Last updated: November 5, 2026
Who we are
Step into, LLC provides StepInto Storytime and is the data controller for personal data collected through it. This means we decide how and why your data is used.
Data we collect and why
- Account details (grown-up’s name, email, sign-in credentials, Google profile photo if you use Google sign-in, uploaded profile photo) — to create and run your account. Legal basis: contract.
- Reading progress and preferences (chapters, listening positions, sound settings, saved wonders) — to provide the Service when “Remember” is on. Legal basis: contract.
- Membership status (plan, renewal dates; no card numbers) — to give access to paid chapters. Legal basis: contract.
- Invitations you send (invitee email) — to share access. Legal basis: legitimate interests.
- Technical data (IP address, device and browser type, error logs) — for security, fraud prevention and fixing problems. Legal basis: legitimate interests.
- Support messages — to help you. Legal basis: legitimate interests.
We do not knowingly collect personal data from children. Accounts belong to grown-ups.
Who we share data with
- Service providers who host and run the Service (hosting, database, authentication, email).
- Paddle, our Merchant of Record, for selling memberships, subscription management, payments, tax compliance and invoicing.
- Professional advisers such as lawyers and accountants.
- Authorities where required by law.
We do not sell your personal data.
How long we keep it
We keep account data while your account is active. When it is no longer needed, or after you ask us to delete your account, we delete or anonymise it, except where we must keep records by law.
Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or export your data, object to processing, withdraw consent, and complain to a data protection authority. You can turn off “Remember” to erase reading records on your device. Contact us to make a request; we respond within one month.
International transfers
Our providers may process data outside your country. Where required, we rely on safeguards such as Standard Contractual Clauses.
Security
We use appropriate technical and organisational measures, including encrypted connections, access controls and owner-only data rules.
Cookies and storage
We use only essential cookies and device storage to keep you signed in and remember your settings. We do not use advertising cookies. You can clear them in your browser settings.