What we hold, and what we don’t.

StoryBreak is made by The School of Play and is used by children. This is the whole policy. If something is not listed here, we do not collect it.

With no account, nothing about a child leaves the device.

That is the default and it is how the app ships: no account, no sign-in, no server. Books are written on the phone, which is also why the app works with no internet at all. Signing in is a choice a family makes when they want their books on a second device or on a computer — and the section below says exactly what changes when they do.

What changes when you sign in

An account is optional and belongs to an adult. You need one to read your child’s books on a computer, to move them to a new phone, or if a school has provided access.

The app on its own has never needed one and still does not.

Goes to our server

Your child’s first name, their age as a single number, their reading stage, the interests and Cast you picked, the stories made for them, and the reading log — so they reach your other devices and the website.

Still never collected

A surname, a date of birth, a school, a photograph, a voice recording, a location. The server refuses these: a field that looks like a surname or a birthday is rejected rather than stored, and that check is the only place the promise can actually be kept.

Where it lives

Australia. A PostgreSQL database in Sydney.

The adult account

What we hold about you

An email address: To send a six-digit sign-in code, and for nothing else. There is no password to lose and we send no marketing from it.
A device identifier: Generated at random by the app or the browser. Not Apple’s advertising identifier and not your device’s name. It exists so you can sign a lost phone out.
Your plan: Which subscription or access code you have, when it expires, the app version, and when the app last checked in.
Nothing else: That is the complete list. We do not sell it, share it with advertisers, or use it to build a profile of anybody.

Sub-processors

The companies that touch any of this

Neon: The database, in Sydney (ap-southeast-2). Holds everything in the two tables above, for accounts that have one. Australian data residency.
Vercel: Hosts this website and the API.
Resend, and Amazon SES: Sends the sign-in code. An adult’s email address passes through them, and their sending region is Tokyo — so that one address leaves Australia and nothing about a child does. The email carries no tracking pixel and no link.
Apple: Subscriptions. Payment details go to Apple and never to us; we can see that a subscription is active and nothing else about you.
That is all of them: No analytics SDK, no advertising SDK, no third-party script in the reading screen, and no chat.

Deleting everything

In the app, under You, one tap removes every story, every profile and the whole reading log from the device immediately.

If you have an account, email us and we will delete the server copy — the children, the stories, the reading log, your email address and the device records — within 30 days, and sooner if you ask.

Schools

A school never sees a child’s books, sentences or titles. It sees class counts, and a class of fewer than five children reports nothing at all, because an aggregate over a small group is not anonymous. A parent puts their own child in a class with a code; a school cannot reach into a family’s account. Detail about one named child requires that parent’s explicit consent, recorded with a date and withdrawn in one tap. The rules in full.

Printing and sharing

Books are made into PDFs on your own device. If you print one or send it to a teacher, it goes wherever you send it and does not pass through us.

Children’s privacy

StoryBreak is designed against the Australian Children’s Online Privacy Code and is rated 4+. Accounts belong to adults; children do not have one and cannot make one. If you believe we hold information about a child that should not be here, tell us and we will remove it.

Changes

If this policy changes we update the date at the top. If a change means we start collecting something new, we will say so before it happens — which is what this version is: sync now exists, so the section about what leaves the device has been rewritten rather than quietly left as it was.

Contact

A person reads these: hello@theschoolofplay.co.
The School of Play, Australia.