Within Life Stories

Privacy Policy

Last updated: March 13, 2026

1. Introduction

Within Life Stories, a product of WITHIN Learning Group, LLC (“we,” “our,” or “us”) is committed to protecting your privacy and the deeply personal stories you share with us. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our application.

We understand that preserving your life stories is an intimate and vulnerable process. Your trust is sacred to us, and we take extraordinary measures to ensure your memories remain private and secure.

2. Information We Collect

Account Information

Story Content

Order Information

Automatically Collected Information

Push Notifications

If you enable push notifications, we collect a device token to send you updates about your story progress, order status, and important account information. You can disable push notifications at any time through your device settings or within the app.

3. How We Use Your Information

Your stories matter. Your privacy is sacred. Thank you for trusting us with your memories.

4. How We Protect Your Data

🔒 Your account is protected with industry-standard encryption. Only you can access your stories.

Encryption at Rest

All your personal data, including audio recordings, transcripts, and photos, is encrypted using AES-256 encryption when stored. This is the same level of encryption used by banks and government agencies.

Encryption in Transit

Every piece of data transmitted between your device and our servers is protected using TLS 1.3, the latest and most secure encryption protocol for internet communications.

Access Controls

We implement Row-Level Security (RLS) policies, ensuring you can only access your own data. Even our team cannot access your personal stories without explicit authorization. All admin access to sensitive data is logged for audit purposes.

Authentication

All API endpoints require authentication. We use JWT tokens with short expiration times and automatic refresh for enhanced security. We also check passwords against known data breach databases to protect you from credential stuffing attacks.

Regular Audits

We maintain comprehensive access logs to detect unauthorized activity, regularly audit our security practices, and retain sensitive access logs for 2 years to support investigations if needed.

Private Storage

Your audio recordings and photos are stored in private storage buckets that are never publicly accessible. Access is granted only through time-limited signed URLs that expire automatically.

5. Your Complete Ownership

✓ You own 100% of your stories. We claim no ownership of your recordings or writings — we simply process them to create your book.

Every audio recording, transcript, photo, and written word you create through our Service remains entirely your intellectual property. We are merely custodians who help transform your memories into a beautiful book. When you delete your account, we permanently delete all your content.

6. Data Sharing

We never sell your personal data. Your stories are yours alone.

We only share your information in these limited circumstances:

7. Third-Party Services

We use trusted third-party services to provide the Service. These include:

All third-party providers are contractually bound to protect your data and use it only for the purposes we specify.

How Our Partners Handle Your Data

We carefully select partners who share our commitment to your privacy. Here is exactly how each one handles your data:

ElevenLabs (Transcription): Audio is processed in real-time and is not stored after transcription is complete. No voice profiles are created.

Stripe (Payments): Payment card data is handled entirely by Stripe under PCI DSS Level 1 compliance. We never see or store your full card number.

RPI (Book Printing): Your book files and shipping address are transmitted securely. Print files are deleted from their servers after production is complete.

Resend (Email): Used only for transactional emails (order confirmations, password resets). Your email is not shared with third parties for marketing.

8. Cookie Policy

We use cookies and similar technologies to improve your experience:

Essential Cookies

These are necessary for the Service to operate. They keep your login session and security settings. You cannot turn these off.

Analytics Cookies

Help us understand how you use the Service so we can make it better. These collect anonymized usage data.

Preference Cookies

Remember your settings and preferences, like language or accessibility options.

Managing Cookies

You can manage your cookie preferences through your browser settings. Keep in mind, disabling certain cookies may affect how the Service works.

9. Data Retention & Storage Policy

We keep your story data as long as your account is active. Access logs are automatically deleted after 90 days to protect your privacy while keeping security intact.

You can request your account and all related data be deleted at any time. Once deleted, we will remove your data within 30 days, unless law requires us to keep it.

4-Year Free Storage Guarantee

All user-created content—including voice recordings, uploaded photos, transcripts, book PDFs, and print-ready files—is stored at no cost for four (4) years from your account creation date.

After four years, you can subscribe to an annual Storage Maintenance Plan to keep all your original content. The current price is shown in the app before you subscribe.

If you do not subscribe after the free period, your account will be downgraded to “Essentials” status:

Kept at no cost:

Removed upon downgrade:

We will email you 90 days, 30 days, and 7 days before your free storage ends, giving you enough time to subscribe or download your content.

10. Your Rights

Under GDPR, CCPA, and other privacy laws, you have the right to:

To exercise these rights, visit your Profile or contact us at privacy@withinlifestories.com. We will respond within 30 days.

11. Children’s Privacy

Our Service is not meant for users under 13 years old. We do not knowingly collect personal data from children under 13. If we find that we have accidentally collected information from a child under 13, we will delete it immediately.

If you are a parent or guardian and believe your child has given us personal information, please contact us at privacy@withinlifestories.com.

12. International Data Transfers

Your data may be stored and processed in the US or other countries where our service providers operate. We ensure proper safeguards are in place, including Standard Contractual Clauses for data transfers from the EU/UK.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes:

Your continued use of the Service after the changes take effect means you accept the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please reach out:

Email: info@withinlifestories.com
Data Protection Inquiries: info@withinlifestories.com
Subject: Privacy Inquiry

EU residents also have the right to file a complaint with their local data protection authority.