Privacy Policy

MyKahaani is a family memory book service operated by MyKahaani (“we”, “us”, “our”). We help families collect and preserve the stories, recipes, and memories of their loved ones in a beautiful, shareable book.

If you have questions about this policy, email us at hello@mykahaani.com.

We collect only what’s needed to run the service:

• Account information — your email address when you sign up or sign in.
• Family member details — names and phone numbers you add to your book so we can send them story prompts via SMS.
• Stories and memories — text, audio recordings, and photos that storytellers submit through their personalised book link.
• Usage data — standard server logs (IP address, browser type, pages visited) retained for up to 90 days for security and debugging.

We do not collect payment card details directly — payments are processed by Stripe, who have their own privacy policy.

• To create and deliver your family memory book.
• To send story-prompt SMS messages to family members you invite.
• To generate PDF exports of your book on request.
• To send you transactional emails (sign-in links, order confirmations).
• To improve the service — aggregated, anonymised usage patterns only.

We will never use your family’s stories or photos for marketing, AI training, or any purpose beyond delivering the service to you.

When you add a family member’s phone number, they receive an SMS with a personalised link to submit their stories. Message frequency is typically once per week per active book. Standard message and data rates may apply. Family members can reply STOP at any time to opt out of further messages.

SMS messages are sent via Twilio. Phone numbers are never shared with any other third party for marketing purposes.

All data is stored on Supabase (hosted on AWS infrastructure in the United States). Files — audio, photos, and documents — are stored in Supabase Storage with access controls that prevent public listing. Book links use a unique, unguessable token; they are not indexed by search engines.

We use HTTPS for all data in transit. Passwords are never stored — we use magic-link email authentication only.

We share data only with the following service providers, and only as needed to operate MyKahaani:

• Supabase — database and file storage
• Twilio — SMS delivery
• Stripe — payment processing
• Vercel — hosting and edge infrastructure
• OpenAI — generating story titles from submitted text (text content only; we use the API in zero-data-retention mode where available)
• Browserless — headless Chrome for PDF generation

We do not sell, rent, or trade your personal data. Ever.

You can, at any time:

• Access — request a copy of all data we hold about you or your family.
• Delete — request deletion of your account and all associated data, including stories and media files.
• Correct — ask us to correct inaccurate information.
• Opt out of SMS — reply STOP to any message, or email us to remove a family member’s number.

To exercise any of these rights, email hello@mykahaani.com. We will respond within 30 days.

We retain your data for as long as your account is active. If you delete your account, all personal data and uploaded content is permanently deleted within 30 days. Aggregated, anonymised statistics may be retained indefinitely.

MyKahaani is intended for adults. We do not knowingly collect personal data from children under 13. If you believe a child has submitted data without parental consent, please contact us and we will delete it promptly.

If we make material changes to this policy, we will notify account holders by email at least 14 days before the changes take effect. The effective date at the top of this page will always reflect the most recent version.

MyKahaani
hello@mykahaani.com