Privacy Policy
Last Updated: September 2026
Your memories are yours. Always.
We built Storylines to help people, families, schools, religious organizations, sports teams, and communities capture and relive the moments that matter. Organizations may use Storylines to document classroom experiences, congregational life, youth programs, teams, seasons, events, achievements, and other shared memories. Additional protections apply when Organization content includes Student Data or information about minors.
We do not sell personal data. We do not use your photos, videos, voice recordings, School Data, Student Data, or Youth Participant Data to train general-purpose AI models. Face and scene recognition used to organize media runs on-device; resulting face group labels and numerical descriptors may be securely synchronized to our servers for cross-device organization.
1. Scope and Key Definitions
This Privacy Policy describes how First Time Media Inc. collects, uses, discloses, and protects personal information in connection with the Storylines App, websites, related services, social media pages, emails, and electronic communications.
“Educational Institution” means a school, preschool, daycare or childcare provider, educational program, school district, or similar institution whose primary purpose is education and that uses Storylines in connection with students.
“School Personnel” means teachers, administrators, staff members, contractors, volunteers, and others authorized by an Educational Institution.
“Student Data” means personal information about a child or student submitted to, collected through, or maintained in Storylines by or on behalf of an Educational Institution for a school or educational purpose.
“School Data” means Student Data and other information submitted to or maintained through Storylines by or on behalf of an Educational Institution.
“School Storyline” means a Storyline created, designated, or used by or on behalf of an Educational Institution for a school or educational purpose.
“Organization Data” means School Data, Youth Participant Data, and other information submitted to or maintained through Storylines by or on behalf of an Organization.
“Youth Participant Data” means personal information about a minor submitted to, collected through, or maintained in Storylines by or on behalf of a non-school Organization, including names, photographs, videos, voice recordings, team or group affiliation, activities, events, achievements, statistics, milestones, comments, and other information relating to a minor participant.
“Organization Storyline” means a Storyline created, designated, or used by or on behalf of an Organization for an organizational, community, educational, religious, or sports purpose.
“Organization Personnel” means teachers, clergy, coaches, team managers, administrators, staff members, contractors, volunteers, and others authorized by an Organization.
“Organization” means an Educational Institution, religious organization, church, synagogue, mosque, temple, youth group, sports team, sports club, league, nonprofit organization, community organization, or other entity using Storylines on behalf of its members, students, participants, athletes, families, or community.
Important School Data Notice. When Storylines processes School Data on behalf of an Educational Institution, the Educational Institution controls that data and its collection and use are also governed by the institution’s notices, policies, and any applicable written agreement with Storylines. If an applicable privacy or data protection addendum or other written agreement conflicts with this Privacy Policy regarding Organization Data, that agreement controls to the extent of the conflict.
Important Organization Data Notice. When Storylines processes Organization Data on behalf of a religious organization, sports team, youth group, club, league, nonprofit, or other Organization, the Organization determines what information its authorized users submit and who may access it. The Organization is responsible for providing required notices and obtaining required permissions or consents, including parental or guardian consent where applicable.
2. Quick Summary
- Your photos, videos, and other User Content remain yours.
- We do not sell personal information, Student Data, or Youth Participant Data.
- We do not use Student Data or Youth Participant Data for targeted advertising, cross-context behavioral advertising, or advertising profiles.
- We do not use photos, videos, voice recordings, School Data, or Student Data to train general-purpose AI models.
- Face and vision recognition analysis occurs on-device. Resulting face group labels and numerical descriptors may be synchronized to our servers for organization and search.
- School Storylines containing Student Data may not be Public. Organization Storylines primarily involving minors are private by default and may be subject to additional public-sharing restrictions.
- Student Data is retained and deleted at the direction of the Educational Institution, subject to law and contract. Closing an individual teacher’s account does not automatically delete the school’s Student Data.
3. On-Device AI for Face and Vision Recognition
Storylines may use on-device AI to group similar faces, identify scenes, and recognize patterns to support organization and search. Photos and videos are not sent to third parties for facial or scene analysis or model training.
Face group labels and numerical face descriptors generated on-device may be securely synchronized to Storylines servers solely to provide organization and search. They are not disclosed to advertising networks or data brokers.
For School Storylines, Storylines will not use Student Data or face descriptors for advertising, marketing profiling, or general-purpose AI training. Educational Institutions should evaluate whether use of face organization features is permitted under their policies and applicable biometric and student privacy laws. Storylines may disable or make such features optional for school accounts.
4. Personal Information We Collect
- Contact Information: name, email address, and social media handle.
- Account Information: username, profile photo, nickname, preferred language, timezone, and information you choose to provide about yourself, your child, or pet.
- User Content: personal information contained in photos, videos, voice memos, audio recordings, journal entries, comments, and other content you upload.
- Financial Information: transaction details and billing information. Payment card data is handled by payment processors.
- Communications and Preferences: support requests, feedback, surveys, and account or marketing preferences.
School and Student Data. When an Educational Institution uses Storylines, we may receive names, photos, videos, audio, classroom information, activities, milestones, journal entries, artwork, comments, and other information about students from authorized School Personnel or other authorized users. The specific data depends on how the Educational Institution uses Storylines.
Storylines is designed to capture and share memories, activities, milestones, classroom experiences, and similar content. It is not intended to serve as an Educational Institution’s official grading, attendance, disciplinary, medical, academic, or student records system.
Youth Participant and Organization Data. When a religious organization, sports team, youth group, club, league, nonprofit, or other Organization uses Storylines, we may receive names, photos, videos, audio, group or team affiliations, activities, events, achievements, statistics, milestones, comments, and other information about members and participants, including minors. The specific data depends on how the Organization uses Storylines.
Unless specifically requested or necessary for an authorized feature, users should avoid uploading highly sensitive information such as medical records, government identifiers, financial account information, or detailed health information. Educational Institutions should not use Storylines as a system of record for medical or emergency health records unless Storylines expressly supports such use under a written agreement.
5. Information We Collect from Third Parties
- Information about ad clicks and app installs from marketing platforms.
- Purchase information from Apple, Google, and other payment platforms.
- Usage activity from analytics platforms.
- Shipping information provided by users when ordering products.
- Content selected for upload from integrated services such as Google Photos, subject to the permissions you grant.
For Organization use, we may also receive Organization Data, including Student Data and Youth Participant Data, from Educational Institutions, coaches, clergy, teachers, Organization Personnel, parents, guardians, participants, or authorized integrations.
6. Information Collected Automatically
- Usage Information, such as screens viewed, navigation paths, session length, and access times.
- Device Information, such as operating system, hardware and software versions, screen size, and device identifiers.
- Location Information, including precise location if authorized and approximate location derived from IP address.
- Session and account identifiers used to operate, secure, and troubleshoot the Services.
We do not use Student Data, Youth Participant Data, or identifiers associated with minors in Organization Storylines for targeted or cross-context behavioral advertising.
7. How We Use Personal Information
- To create, administer, secure, monitor, and troubleshoot accounts.
- To provide requested features, products, storage, sharing, search, and media organization.
- To provide support and service communications.
- To process purchases and fulfill products.
- To maintain security, prevent fraud, comply with law, and enforce our terms.
- To perform analytics and develop or improve the Services using information permitted for those purposes.
Organization Data is used to provide, maintain, secure, support, and improve the Services for the applicable Organization and for other purposes authorized by that Organization, applicable law, and any applicable agreement. Storylines does not use Student Data or Youth Participant Data for targeted advertising, cross-context behavioral advertising, data brokerage, or general-purpose AI model training.
We may use aggregated or de-identified information that cannot reasonably identify a student or individual to operate, analyze, secure, and improve the Services, subject to applicable student privacy laws and contractual restrictions.
8. AI-Generated Videos and Third-Party Media Services
Storylines may offer optional media-generation services that transmit selected User Content to a service provider solely to create the requested output. Such content is not used by Storylines for general-purpose AI training.
Student Data and Youth Participant Data will not be used for unsolicited Surprise Videos or transmitted to third-party media-generation services unless an authorized Organization user expressly initiates the feature and such processing is permitted by the applicable agreement, permissions, and law.
9. Public and Private Storylines
Followers Only is the default visibility. Eligible Storylines may be made Public only through an explicit user choice. Public content may be viewed, copied, cached, indexed, or redistributed by third parties.
Family, Child, and School Storylines containing Student Data may not be made Public. Organization Storylines primarily involving minors are private by default. Public sharing for youth sports, religious youth, or other minor-focused Organization Storylines may be disabled or may require an authorized Organization administrator to expressly enable it and confirm that required permissions and consents have been obtained.
10. How We Share Personal Information
- Service providers that provide hosting, analytics, payment processing, order fulfillment, printing, customer service, security, and other services on our behalf.
- Other users or recipients when you choose to share content with them.
- Government authorities when required by law or necessary to protect rights, safety, or security.
- Professional advisors and parties involved in a merger, financing, acquisition, reorganization, or sale, subject to applicable law.
Student Data and Youth Participant Data are disclosed to service providers only as necessary to provide contracted services and subject to restrictions appropriate to the nature of the data. We do not disclose such data to advertising networks, marketers, or data brokers.
If ownership or control of Storylines changes, Student Data and Youth Participant Data remain subject to the protections in the applicable agreement and applicable law.
11. Organization Control and Parent Requests
As between Storylines and the Educational Institution, the Educational Institution controls School Data submitted on its behalf. Storylines processes that data to provide, maintain, secure, support, and improve the Services and as otherwise authorized by the Educational Institution, applicable law, and any applicable written agreement.
For non-school Organization Data, the applicable Organization generally controls its Organization Storylines and determines which authorized users may access them. Parents and guardians seeking removal or correction of Youth Participant Data should ordinarily contact the relevant Organization. Storylines will reasonably assist the Organization with valid requests as required by applicable law and contract.
Parents and guardians who wish to access, correct, or request deletion of Student Data submitted by an Educational Institution should ordinarily contact the Educational Institution. Storylines will reasonably assist the Educational Institution with valid requests as required by applicable law and contract.
12. Children’s Privacy and COPPA
Storylines Accounts are not offered directly to children under 13. Children under 13 may appear in content or have information submitted about them by authorized adults, including parents, guardians, teachers, and School Personnel.
If an Organization submits information about a child under 13, the Organization and submitting user are responsible for having the authority and any legally required parental or guardian consent to provide that information. If legally required consent is withdrawn, the Organization should promptly remove or request removal of the affected Youth Participant Data.
Storylines’ receipt of Student Data from an Educational Institution is distinct from permitting a child to create an account or directly provide personal information. If Storylines later enables direct use by children under 13, we will implement parental or school consent mechanisms required by COPPA before collecting personal information directly from those children.
If you believe a child under 13 has created or operated an Account or directly provided personal information without required authorization, contact
legal@storylines.media.
13. Security
We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, acquisition, use, alteration, or disclosure. No method of transmission or storage is completely secure.
For Student Data and Youth Participant Data, Storylines will maintain safeguards appropriate to the sensitivity of the data and will address security incidents in accordance with applicable law and any applicable agreement.
14. Retention and Deletion
For ordinary consumer accounts, when you delete your account, Storylines deletes photos, videos, voice recordings, and associated metadata from active systems and backups within 45 days, subject to legal obligations and technical backup cycles.
School Data and Student Data are retained or deleted at the direction of the Educational Institution and in accordance with applicable law and the applicable school agreement. Closing or deleting an individual teacher or School Personnel account does not automatically delete School Data controlled by the Educational Institution.
Youth Participant Data and other Organization Data are retained or deleted at the direction of the applicable Organization, subject to applicable law, contractual requirements, and limited backup retention. Closing an individual coach, clergy member, team manager, or other Organization Personnel account does not automatically delete Organization Data.
When an Educational Institution instructs Storylines to delete Student Data, Storylines will delete or de-identify the data within the period stated in any applicable written agreement or, if no period is stated, within a commercially reasonable period, subject to legal retention obligations and limited backup retention.
15. Advertising, Tracking, and Marketing
Storylines may use device identifiers, analytics SDKs, attribution technologies, and similar tools in connection with consumer marketing, subject to device permissions and applicable law.
Storylines does not use Student Data, Youth Participant Data, Organization Data associated with minors, or minor-linked identifiers for targeted advertising, cross-context behavioral advertising, marketing profiles, or advertising attribution. Advertising and marketing SDKs should not be configured to receive such data from Organization Storylines.
16. Location Information
We collect precise location only where authorized. We may also derive approximate location from IP address. Uploaded media may contain embedded location metadata.
Educational Institutions and Organization Personnel should avoid sharing precise location information about minors unless necessary and authorized. School Storylines containing Student Data may not be Public, and minor-focused Organization Storylines are private by default.
17. Your Choices and Rights
You may update account information, manage Storyline visibility where available, and opt out of marketing emails.
For School Data, rights requests should ordinarily be directed to the Educational Institution. For Youth Participant Data, requests should ordinarily be directed to the relevant Organization. Storylines will assist the applicable Organization as required by law and contract.
18. State Privacy Notices
Residents of states that provide privacy rights may have rights to know, access, correct, delete, or obtain a copy of personal information and to opt out of certain processing. Storylines does not sell personal information or Student Data and does not use Student Data for cross-context behavioral advertising.
19. International Users
Storylines is based in the United States. Personal information may be processed in the United States and other countries. Where required, Storylines uses appropriate transfer mechanisms and safeguards.
Educational Institutions outside the United States may require additional data protection terms. Those terms may be addressed in a separate agreement.
20. Changes to This Privacy Policy
We may update this Privacy Policy. Where required by law, we will provide notice of material changes before they become effective.
We will not materially reduce protections applicable to Student Data or Youth Participant Data in a manner inconsistent with an applicable privacy or data protection addendum or other written agreement.