email to info@storyortwo.com.

Privacy Policy — A Story or Two