What we collect, and why

The whole list

• Your email address

  So you can sign in, and so we can email you if your child asks to publish a story.

  You, the adult.

• A name you choose for yourself

  So the app can greet you. It can be anything.

  You, the adult.

• Your password

  Stored hashed by our authentication provider. We never see it.

  You, the adult.

• A record of what you agreed to

  The date, and which version of our terms you saw. It's how we can prove consent was given rather than assumed.

  You, the adult.

• A nickname for each child

  So they can tell their profile apart from a sibling's. You pick it, and it is never shown outside your account.

  Chosen by you, about your child.

• An avatar

  Picked from a fixed set of eight shapes. Not an upload — we have no way to store a picture of your child.

  Chosen by you, about your child.

• An age range, if you give one

  6–8, 9–11 or 12–14, to suggest suitable stories. A range, never a birthday. Optional.

  Chosen by you, about your child.

• Which stories a child has read, and where they got to

  So they can pick up where they left off, and so a story remembers the choices they made.

  Generated as your child reads.

• Stories your child writes

  Only if you've turned writing on. Private by default — visible to your child and you, nobody else, unless you and then we approve publishing it.

  Written by your child.

What we never collect

• ✕Your child's real name
• ✕Your child's date of birth
• ✕An email address or login for your child
• ✕Photographs, or any uploaded image
• ✕Location data of any kind
• ✕Contacts, microphone, or camera access
• ✕Anything from advertising or analytics trackers — there are none on the site

This isn't a promise about how we behave — it's a description of what the software can do. There is no field in our database for a child's real name, and no way to upload an image of a child. Features we don't build can't leak.

Why children don't sign in

You hold the account. A child profile is something inside your account, not an account of its own — there is no password for your child, nothing to phish, and no way for anyone to contact them. Children can't message each other, can't see who else is on the site, and can't be found by anyone.

Getting it back, or getting rid of it

Deleting your account removes all of it — your details, every child profile, and every story they wrote — immediately and permanently. It's in your account settings, and it doesn't require emailing anyone or waiting for us to get round to it.

Want a copy of what we hold, or have a question this page doesn't answer? hello@futurebooks.app.