Privacy
Short version: what you type about your child is used once, to write your sample story, and we don’t keep it. The details are below.
Who is responsible
Tarek Sadi, Kopischstr. 1, 10965 Berlin, Germany · hello@tarek-sadi.com
Visiting the site
The site is hosted by Vercel Inc. (USA). Like any web host, Vercel processes your IP address and basic request data to deliver the page and protect it from abuse (including a rate limit per IP address). Legal basis: Art. 6(1)(f) GDPR, our interest in a secure, working site. Fonts are served from our own host; nothing is loaded from Google.
Usage statistics
We use PostHog (PostHog Inc., servers in the EU) to count how people move through the page: which step they reach, whether the sample played, whether they went to checkout, and the age, topic and interest they picked. We don’t set cookies or store an identifier on your device, so we can’t recognise you on a later visit. Your IP address is discarded, and we never record what you type or your screen. Legal basis: Art. 6(1)(f) GDPR, our interest in understanding which parts of the page work.
Your sample story
When you describe what your child finds hard and what they love, that text is sent to OpenAI (USA) to check it is safe, understand it and write the story. The finished story text is sent to ElevenLabs (USA) to turn it into audio. We don’t store what you type on our servers. We do keep the story opening we wrote from it (the generated text, the hero’s invented name and the narrator, never your words) with Supabase (Supabase Inc., servers in Frankfurt, EU), so your first story can continue the one you heard; if no payment references it, it is deleted after 30 days. Your answers stay in your browser’s session storage and are gone when you close the tab. OpenAI may keep API data for up to 30 days to monitor abuse. Legal basis: Art. 6(1)(b) GDPR, providing the sample you asked for, and your consent (Art. 6(1)(a), Art. 9(2)(a)) for anything sensitive you choose to tell us.
Subscribing
Payments are handled by Stripe Payments Europe Ltd. (Ireland). Stripe processes your email and payment details. We receive your email address, the payment status and a random reference to the story opening you heard (or, if we could not save that opening, a short reference with your child’s age, the topic and the interest you picked, for example “getting-dressed_3_trains”), so we can write your first story and email it to you. Legal basis: Art. 6(1)(b) GDPR. We keep payment records for as long as tax law requires (up to 10 years).
Emailing us
If you write to us, for example to hear when Ember is ready for your child’s age, we keep your email and message to answer you, and delete them when you ask. Our email is hosted by Google Workspace (Google Ireland Ltd.). Legal basis: Art. 6(1)(b) and (f) GDPR.
Transfers outside the EU
Vercel, OpenAI, ElevenLabs, PostHog and Supabase are based in the USA; PostHog and Supabase store our data in the EU. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, and on the EU Standard Contractual Clauses otherwise.
Your rights
You can ask for access to your data, and have it corrected, deleted, restricted or exported. You can object to processing and withdraw consent at any time. Email us at the address above. You can also complain to a supervisory authority, for example the Berliner Beauftragte für Datenschutz und Informationsfreiheit.
Last updated 25 September 2026.