Information for your reviewers
Trust starts with clear answers.
Understand the information involved, how sharing works, and which requirements need review before your organization starts using StoryRetriever.
Content reviewed September 7, 2026. The Privacy Policy and your executed agreements govern your use.
Information and access
Adults create and share resources that may include personal information about a child. Treat names, photographs, recordings, and story details according to your family's or organization's requirements. Confirm the specific account and school-managed access configuration before institutional use.
Stories are not public marketing content. A shared-story link provides access to its content, so send it only to intended readers. Our shared-story pages are separated from marketing analytics and carry instructions to keep them out of search indexes. An unguessable link is still access that can be passed on.
Organization membership, a personal subscription, and permission to read a shared link are different things. Review family access options and test sharing and revocation with fictional content.
Retention and deletion
The Privacy Policy describes retention of account information, stories, profiles, and payment records. Account deletion instructions are available on the deletion page. Payment processors may retain records under their own legal requirements.
For organization-owned or school-managed information, agree who is responsible for retention, exports, membership changes, and deletion. Include year-end and staff-transition requirements in your review.
Services used to operate the product
These are core services described in our app and website documentation. Ask for the complete, current subprocessor and region information required for your specific review. A provider's own certification does not certify StoryRetriever.
- Supabase
- App database, authentication, and file storage
- Vercel
- Website hosting
- Stripe
- Web subscription payments
- Apple and Google
- Native app distribution and in-app purchases
- RevenueCat
- In-app purchase and subscription status management
- Resend
- App transactional email
Optional webinar registration uses the services identified in our Privacy Policy. Business inquiries submitted here include the contact information and organization requirements you choose to provide.
For any feature involving AI processing, request the current feature-specific processing, retention, and training terms before use. This page does not make an unverified promise about model training or all possible configurations.
School data agreements
Send your required agreement and review questions through our contact form. The ability to execute a DPA must be confirmed before student use. We do not promise a signature or a delivery date before reviewing the requirements and our service-provider arrangements.
Clinic data use and BAAs
If your use requires a BAA or involves protected health information, confirm an appropriate agreement and the approved setup before entering that information. BAA availability is not established by this website. Use fictional details while evaluating the product.
Discuss your privacy requirementsAccessibility evidence
Read the accessibility statement for the current scope and feedback path. A formal product Accessibility Conformance Report is not yet published here. Tell us which workflows, devices, and assistive technologies your reviewers need to assess.
Security questions and incident reports
Contact support@storyretriever.com to report a concern or request security information. Describe the issue without attaching child or patient records. Detailed review material and any contractual notification obligations are handled with the relevant parties.
We do not claim SOC 2 certification or use provider certifications as a substitute for a StoryRetriever assessment.
A clear next step
Bring your review questions to us.
Tell us about your team and what you need to evaluate. We'll use your inquiry to discuss fit, pricing, and the next steps.