Privacy Policy
Last updated 28 October 2026
This page explains what Narrative stores about you, who else sees it, and how to delete it.
What we store
Your email address. There is no name, profile or password.
Your stories: what you write, what Narrative writes for you, and each story's memory.
A Stripe customer id, which plan you are on, whether it is in a free trial or paying, and how many passages you have had written this month and during a trial.
For each sign-in: a hashed token, when it was created, when it expires, and which browser it came from. Sign-in links are stored hashed too; each works once and expires after fifteen minutes.
What we don't store
Your card. Stripe handles payment on its own pages; your card number never reaches our server.
A password. There isn't one.
Advertising profiles or session recordings. We don't use ad trackers or record what you do in the app.
Website performance
Cloudflare delivers and protects this site. Its privacy-first Web Analytics beacon collects page-view and page-loading measurements, without advertising cookies. It is used to understand website performance, not to record your story text or replay your session.
Cookies
Narrative uses narrative_session for sign-in. It carries your session token, lasts sixty days, cannot be read by JavaScript, and is deleted when you sign out. Cloudflare may also use technical cookies to protect the site. We do not use advertising cookies.
Who else sees your writing
Writing a passage sends the relevant story text, the story's memory and your instruction to our AI provider, which writes the passage and updates the memory.
The Helper and story setup use the same AI provider. They receive your request and the story details needed to answer it.
Narration sends the passage's text to ElevenLabs, which returns the audio. This only happens when you use narration.
Sign-in links and account mail go through Postmark, which sees your email address and the contents of the message.
Stripe sees your email address and your payment details.
Cloudflare carries website and API traffic between your device and our server, including requests to open or update a story.
Each of these services handles what it receives under its own privacy policy. We don't send your writing anywhere else, and we don't use it to train AI.
Where it's stored
Stories are stored on our server in the United States, with backups on our own machines in the United States. Each account's stories are stored separately. Accounts and sign-ins are kept in a separate database.
How long we keep it
Stories are kept until you delete your account. Sign-in links expire after fifteen minutes and sign-ins after sixty days, and expired ones are deleted every hour. Billing records are kept as long as tax and accounting rules require, which can be longer than the account.
Deleting your data
Email [email protected] from the address on your account. We'll delete the account, its sign-ins and all its stories, and cancel your subscription. This can't be undone. Stripe keeps its own payment records, which we can't delete.
There's no delete button in the app yet, so email is the way to do it.
People under 18
You must be 18 or older to have an account, and we don't knowingly store anything about children. If you think we have, email us and we'll delete it.
Changes to this policy
When this page changes, the date at the top changes too. If we start doing something with your data that isn't described here, we'll email you first.