Privacy Policy

Last updated: 23 June 2026

This Privacy Policy explains how Calvary Media UK Ltd ("Calvary", "we", "us") collects, uses, and protects your personal data when you use the Story Island mobile app and related services (the "Service").

Calvary Media UK Ltd (company number 17034179) is the data controller for the purposes of UK data protection law (UK GDPR and the Data Protection Act 2018), with its registered office at 1 Grenard Close, Middleton House, London.

Contact: contact@calvaryscribblings.co.uk

1. Who can use Story Island

Story Island is intended for adults aged 18 and over. We ask for your date of birth when you create an account with email and password, and you must confirm you are 18 or older. The Service is not directed to children, and we do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

2. Information we collect

a. Information you provide when you create and use an account

• Account & authentication: your email address, and a password (passwords are handled and stored in hashed form by our authentication provider, Google Firebase — we never see your plain-text password). If you sign in with Apple or Google, we receive the basic account identifiers those providers return (such as a user identifier and, where you permit it, your email and name).
• Date of birth: collected at email sign-up to confirm you are 18 or older.
• Profile: your display name, username/handle, profile picture (avatar), header image, and any biography text you add.

b. Content you create ("user-generated content")

• Posts you publish on the Square, comments and replies on stories, direct messages (including any images you send in messages), reactions, and any reports or block actions you make.

c. Reading and activity data

• Stories you read, your reading counts and progress, and bookmarks you save.

d. Photos you choose to upload

• When you set a profile picture, header image, or send an image in a direct message, the app asks your permission to access your photo library and uploads only the image(s) you select.

e. Technical and usage data

• Standard technical information generated when any app communicates over the internet — such as your IP address, device type, and app/diagnostic logs — processed by our infrastructure providers (see Section 4) to operate and secure the Service. We do not use third-party advertising or analytics/tracking SDKs in the app.

3. How we use your information and our legal bases

We use your personal data to:

• Provide the Service (create your account, show stories, enable the Square, comments, direct messages, bookmarks, and reading progress) — legal basis: performance of a contract with you.
• Keep the community safe (operate reporting and blocking, moderate content, prevent abuse and enforce our Terms) — legal basis: legitimate interests in maintaining a safe service, and legal obligation where applicable.
• Verify eligibility (confirm you are 18+) — legal basis: legitimate interests and legal obligation.
• Communicate with you about your account and service-related matters — legal basis: performance of a contract and legitimate interests.
• Maintain security and integrity (debug, prevent fraud and misuse) — legal basis: legitimate interests.

4. Service providers and third parties

We share personal data only with providers that process it on our behalf to run the Service:

• Google Firebase (Google Ireland Ltd / Google LLC): hosts our backend — authentication, the Realtime Database (profiles, content, activity), and Cloud Storage (uploaded images). Your account and content data are stored on Google Firebase infrastructure.
• Apple Sign in with Apple and Google Sign-In: where you choose those sign-in methods, to authenticate you.
• Cloudflare: a lightweight read-counter service (hosted on Cloudflare Workers) receives the identifier of the story being opened, together with standard request metadata such as your IP address, to aggregate story read counts.
• Anthropic (Claude): content you submit (such as posts and quiz answers) is processed server-side by Anthropic's Claude to perform content moderation and quiz scoring. We share only the content needed for those purposes.

We do not sell your personal data, and we do not share it with advertisers.

Analytics. The Story Island mobile app does not include any analytics or tracking SDKs. Our website (calvaryscribblings.co.uk) uses Google Analytics (measurement ID G-W3B4WHBM8B) to understand website usage; this applies to the website only, not the mobile app.

5. International transfers

Our providers (including Google and Cloudflare) may process personal data on servers located outside the United Kingdom. Where data is transferred outside the UK, we rely on appropriate safeguards such as UK adequacy regulations and standard contractual clauses / the UK International Data Transfer Addendum.

6. How long we keep your data

We keep your account and content data for as long as your account is active. If you delete your account (see Section 7), we delete your profile and the personal data associated with your account from our active systems. Some information may be retained for a limited period where necessary to comply with legal obligations, resolve disputes, or enforce our agreements (for example, records of reports of abuse may be retained for safety purposes).

7. Your rights and choices

You can:

• Delete your account at any time from Settings → Delete account, which removes your profile and associated personal data from our active systems.
• Access and correct your profile information from Edit profile.
• Block and report other users to control your experience.

Under UK GDPR you also have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent where processing is based on consent. To exercise any of these rights, contact us at contact@calvaryscribblings.co.uk.

You have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at https://ico.org.uk if you are unhappy with how we handle your data.

8. Security

We use the security features of our infrastructure providers (including encryption in transit and access controls) to protect your data. No method of transmission or storage is completely secure, but we take reasonable measures to protect your personal data.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, where appropriate, notify you in the app.

10. Contact us

Calvary Media UK Ltd (company number 17034179)

1 Grenard Close, Middleton House, London

Email: contact@calvaryscribblings.co.uk