Privacy

This policy describes how One Hundred Questions collects, uses, stores, and deletes personal information today. Last updated April 2026. It is a working draft: have it reviewed by qualified counsel before you treat it as final.

Who we are

One Hundred Questions operates the website onehundredquestions.com and related services that help people capture life stories. For privacy requests, email hello@onehundredquestions.com.

What we collect

• Account basics. When you join the demo or waitlist, we collect your email address and first name so we know who returned and so we can contact you sparingly.
• Voice answers. If you choose to record, your audio is uploaded to our servers for transcription and keepsake storage.
• Typewritten answers. Text that you submit is stored alongside the prompts you responded to.
• Photos. Optional photo uploads are stored encrypted in transit via HTTPS.
• Signals we see automatically. Like nearly every HTTPS site, servers may log technical data such as timestamps, coarse IP-derived information useful for debugging, and user-agent strings. We do not use this to build advertising profiles.
• Consent-style events. We log lightweight product telemetry (such as whether a question was skipped) strictly to improve the experience — not for resale.

What we use it for

We use personal data solely to operate the guided storytelling product you asked for:

• To keep you signed in securely using an HTTP-only session cookie;
• To send audio securely to OpenAI’s transcription API when you explicitly click to use a recording;
• To store uploads and transcripts on servers and, when configured, Cloudflare R2 object storage;
• To generate optional PDF previews and future printed keepsakes you request;
• To respond honestly if you write with a question about your data.

What we deliberately do not do

• We do not sell your personal information.
• We do not knowingly allow unrelated third parties to use your stories as marketing fodder.
• We do not train generalized AI models on your transcripts, audio, photos, or private answers. Voice files are transmitted to OpenAI solely to produce transcripts on your behalf — governed by OpenAI’s enterprise/API terms applying to that service.
• We do not run public leaderboards or share private answers outside the fulfillment path you choose.

Where copies live

Operational data resides on infrastructure we control (currently a VPS in the EU via Hetzner) and, when configured, Cloudflare R2 in Cloudflare’s network. Copies may also exist briefly in encrypted automated backups you enable for disaster recovery.

Retention

We keep your material only as long as needed to provide the service and honor print or export requests. If you ask us to delete your account and associated stories, we will remove them from active systems within a reasonable window and retire backups on their normal cycle. Some minimal accounting records may need to persist where the law requires.

Your choices

You may request access, correction, export, or deletion by emailing hello@onehundredquestions.com. We will verify ownership of the account before acting. If you need a human-readable export, tell us the format you prefer and we will do our best.

Children

The product is designed for adults reflecting on a full life. We do not knowingly collect information from children under 13. If you believe we have, contact us immediately and we will remove it.

International visitors

If you access the service from outside the United States, you consent to processing in the United States and in the regions where our subprocessors operate. We apply reasonable safeguards consistent with the sensitivity of what you share.

Changes

When we materially update this policy, we will post the new version here and adjust the “last updated” line. Continued use after a reasonable notice period means you accept the revised terms.