The short version
- You sign in with a code sent to your email. We keep your email, your reading and the words you save so they follow you across devices.
- AI features are off until you turn them on. When they are on, story text and the words you tap go to AI providers, never your email or account ID.
- We don't sell your data, show ads or track you across other apps and websites.
- You can export your data and delete your account in the app, under You → Account & data.
- Talestride is for adults. It is a pre-release beta, and nothing is sold in it yet.
1. Who we are
This policy explains how Talestride (“we”, “us”) handles personal data in the Talestride app for iPhone and Android and on talestride.com. Talestride decides how and why this data is processed, which makes us the controller of it. You can reach us at support@talestride.com.
Talestride is in development. The app is available only as a private beta, through Apple TestFlight and as a pre-release Android build. This policy describes the app as it works today.
2. What we collect
Your account
- Email address. You sign in with a six-digit code sent to it. There is no password.
- Account ID. A random identifier created when you first sign in.
- Sign-in records. Our sign-in provider keeps records of sign-in events (for example, when a code was requested or used, and from which IP address) to keep accounts secure.
Your reading
- Reading progress: which stories and chapters you've opened, how far you got, when you finished, and how many seconds you read each day.
- Saved words: the word, its meaning, the sentence it came from and its translation.
- Settings: your level, interests, daily reading goal, the languages you read and get help in, and whether you finished the introduction. Some preferences, like reading theme, narration speed and where you stopped listening, stay only on your device.
- A device identifier that the app creates at random, so your devices can sync without overwriting each other. It is not an advertising identifier.
Stories you write
- When you make your own story, we store what you ask for (a topic, a place, a pace, a direction for the next chapter) and the chapters written for you. We also keep explanations of words you looked up in them.
Narration and AI usage
- Narration usage: how many seconds of narration you used each month, and details of each narrated paragraph (which chapter and paragraph, the narrator and style, its length and when it was made).
- AI usage: how many AI requests you made each month and their cost to us, so we can apply fair limits.
- Your AI permission: whether you allowed AI processing, which version of the notice you saw, and when.
When you contact us
- If you email us or report a passage, we receive your email address and what you write. Reports open as an email draft that you choose whether to send; the app doesn't send anything on its own.
What we don't collect
We don't collect your contacts, photos, precise location, advertising identifier or payment details. The app has no advertising and no third-party analytics or tracking code. Our own application logs record which kind of request was made and how it went, never the content of your stories, your email or your IP address.
If you test through Apple TestFlight, Apple may share with us crash reports and feedback you choose to send. Apple's own privacy policy covers what TestFlight collects.
3. How we use it
- To provide the app you asked for: signing you in, syncing your reading and saved words, writing and narrating stories, and letting you export or delete your data. This is necessary to perform our agreement with you.
- To process story text with AI, only with your permission (see the next section). Your consent is the basis for this.
- To keep Talestride safe and affordable: rate limits, usage allowances, cost limits and abuse prevention. This is our legitimate interest in running a secure service.
- To answer you when you contact us, and to meet legal obligations.
We don't sell or rent personal data, we don't use it for advertising, and we don't use your stories or reading to train AI models.
4. AI processing and your permission
Writing your own stories, explaining words in them and reading your own stories aloud use AI providers. These features are off until you allow them. Before you do, the app shows you this notice:
To write stories, explain words in them and read your own stories aloud, Talestride sends what you type, recent chapters and the words you tap to OpenRouter and Google, and your own stories’ text to ElevenLabs. Leave out personal or sensitive details. AI can make mistakes.
- What is sent: your story's topic and directions, recent chapter text, and the word or passage you tapped with the sentence around it. We never send your email, name, account ID or device details.
- Text AI goes through OpenRouter, which routes the request only to Google's models (Google AI Studio or Google Vertex). We ask OpenRouter to use only providers that don't collect request data, and we turn off fallback to other providers.
- Withdrawing permission: you can turn AI processing off at any time in You → Account & data. Our server checks your permission before every new AI request, including work that was queued before you turned it off. Requests that were already sent can't be recalled. You keep everything you've already read and saved.
- If we add a new AI provider or change how your text is used, we'll ask for your permission again. That happened on 7 October 2026, when narration added ElevenLabs.
Ready-made stories, their narration and narrator samples are the same for everyone. Reading them sends none of your data to AI providers and needs no permission.
5. Narration
When you press Listen, Talestride can read a chapter aloud with a narrator voice. To make that audio, our server sends the chapter's text, one paragraph at a time, to ElevenLabs, our text-to-speech provider. We send only the text: never your name, email, account ID or device details. For your own stories, this happens only after you allow AI processing; ready-made chapters are the same for everyone and need no permission.
The audio is stored with Cloudflare and downloaded to your device to play. Downloading it shows your device's IP address to Cloudflare, as with any download. Audio of your own stories is kept for at most 30 days and deleted when you delete your account; audio of ready-made chapters contains no personal data and may be kept. We keep how many narration minutes you used each month with your account until you delete it. Playback speed and where you stopped stay on your device. When the device's own voice reads instead, that happens on your device.
6. Who receives your data
We use these service providers to run Talestride. Each one processes data for us under its own terms, and only for the purpose listed.
| Provider | What it does | What it receives |
|---|---|---|
| Supabase (United States, us-east-1) | Database and email-code sign-in | Your email and account ID, reading progress, saved words, settings, your stories, AI permission and usage |
| Railway | Hosts our API and background services | Your requests while they are handled, including the IP address they come from; our logs there hold no content |
| Resend | Sends the sign-in email | Your email address and the code |
| OpenRouter, routing to Google | Text AI: stories and word explanations, only with your permission | Story topic and directions, recent chapter text, the words you tap; no account identifier |
| ElevenLabs (United States) | Narration (text to speech) | One paragraph of chapter text per request; your own stories only with your permission; no account identifier |
| Cloudflare | Stores and delivers narration audio (R2); serves this website | Narration audio files; your IP address when your device downloads audio or visits the site |
| RevenueCat | Subscription status (see the next section) | Your account ID and whether you have a subscription; no payment details |
We may also disclose data if the law requires it, to protect people's safety or our rights, or as part of a sale or reorganisation of Talestride, in which case this policy continues to apply to it.
7. Subscriptions
Subscriptions are not sold yet, and the app takes no payments. If we start selling them, Apple or Google will handle the payment under their own terms, and RevenueCat will tell us whether your account has an active subscription. We never see your card details. We'll update this policy before purchases become available.
8. How long we keep it
- Your account, reading, saved words, settings and stories: until you delete your account.
- Audio of your own stories: at most 30 days, and deleted with your account.
- After you delete your account: we keep a scrambled form (a one-way hash) of your account ID for up to 35 days, so that restoring a backup can't bring your account back. Our providers' backups expire on their own schedule.
- Our application logs: kept briefly by our hosting provider, with no story content, email addresses or IP addresses.
- Messages you send us: as long as we need to answer and follow up, then deleted.
- On your device: until you sign out, delete your account or remove the app. Signing out deletes your own stories' cached audio.
9. Export, deletion and your rights
In the app, under You → Account & data, you can:
- Export your data as a file: your account, stories, reading progress, saved words, settings, AI permission and usage, and narration usage. For your security, export asks for a fresh code from your email.
- Delete your account. This also asks for a fresh code. It deletes your data from our database, removes your sign-in account, asks RevenueCat to delete its record of you and deletes your own stories' audio. It can't be undone.
- Turn AI processing on or off.
Depending on where you live (for example under Brazil's LGPD, the EU or UK GDPR, or California law), you may also have the right to access, correct, delete or receive a copy of your data, to object to or restrict some processing, and to withdraw consent at any time. To use any of these rights, email us. We'll answer within the time the law requires, at most one month, and may ask you to confirm your identity first. You can also complain to your data protection authority, such as the ANPD in Brazil or the supervisory authority where you live in the EEA or UK.
10. Age
Talestride is for adults. You must be at least 18 to use it. We don't knowingly collect data from anyone younger; if you believe a child has an account, tell us and we'll delete it.
11. International transfers
Our providers store and process data in the United States, and may process it in other countries where they or their subprocessors operate. Our database is in the United States (us-east-1). Where data protection law requires it, we rely on safeguards such as the provider's standard contractual clauses or data processing terms for these transfers.
12. Security
Data travels over encrypted connections. Each account can reach only its own data: our servers check this, and so does the database itself. Sign-in sessions on your phone are kept in the system's secure storage. Exporting and deleting need a fresh email code. Our services run with separate, limited credentials. No system is perfectly secure, but if a breach affects your data, we'll tell you and the authorities as the law requires.
13. This website
talestride.com sets no cookies and runs no scripts, analytics or trackers, and it has no forms. It is served by Cloudflare, which handles your IP address and browser details to deliver the page and protect it from attacks.
14. Changes
We'll update this page when the way Talestride handles data changes, and change the effective date at the top. If a change is significant, we'll tell you in the app before it takes effect. If it changes what we send to AI providers, we'll ask for your permission again.
15. Contact
Questions, requests or complaints about privacy: support@talestride.com.