Privacy Policy for Narrated
Effective date: 2026-11-03 Last updated: 2026-11-03
Narrated ("we", "us") operates the Narrated mobile application and https://narrated-site.vercel.app (together, the "Service"). This policy explains what we collect, why, and what you can do about it.
Contact us any time at weallquitapps@gmail.com.
1. Information we collect
You give us:
- Account information — no email address and no password. Narrated makes an account for you the first time you open it, identified by a random code kept in your iPhone's Keychain. iOS keeps that code when you delete the app, so reinstalling brings back the same account, and we store only a one-way hash of it. Sign in with Apple is optional: if you use it, we receive the identifier Apple gives us for you, so that a new phone can find your account, and, if Apple shares one, an email address, which can be a private relay address that hides your real one. Your subscription is tied to your Apple ID by Apple and to your account's random id by RevenueCat.
- Content you create in the app — your first name, your age, whether you chose male, female or other, and your answers to the questions in setup and in Go deeper, typed or spoken: your work, your days, the people in your life and the life you want; anything you add to your story later; the stories written from your answers, their audio and covers, and every saved version; your voice recording, if you choose to hear your story in your own voice (see Your voice is biometric information, in §4); and your listening history (plays, listening time and your streak). Your answers can be sensitive. They may touch on your fears, your health, your relationships, your money or your beliefs, and they can name people close to you. Share only what you want in your story, and only what you have the right to share about someone else.
- Support correspondence — anything you send us.
Collected automatically:
- Device and usage data — device model, OS version, app version, language, crash reports, and in-app events (screens viewed, features used). Used to fix crashes and understand which features matter.
- A pseudonymous identifier for analytics. It is not your name, and it is reset when you delete the app.
- Your IP address — every app and website you connect to receives one. Our server uses it to limit abuse, such as how many accounts one address can start, and PostHog works out an approximate country, region and city from it so we can see where Narrated is used. It is never turned into GPS coordinates or a street address, and we never look up who holds it.
- A replay of what you did inside Narrated — the screens you saw and what you tapped, so we can see where the app confuses people. Every text field and your story's text are masked out of every frame. It records nothing outside Narrated.
- Notification and lock-screen tokens — if you allow notifications, a token that lets Apple deliver them to your phone; your daily reminders are scheduled on the phone itself. If you reach the free-trial screen and leave without starting a trial, Narrated puts a card on your lock screen with your name, your story's time horizon and one of your own answers, and may bring it back at 7:00 am on up to three mornings. The answer on the card stays on your phone: our server keeps only a token that lets it ask Apple to show the card again, and your time zone, and deletes both when you start a trial. Anyone who can see your lock screen can read the card, so swipe it away, or turn off Live Activities for Narrated in iPhone Settings, if you'd rather they didn't.
We do not collect: data from Apple Health or any other health app (anything you choose to say about your health in an answer is part of your answers, above), precise location (no GPS and no coordinates, only the approximate area worked out from your IP address, above), your contacts, or your photo library or camera (for example: precise location, contacts, health data, or your photo library, unless a feature you start explicitly asks).
2. Why we use it
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the features you asked for | Performance of a contract |
| Keep the Service secure and prevent abuse | Legitimate interests |
| Fix crashes and improve the product | Legitimate interests |
| Process payments and subscriptions | Performance of a contract |
| Send you notifications you enabled | Consent |
| Comply with legal obligations | Legal obligation |
| Write, read aloud and illustrate your story from your answers, including anything sensitive you choose to tell us | Performance of a contract, and your explicit consent for sensitive information, which you can withdraw by changing your answers, starting over or deleting your account |
| Make and use a model of your voice | Your explicit consent, given in the app before you record |
| Show your story's card on your lock screen before you start a trial, and bring it back on up to three mornings | Legitimate interests; swipe the card away, or turn off Live Activities for Narrated in iPhone Settings |
We do not sell your personal information, and we do not use it for cross-context behavioural advertising.
3. Third parties we share with
We share only what each provider needs to do its job:
| Provider | Purpose | What they receive |
|---|---|---|
| Apple | Payments and subscriptions, Sign in with Apple, and delivering notifications and the lock-screen card | Their own privacy policies apply. For notifications and the card, a device token; never your answers or your story |
| RevenueCat | Subscription status and free trials | Purchase events and your account's random id |
| Cloudflare | Our server, database and file storage, and painting your covers (Cloudflare Workers AI) | Everything stored with your account: your answers, stories, audio, covers, voice recording, listening history and Sign in with Apple identifier, encrypted in transit and at rest. For a cover, only a short description of a scene from your story. Your IP address with each request |
| PostHog | Product analytics and session replay | Pseudonymous events about what you do in the app (screens, taps, plays, whether a trial started), your IP address and the approximate location worked out from it, and replays of your screens with every text field and your story's text masked. Never your answers, your story or your voice |
| Vercel | Hosting this website | Your IP address and browser details when you visit it. Nothing from the app |
| Google (the Gemini API), reached through Cloudflare's AI Gateway, which doesn't log what passes through | Writing your story and its cover description, and asking Go deeper's questions. Google doesn't use what we send to train its models | Your first name, age, answers and anything you add to your story |
| Our voice provider: Google (Gemini's voices), or ElevenLabs when we use it instead | Reading your story aloud in a narrator's voice, and making your voice model if you record one (ElevenLabs) | Your voice recording, if you make one, and the text of each story it reads. The audio it returns is stored with Cloudflare |
| A speech-recognition service | Turning an answer you speak into text | The audio of that answer |
We may also disclose information if legally required, or to protect the rights and safety of our users.
4. AI features
Narrated writes your story, asks Go deeper's questions, paints your covers and reads your story aloud with the help of the outside services in §3. Here is what each one receives for these features:
We ask first. Before your first story is written, Narrated tells you that your first name and answers go to Google and asks your permission. Neither goes to Google until you tap Allow.
- Your story. Your first name, age and answers go to Google's Gemini, which writes the story and a short description of its cover. In Go deeper, it gets your answers so far and the one you just gave, so it can ask the next question.
- Your covers. Only that short scene description goes to Cloudflare Workers AI, which paints the cover. Covers are illustrations, not photographs, and are not meant to show real people.
- Your story read aloud. The story's text goes to our voice provider (Google, or ElevenLabs when we use it), which reads it in a narrator's voice or, if you recorded one, in yours (see Your voice is biometric information, below).
- Spoken answers. If you speak an answer instead of typing it, its audio goes to a speech-recognition service, which turns it into text.
We don't train on what you tell us. We do not use your answers, stories, covers or voice to train any model, and we only use providers whose terms bar them from training on what we send them.
Who can see it. Your answers are the most sensitive thing we hold. They never go into analytics events, logs or error reports, and session replays mask them. The people who run Narrated can technically open everything stored with your account, including your answers, stories, recordings and covers, though we don't plan to.
If you seem to be in crisis. If something you say in Go deeper mentions self-harm, a crisis or abuse, Narrated stops asking questions and shows you where to get help. It is not a crisis service (see the Terms of Service, §6).
What it writes can be wrong. A story is a vision to practise feeling, not a promise of outcomes. Nothing Narrated writes, paints or says is professional, medical, psychological, legal or financial advice.
Your voice is biometric information
Narrated can read your story in your own voice. If you choose that, then once your free trial starts it asks you to read a short line shown on screen for 15 seconds, and saves the recording. Our voice provider makes a voice model from it straight away: a representation of how you sound that lets it read new text in your voice. Reading a line we show you, rather than uploading a recording, helps make sure the voice is yours.
Some laws treat a voice model, sometimes called a voiceprint, as a biometric identifier: among them Illinois's Biometric Information Privacy Act (BIPA), Texas's law on the capture or use of biometric identifiers, and Washington's biometric identifiers law (RCW 19.375). We treat your recording and your voice model as biometric information wherever you live. This section is our written policy for them, and it is public on purpose.
- We ask first. Before Narrated records you, it tells you what the recording is for and asks for your consent. Nothing is recorded without it, and we keep a record of what you agreed to and when. Saying no costs you nothing else: pick one of our narrators instead, and switch between a narrator and your own voice at any time.
- One purpose. Your recording and your voice model are used only to read your own story to you, in your own account. Nobody else can choose your voice: the identifier for your voice model stays on our server and never reaches the app. We never use them to identify you or verify who you are, to speak for anyone else, or to train any model, ours or anyone else's.
- Never sold. We do not sell, lease, trade, or otherwise profit from your recording or your voice model. We disclose them only to our voice provider, which makes and holds the voice model, and Cloudflare, which stores the recording (both in §3), solely to provide this feature to you and only on our instructions, or where the law requires it (for example, a valid warrant or subpoena).
- Protected. We store and send them with at least the care we give the most sensitive data we hold: encrypted in transit and at rest, in storage that is never public, reachable only by our server and the people who run Narrated.
- Yours to end. You can delete your voice at any time in You → Settings → Delete my voice. That withdraws your consent and starts the destruction below.
Retention and destruction schedule. We keep your recording and your voice model only while they serve the purpose above, and we permanently destroy both at the first of these:
- you delete your voice (You → Settings → Delete my voice);
- you delete your account (see §6);
- 3 years pass without you opening Narrated.
When one of these happens, we delete the recording from our storage and have our provider delete the voice model at the same time. Any copy left in a backup is gone within 30 days. Where the law where you live sets an earlier deadline, we meet it. You can ask what biometric information we hold about you, or have it destroyed, by emailing weallquitapps@gmail.com.
5. How long we keep it
We keep account data for as long as your account exists. Analytics and crash data are retained for 12 months. When you delete your account we delete or irreversibly anonymise your personal data within 30 days, except where we must keep records to meet a legal obligation (for example, transaction records for tax purposes). Your voice recording and voice model follow their own schedule, in §4 (Your voice is biometric information).
6. Deleting your account and your data
You can delete your account and all associated data:
- In the app — You → Settings → Delete account, or
- On the web — https://narrated-site.vercel.app/delete-account, or
- by emailing weallquitapps@gmail.com.
Deletion is permanent and takes effect within 30 days.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict processing of your personal data, to object to processing, and to withdraw consent. California residents additionally have the rights described in the CCPA/CPRA, including the right not to be discriminated against for exercising them. EEA/UK residents may lodge a complaint with their local supervisory authority.
Exercise any of these by emailing weallquitapps@gmail.com. We respond within 30 days and never charge for it.
8. Children
The Service is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, email weallquitapps@gmail.com and we will delete it.
9. Security
We use encryption in transit (TLS), encryption at rest, access controls, and the principle of least privilege. No system is perfectly secure; we will notify you and the relevant authorities of a breach affecting your data as required by law.
10. International transfers
We are based in the State of Tennessee, USA and our providers may process data in other countries. Where data leaves the EEA/UK we rely on Standard Contractual Clauses or an adequacy decision.
11. Changes
We will update this page and change the "Last updated" date. Material changes get in-app or email notice before they take effect.
12. Contact
Narrated
weallquitapps@gmail.com