Privacy Notice

Last updated: 17 October 2026

Savta Story is made for children, so we collect as little as we can. This notice explains what we keep, why, who else sees it, and your rights.

1. Who is responsible

The controller of your personal data is Ishai Ravid - Writer, an independent business registered in Israel, trading as Savta Story. For anything about privacy, write to [support e-mail: to fill in in Santa's Ledger].

2. What we keep, why, and on what basis

A device identifier. A random code kept in a cookie, so each device sees its own bookshelf and its stories left. It contains no name or contact details. Why: to provide the Service (contract).
Stories. What the child asked for in each story, as text (as Santa understood it), and each page's characters, drawings and plans, so the book can be read again. Why: to provide the Service (contract).
Voice. When the child talks, the recording is sent to Google only to turn the words into text. We don't keep recordings. Why: to provide the Service (contract).
Purchases. Lemon Squeezy, our Merchant of Record, collects the payment details. We keep the order number, the amount and the device the stories are for; Lemon Squeezy also tells us the buyer's name and e-mail address, which we don't keep. We never see card details. Why: to deliver the stories you bought, to help with refunds and questions (contract), and to keep accounting records (legal obligation).
Photos. Where the Service offers making a hero from a photo (for now only in Israel, and only after a grown-up allows it), the photo is sent to Google to draw a cartoon hero and is never kept; only the drawing is.
Technical information. The type of device and browser, screen size, language, time zone, an approximate country and city, and a scrambled code made from the network address (never the address itself). The network address is used only for a moment, to stop overload. Why: security, preventing abuse, the daily story limits and simple statistics (legitimate interests).
Messages. What you write to us, and your e-mail address, to answer you (legitimate interests).

3. Children

Savta Story is for children to use with a parent or another responsible adult, and only adults buy. We never ask children for their name, address or other contact details. If a child says something personal inside a story, it may be saved in the story's text: any book can be deleted at any time (drag it to the shredder on the bookshelf), and we will delete all of a device's books on request. Voice recordings are used only to understand the child's words and are not kept. If you believe we hold a child's personal information without a parent's consent, contact us and we will delete it.

4. Who else receives data

Google (the Gemini AI): what the child says and the state of the story, to understand speech, write the story, draw and speak.
Lemon Squeezy (Lemon Squeezy, LLC, our Merchant of Record): payments, taxes, receipts and refunds, under Lemon Squeezy's own privacy notice.
Railway (our servers, in the European Union) and Cloudflare (network security and delivery).
Our professional advisers, such as our accountant, and authorities when the law requires it.
A book you choose to send as a link can be opened by anyone with the link; the shared copy never includes the child's own words. We don't sell personal data and don't use it for advertising.

5. International transfers

We are based in Israel, which the European Commission recognises as giving adequate protection to personal data. Our servers are in the European Union. Google and Cloudflare may process data in the United States and elsewhere; they do so under the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

6. How long we keep it

Books: until you delete them, or until you ask us to.
Device information: until you ask us to delete it.
Purchase records: as long as tax and accounting law requires (in Israel, usually 7 years).
Messages: as long as needed to answer and follow up.

7. Your rights

You may ask to see the personal data we hold about you or your child, to correct it, to delete it, to restrict or object to its use, to receive it in a portable form, and to withdraw consent where we rely on consent. You may also complain to a data protection authority: in the EU or the UK, the authority where you live; in Israel, the Privacy Protection Authority. Write to [support e-mail: to fill in in Santa's Ledger]; we answer within one month.

8. Security

The site is encrypted (https), access to stored data is limited to the business owner and those who help run the site, and we keep what we store to a minimum.

9. Cookies

We use only the cookies the Service needs: the device identifier, which keeps your bookshelf on this device (and, only if the site is ever set to ask for an access code, a cookie that remembers that it was given). Your language choice is kept in your own browser. We use no advertising or tracking cookies. Lemon Squeezy's checkout page may use its own cookies to process your payment.

10. Changes

If we change this notice, the new version will appear on this page with its date.