Privacy Policy

Last Updated: 18 February 2026

1. Who We Are

Weave Adventures ("we", "us", or "our") is the data controller responsible for your personal data. We are a company registered in the United Kingdom.

This policy explains how we collect, use, and protect your data when you use our storytelling platform. We take the privacy of our users—especially children—extremely seriously and have designed our services to comply with the UK GDPR and the Children's Code (Age Appropriate Design Code).

If you have any questions, please contact us at: support@weaveadventures.com

2. Data We Collect

We collect data to provide you with our service. This includes:

A. Adult Account Holder Data (The Parent/Guardian)

  • Identity Data: Your email address and password (stored securely via Lovable AI Cloud).
  • Financial Data: Payment card details (processed securely by Stripe; we do not see or store full card numbers).
  • Technical Data: IP address, browser type, and device information.

B. Child Profile Data (Provided by You)

To generate age-appropriate stories, we ask you to provide:

  • Name/Nickname: A name used to tag stories (e.g., "Leo"). Advice: You do not need to use a real legal name; a nickname is sufficient.
  • Exact Age: We collect the general age of the child to ensure the AI generates content with the correct reading level, vocabulary, and safety filters. Specific dates of birth are not requested.
  • Story Preferences: Interests and ideas you input for the stories.

C. Usage Data

  • Story Content: The prompts you enter and the stories generated.
  • Analytics: We use Lovable to track how our app is used (e.g., which features are most popular) to improve the experience.

3. How We Use Your Data

We only use your data when the law allows us to. Most commonly, we use it for:

PurposeType of DataLegal Basis
To provide the Service (Log you in, process payments)Identity, FinancialPerformance of Contract
To generate Stories (Create personalised content)Child Profile, Story ContentPerformance of Contract
To ensure Child Safety (Apply correct content filters based on age)Age in yearsLegal Obligation & Legitimate Interest
To improve our App (Analytics)Technical, UsageLegitimate Interest
To send you Service Emails (Invoices, password resets)IdentityPerformance of Contract
To send Marketing (New features, offers)IdentityConsent (You can unsubscribe anytime)

4. Children's Privacy & Safety

We have designed our service with children's safety as a priority:

  • Parental Control: The account holder must be an adult (18+). The parent inputs the child's details and controls the generation process.
  • Data Minimisation: We only ask for the data strictly necessary to generate the story (Age and Name).
  • No Profiling: We do not use the child's profile data for advertising or behavioural profiling.
  • Content Filtering: We use the child's age to instruct our AI models to filter out inappropriate content.

5. Sharing Your Data (Third Parties)

We do not sell your data. We share it only with trusted third-party service providers ("Processors") who help us run our app.

ProviderPurposeLocation
Lovable AI CloudSecure database hosting & authenticationUK/EU (Standard)
LovableApp infrastructure & analyticsUSA
Google (Gemini/Vertex AI)LLM technology to generate text and imagesGlobal
StripePayment processingUSA/Global

Note on AI: When you generate a story, your prompt and the child's age/name are sent to Google's LLM to create the text.

6. International Transfers

Some of our partners (like Lovable and Stripe) are based outside the UK/EEA (specifically in the USA). Whenever we transfer your data outside the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

  • Using specific contracts approved by the UK Government (the International Data Transfer Agreement).
  • Ensuring the provider is certified under the UK-US Data Bridge.

7. Data Retention

  • Active Accounts: We keep your story library and profile data for as long as your account is active so you can read your stories.
  • Inactive Accounts: If you cancel your subscription and do not log in for six (6) months, we reserve the right to delete your account and all associated data to minimise data storage.
  • Your Right to Delete: You can delete your account and all data instantly at any time via the settings menu.

8. Your Legal Rights

Under the UK GDPR, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Ask us to correct wrong data (e.g., update a child's age).
  • Erasure: Ask us to delete your data ("Right to be forgotten").
  • Withdraw Consent: Unsubscribe from marketing emails at any time.

To exercise any of these rights, please email us at support@weaveadventures.com

9. Cookies

We use essential cookies to keep you logged in. We also use analytics cookies (Lovable) to help us understand how the app is used. You can choose to accept or decline analytics cookies via our cookie banner.

Contact Us

If you have questions about this Privacy Policy, please contact us at: support@weaveadventures.com