Privacy Policy.
Effective July 27, 2026.
Retold exists to help you tell your own story. That only works if you can trust us with it. This policy says what we collect, what we do with it, and what we will never do.
What we collect
Account details: your first name, email address, and date of birth (used only for the 13+ age check). Your content: the stories you share in interviews, your memory bank, essay plans, and coaching chats. Billing: handled by Stripe; we store a customer reference and your plan, never your card number. Usage: basic product events and page views through PostHog, tied to your account id, with session recording switched off. Technical logs kept by our hosting providers.
How we use it
To run the product: interviews, the memory bank, essay concepts, and coaching all read your content because that is the product. To process AI requests: relevant content is sent to Anthropic's API to generate Retold's questions and coaching. To bill you through Stripe. To keep the service safe, debug problems, and understand which features help. To send transactional email such as signup confirmation and password resets.
What we never do
We never sell your data. We never share your stories or essays for advertising. We do not use your content to train AI models, and our API agreements with Anthropic do not permit your content to be used for model training.
Who processes data for us
Supabase (database and authentication), Vercel (hosting), Anthropic (AI processing), Stripe (payments), Resend (transactional email), and PostHog (product analytics). Each receives only what its job requires.
Retention, export, deletion
Your content stays until you remove it. You can download everything from Settings (Export my data): a readable PDF, with a machine-readable JSON copy alongside it. Deleting your account permanently deletes your profile, bank, essays, and chats, and cancels any subscription. Backups age out on our hosting providers' schedules.
Children
Retold is for users 13 and older. Users under 18 need the consent of a parent or legal guardian. We do not knowingly collect data from children under 13; if you believe a child under 13 has an account, contact us and we will delete it.
Security
Data is encrypted in transit, access is scoped so every user can reach only their own rows, and secrets never live in the browser. No system is perfectly secure, but we treat your stories like they are ours.
Your rights
Depending on where you live, you may have legal rights to access, correct, export, or delete your personal data. The in-product tools cover all of these, and you can always email us instead.
Changes and contact
Material changes will be posted here with a new effective date and notified in the app or by email. Questions: privacy@retoldbyyou.com. See also the Terms of Service.