Your story is yours. Only you can download your videos, your book and your family website. We don’t share them with anyone, and there are no share links.
We don’t sell your information, and we don’t use it for advertising.
You can delete anything, any time — ask Rosa, or email us.
Tell Rosa (thestoryofmy.life) is run by GRAC, which also runs grac.social. GRAC (“we”, “us”) is the data controller for the personal information described here, under UK GDPR and the Data Protection Act 2018.
GRAC is the trading name of [Company name] Ltd, a company registered in England and Wales (company number [company number]), registered office [registered address].
Write to us at hello@thestoryofmy.life about anything on this page, including any request about your information. We aim to reply within one month, as the law requires.
Your sign-in is shared with grac.social: the same account works on both. This page covers Tell Rosa. GRAC’s privacy policy covers the rest of grac.social.
What we keep
Your account: your email address, and your name and picture if you sign in with Google.
Your conversations with Rosa: the sound of your voice, and the words, written down (a transcript). If you type instead of talking, what you type.
The free trial’s hour: a voice recording of your hour with Rosa, kept for you. During the trial you don’t see or hear it — what you get is the chapter written from it; the recording is there for you if you carry on with a full story, and it is deleted with your account, or sooner if you ask.
Recordings on camera: your picture and voice, only when you choose to record with the camera on.
Rosa’s notes: so she can remember you — the people, places and stories you’ve mentioned, a short summary of your conversations, and the chapters you plan.
Photographs and anything you email in. We remove the hidden location details from photographs before we store them.
What we make for you: your videos, your book and your family website.
Other people: if someone else in the room takes a turn at the microphone, their name, how they’re related, and what they say. If you keep a story for someone else — a parent, say — what you tell us about them.
Technical details: your internet (IP) address, browser and device; when you sign in; error reports; how quickly pages load; and which pages and features are used — never what you say. If something goes wrong on a page, the error report can include a replay of the screen with every word hidden and all pictures and video blocked out.
Usage amounts: how much talking time and behind-the-scenes work your account has used, as numbers only, so we can run the free trial and keep an eye on our costs.
If you ask to hear when stories go on sale: your email address, whether you said it would be a gift, and the country you asked from (never a more exact location). You don’t need an account for this.
Private things, and other people
Life stories often touch on health, religion, politics or sexuality — what the law calls special category data. We handle it only on the basis of your explicit consent, which you can withdraw at any time by deleting it or closing your account.
Please take care with other people’s details. Avoid things that would identify someone — children’s full names, addresses, schools — without their agreement. You can also ask Rosa to keep someone’s name out of it: from then on she says something like “my brother” instead, and so does everything written or made from your story (a recording already made still has the name).
Why we use it, and the law
The law asks us to name a reason (a “lawful basis”) for each thing we do with your information:
Running your account and the service you asked for — the conversations, Rosa’s notes, your videos, book and website, and the emails that go with them — such as sign-in links, a welcome, a note when a recording is ready, and a reminder of a conversation you agreed to. Basis: our agreement with you.
Recording on camera. Basis: your explicit consent, which you give on screen before the camera starts.
Special category details in your story. Basis: your explicit consent, which you can withdraw at any time.
Keeping the service working and safe — fixing errors, measuring speed, seeing which features are used, and preventing misuse. Basis: our legitimate interest in a working, safe service. You can object at any time (see Your rights).
Telling you when stories go on sale, if you asked us to. Basis: your consent — ask us to take you off the list at any time, or use the unsubscribe link in the email. Either way we delete your address.
Keeping records the law requires, and answering lawful requests. Basis: a legal obligation.
Who can see your story
You. Only the account holder can download videos, the book or the website. If you want your family to have them, you download them and pass them on yourself.
Anyone taking a turn at the microphone hears the conversation while they’re there, but gets no way in afterwards. Before they start, the screen tells them that what they say becomes part of your story, and that you keep the recording.
Our staff. Our staff tools don’t show your recordings, or your conversations word for word. One tool, for a very small number of senior staff, shows a summary of how a story is going — the kind of notes Rosa keeps, such as names, places and which parts of a life have come up — with any names you’ve asked her to leave out kept out.
The companies that help us, listed below, only to run the service for us.
No one else — unless the law requires it, or it’s needed to protect someone’s safety.
The companies that help us
We don’t sell your information, and we don’t share it for advertising. These companies handle it on our instructions, only to run the service:
Vercel — hosts the website, stores the raw recordings and photographs, measures how quickly pages load, and passes requests on to our AI providers.
Neon — the database holding your account, the written words and Rosa’s notes — and, in London whatever region you choose, a copy of any email you send us, encrypted, until a year after we have finished answering it.
Mux — turns recordings into finished videos and stores them.
Anthropic — the AI behind Rosa’s questions and notes, descriptions of your photographs, the writing in your book, and the first draft of our reply when you email us.
OpenAI — makes a search index of what you’ve said, so Rosa can find something you told her before.
Inworld and Cartesia — Rosa’s voice, and turning what you say into written words.
Google — sign-in, if you choose Google.
Paddle — sells stories and more time once they’re on sale as our reseller: it takes your payment details, sends your receipt and handles the tax. We see your email, name, country and what you bought, never your card details.
Resend — sends sign-in links and emails about your story and our replies to your emails, keeps the list of people waiting to hear when stories go on sale, and receives anything you email in, and a copy of what you write to us so we can answer it.
Zoho — the inbox for hello@thestoryofmy.life, so anything you write to us there, and our replies. Kept in its EU data centre.
Upstash — short-lived counters, and a queue for work done in the background.
Sentry and Axiom — error reports and service logs.
Some of these companies are based outside the UK, mainly in the United States. When your information goes abroad, we rely on the safeguards UK data protection law allows — the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or a finding that the country protects data adequately. Ask us if you’d like the detail for a particular company.
How long we keep it
Your videos, photographs, words and notes stay until you delete them or close your account. We deliberately don’t delete them on a schedule — the point is that they last.
One exception, for videos only. When a story’s time is up and it isn’t kept (with Keep, or more time), its camera videos are deleted — never sooner than 60 days after the time is up. We email you twice first, so you can download them: two weeks before the time is up (or straight away, if it’s already up), and again at least a week before the videos go. Your words, your book, your photographs and any voice-only recordings are never deleted for this.
Two things tidy themselves away. If you record a part twice and choose one, the other take goes after seven days. And the raw sound or video of a conversation you walked away from — left untouched for a week and never saved as a recording — is deleted a month after that. What you said is kept, in its transcript.
Deleting a video (“I have my copy, please delete”) removes its video files, usually overnight. Its written transcript stays until you close your account. To have something Rosa remembers removed, ask her to forget it — it’s deleted properly, not hidden.
Closing your account (ask Rosa and she’ll show you how, or email us) deletes everything here: recordings, photographs, words, notes, and every story you keep. A few things remain: your sign-in for grac.social — tell us if you’d like that deleted too — the usage amounts above, and any hours of conversation you were given or bought, so they’re still yours if you come back. These are numbers only, and none of your words. If you delete your whole account, we remove or anonymise your personal information within 30 days, apart from anything the law makes us keep.
Technical logs and error reports — typically 90 days.
“Tell me when it’s ready” addresses — until we’ve sent that one email, or until you ask us to remove yours, whichever comes first.
Cookies and your device
We use a few strictly necessary cookies and similar storage, and no advertising or tracking cookies:
A secure sign-in cookie that keeps you signed in, and a short-lived one that protects the sign-in form.
Your preferences, kept in your browser — things like text size, captions, and that you’ve read our note about this being an early version.
Only if you choose it: pieces of a recording kept on your own device for up to a day, until they’ve safely reached us — so nothing is lost if the connection drops.
Because these are needed for the service you’ve asked for, the law doesn’t require a cookie banner for them. You can clear cookies in your browser, but you’ll be signed out.
Keeping it safe
Everything travels encrypted (HTTPS), and our database is encrypted.
The words of your story — transcripts, notes, photo captions — are also locked with a key of their own for your account.
We never store passwords: you sign in with an emailed link or with Google.
Hidden location details are removed from photographs.
Access to our systems is limited to those who need it.
No online service can promise perfect security. If a breach put your rights at risk, we would tell you, and the Information Commissioner’s Office, as the law requires.
Children
Tell Rosa is for adults. You must be 18 or over to make an account. If we learn we hold an account for someone under 18, we delete it and its information.
Your rights
Under UK GDPR you have the right to:
See a copy of the information we hold about you.
Correct anything that’s wrong.
Delete your information (the “right to erasure”).
Restrict or object to what we do on the basis of our legitimate interests.
Take it with you. You can download your videos, transcripts, book and website yourself at any time; for anything else, ask us.
Withdraw your consent at any time, where we rely on it. This doesn’t undo anything done before.
To use any of these rights, email hello@thestoryofmy.life. It’s free, and we’ll reply within one month.
If you’re unhappy with how we’ve handled your information, you can complain to the Information Commissioner’s Office (ico.org.uk, helpline 0303 123 1113). We’d be grateful for the chance to put things right first.
Changes to this page
We’ll update this page as the service changes. The date at the top always shows the current version. If a change makes a real difference to your rights, we’ll tell you directly rather than expect you to re-read it. Our terms explain the rest of our agreement with you.