Our Chapters Ltd
Last updated: 9 August 2026 · Version 6.1 (interim, pending final legal review)
Our Chapters is an app that lets parents capture and keep the memories of their child’s life, and turn them into a printed book. We know you are trusting us with information about your family, including your children. Protecting that information is the most important thing we do, and it is built into the product rather than added on afterwards. This policy explains, in plain English, what we collect, why, the legal basis for it, who we share it with, how long we keep it, and the rights you have.
Our Chapters Ltd is the data controller for your personal information — meaning we decide why and how it is processed. We are a company registered in England and Wales (company number 17192759), registered office 46 Grasscroft, Northampton NN2 8TR. We are registered with the Information Commissioner’s Office (ICO), the UK’s data protection regulator, under registration C1922794.
For any privacy question or to exercise your rights, contact us at info@ourchapters.co.uk.
We only collect the information needed to provide the service.
| Information | Why we use it | Legal basis |
|---|---|---|
| Parent account details (name, email, encrypted password) | To create and secure your account and contact you about the service | Performance of a contract |
| Child details (first name, date of birth or due date, profile photo) | To build your child’s timeline and provide the core features | Legitimate interests, plus explicit consent for any special-category content (see section 5) |
| Memories you create (text, photos, videos, voice notes) | To store, display and back up your family’s memories, and generate your printed book | Legitimate interests, plus explicit consent for any special-category content (see section 5) |
| Subscription & billing status | To manage your plan and entitlements (card details are handled by our payment provider, not stored by us) | Performance of a contract |
| Security & technical data (e.g. IP address, device and login information) | To keep accounts secure, prevent fraud and abuse, and keep the service running | Legitimate interests (security) |
| Marketing preferences | To send you updates you have opted in to | Consent |
| Support messages | To resolve issues | Legitimate interests |
The legal bases above reflect data protection advice we have taken: legitimate interests for your child’s ordinary data, explicit consent for any special-category content, and contract for your account, subscription and book orders. The wording of this policy remains in final review before public launch.
We do not sell your data, we do not profile your family, and we do not use automated decision-making with legal or similarly significant effects. We do not currently use any artificial-intelligence processing of your content; if we introduce optional AI writing features in future, we will update this policy and ask for your separate, explicit consent before any such processing takes place.
3.1 Supabase as our storage provider. Core app content — including photos, videos, voice notes and text memories — is stored in Supabase, a secure managed platform built on PostgreSQL and private object storage. The production project is hosted in the EU (Ireland). Supabase provides encryption at rest and in transit, role-based access controls and row-level security. We review its security posture regularly.
3.2 Location and metadata stripping. Photos are re-encoded before upload to remove EXIF, GPS and other embedded metadata. Uploaded MP4 and MOV videos pass through a server-side metadata-removal step; unusual formats or dedicated timed-metadata tracks may not be fully covered, so we minimise accepted formats and keep this control under review. Voice recordings made in the app do not intentionally add location metadata. We only store a place where you choose to type one into a memory.
3.3 Staff access. Our ordinary support and admin tools do not provide a way for staff to browse, view or play your photos, videos, voice notes or memory text. Content is normally accessed only by authorised signed-in family members and automated services. A very small number of authorised personnel may have restricted infrastructure-level access where necessary to fulfil a verified rights request, investigate security or safeguarding concerns, perform essential maintenance, or comply with law. Such access is controlled and operationally reviewed. Content you select for a printed book is also sent automatically to Prodigi for printing.
3.4 Security practices. We follow industry-standard measures including encryption in transit (HTTPS/TLS) and at rest, least-privilege access, regular review of access logs, secure development practices, and ongoing DPIA review. We also follow the principles of the UK’s Children’s Code: high privacy by default, data minimisation, no behavioural advertising, no profiling, and no manipulative “nudge” or streak techniques.
No online service can be guaranteed completely secure. If you ever believe your account has been compromised, contact us immediately at info@ourchapters.co.uk.
Our Chapters is designed for parents and guardians to record their own children’s memories. Accounts may only be created by adults aged 18 or over. By using the service, you confirm that:
Children’s own rights. Children have data-protection rights at every age. Age 13 is relevant in the UK to when a child may generally give their own consent to an online service; it is not the point at which their rights begin. As a child matures, we will take account of their views, capacity and best interests. If a child contacts us, we will handle the request in an age-appropriate way and may verify identity or parental responsibility where necessary.
We process your child’s ordinary personal data on the basis of legitimate interests (Article 6(1)(f) UK GDPR): it is necessary to organise and store the private family record you have chosen to create, and our safeguards are designed so those interests do not override the child’s rights. We rely on contract for your adult account, subscription and book orders, and legal obligation for records we must retain.
Content may reveal special-category data, for example health, religion or biometric information. For that processing we rely on a parent’s explicit consent (Article 9(2)(a)), asked for on a separate screen and recorded with its date, method, version, wording and user type.
Withdrawing consent. A parent can withdraw in Settings > Privacy and consent. The app immediately blocks new special-category-capable uploads and removes that parent’s affected contributions. If no other parent with parental responsibility has active consent for the child, affected timeline content and the child profile photo are removed as well. Storage deletion is queued and retried automatically. We retain a minimal, immutable record of the consent and withdrawal where required to demonstrate compliance. A parent may later give fresh consent, but deleted content is not restored.
Our Chapters supports two parents contributing to a child’s timeline.
Ownership. Each parent owns the memories they personally create, and one parent cannot edit or delete the other’s contributions.
Account holder. The parent who created the child profile is the “account holder” for subscription and administrative purposes.
Separation. If parents separate, either parent may use the Create Separate Account feature to create a new account, transfer a copy of the memories they personally created, and continue their own timeline independently. This does not duplicate the full child profile and does not remove the other parent’s contributions.
Family Pack contributors. Invited non-parent family contributors provide the general legal acknowledgements only; they do not consent on a child’s behalf. If an invited contributor is a parent with parental responsibility, they follow the separate parent-consent path. The account holder can remove contributor access.
We do not mediate disputes. We only restrict access where required by law (for example, a court order) or where necessary to protect someone’s safety. We do not adjudicate family-law matters.
If someone featured in your content contacts us, we will assess the request, may ask you to edit or delete the content, and may restrict access where required by law. We do not disclose your memories unless legally required to.
We use a small number of trusted processors who act only on our written instructions and only handle the data needed to perform their role. They are not permitted to use your data for their own purposes.
| Provider | What they handle |
|---|---|
| Supabase | All data storage (text, photos, videos, voice notes, metadata) |
| Apple, Google and RevenueCat | In-app subscriptions, receipts and entitlement status; they do not receive memory content from us |
| Stripe | Payments for physical printed books; card details are handled by Stripe and are not stored by us |
| Resend | Transactional account, invitation, order and operational emails |
| Netlify | Hosting our public website and legal pages |
| Google Workspace | Our business email, used when you contact us |
| Prodigi | Printing and posting your book. Prodigi keeps order, invoice and production records only for as long as needed for legal, tax, dispute and quality purposes, then deletes them |
| Sentry | Error logging and crash reporting. The app disables default PII collection and redacts sensitive fields before sending diagnostics. Sentry does not receive photos, videos, voice notes or memory text from our intended logging flows. A source IP address may be processed at the transport layer; organisation-level IP storage prevention is being enabled and verified before public launch |
We do not sell your data to anyone. If our business is ever sold or transferred, we will ensure your information remains protected under terms consistent with this policy.
Our storage provider, Supabase, hosts core app content in the EU (Ireland), but uses infrastructure sub-processors, including Amazon Web Services and Google, to run its platform, some of which may process data outside the UK. Our other processors, such as Stripe and Sentry, may also process limited data outside the UK.
Printed books. When you order a book, the finished book file — containing the memories, photos and text you selected — and delivery details are sent to Prodigi and may be handled by a printing partner in its global network outside the UK, for example in the United States or Australia.
Where data is transferred outside the UK, we use an applicable adequacy regulation or approved contractual safeguards such as the UK International Data Transfer Agreement, the UK Addendum to standard contractual clauses, or the UK Extension to the EU–US Data Privacy Framework.
We keep memories while your account remains open. A deleted memory is recoverable in the app for 30 days and is then permanently deleted when its final contribution expires. Account deletion removes content from active systems promptly; object deletion is queued and retried automatically. Encrypted database backups expire through the normal backup cycle, currently within 30 days. Secure data-export archives expire after one hour. Print-ready book and spine files remain in our private storage for up to 30 days after submission so Prodigi can retrieve them and resolve fulfilment issues; account deletion or consent withdrawal removes any copy still held in our active storage. Prodigi retains its downloaded artwork copy for up to 30 days for fulfilment and resubmission. We retain basic billing and transaction records for up to 7 years for tax and accounting obligations, and retain minimal consent evidence where required to demonstrate compliance. Security and diagnostic records are kept for limited operational periods.
We may ask for reasonable information to verify your identity before fulfilling a rights request. For children turning 13, we may request age-appropriate confirmation that they understand their rights.
If an account holder dies, we may grant access to a verified next of kin or legal representative, and may require documentation before doing so. We will not disclose memories without appropriate authority, and we will respect that each parent owns only the memories they personally created.
Under UK data protection law you may have the right to access your data, correct inaccurate information, erase data, receive a portable copy, object to or restrict certain uses, and withdraw consent where we rely on it. In Settings you can download a private ZIP containing structured account data and the real photos, videos, voice notes and profile photos within the export scope; its signed link expires after one hour. If an archive is too large or you need a broader subject-access response, contact info@ourchapters.co.uk and we will complete it securely. We normally respond within one month. You can complain to the ICO at ico.org.uk.
Our website uses essential cookies and, where you consent, basic analytics. We do not use advertising or cross-site tracking cookies. Where we use any non-essential cookies, we ask for your consent through a cookie banner first, and you can change your choice at any time.
We only send marketing emails if you opt in. You can unsubscribe at any time using the link in any marketing email, or by contacting us. Even if you opt out of marketing, we may still send you essential service messages (for example, to confirm an account change or a book order).
We may change providers or introduce optional features in future. Before any material change to how children’s data is processed, we will update this policy and our DPIA, notify affected users, and request a fresh acknowledgement or consent where the law requires it. We will not treat silence or mere continued use as explicit consent.
If you have any question about this policy, or want to exercise any of your rights, please contact us at info@ourchapters.co.uk.