Privacy Policy

2. Information We Collect

2.1 Personal Data

We collect personal data that you voluntarily provide when:

• You register an account in the App
• You create a child profile
• You personalize story settings
• You communicate with our support team
• You use Premium features

2.2 App Usage Data

We automatically collect information about how you use the App:

• Device identifier (IDFA on iOS, Android ID on Android)
• Mobile device type and model
• Operating system version
• App version
• Time spent using the App

3. How We Use Your Information

3.1 Service Provision

• Creating and managing user accounts
• Generating personalized stories using AI
• Saving and synchronizing favorite stories
• Providing audio narration services (Premium)
• Personalizing content based on child's age and interests

4. Children's Data Protection

4.1 COPPA and GDPR-K Compliance

• We do not knowingly collect personal data from children under 13 without parental consent
• All children's data is processed with the highest care
• Parents have full control over their children's data

4.2 Children's Data Minimization

• We collect only necessary information (name, age, interests)
• We do not ask for surname, address, or other detailed personal data of the child
• Children's data is used exclusively for story personalization

4.3 Parental Rights

Parents have the right to:

• Review their child's data
• Correct or delete their child's data
• Withdraw consent for processing their child's data
• Limit how their child's data is used

5. Information Sharing

5.1 We Don't Sell Data

We never sell, rent, or commercially trade your personal data or your child's data.

5.2 Service Providers

We may share data with trusted service providers who help us operate the App:

• Supabase - database hosting and backend
• OpenAI/Anthropic - AI content generation (data is anonymized)
• ElevenLabs - speech synthesis (Premium audio only)
• App Store/Google Play - payment processing
• Sentry - error monitoring
• Analytics providers - usage analysis (in aggregated form)

6. Data Security

6.1 Encryption

• All data is transmitted using SSL/TLS encryption
• Data is stored in encrypted databases
• Particularly sensitive children's data has additional protection layers

6.2 Access Control

• Limited access to data only for authorized personnel
• Regular security audits
• Two-factor authentication for administrators

7. Your Rights

7.1 GDPR Rights

You have the right to:

• Access - receive a copy of your data
• Rectification - correct incorrect data
• Erasure - request deletion of data ("right to be forgotten")
• Restriction - limit data processing
• Portability - receive data in a format enabling transfer
• Object - object to data processing
• Withdraw consent - withdraw consent at any time

8. AI-Generated Content

8.1 Content Safety

• All AI content is filtered for child appropriateness
• We implement multi-level moderation systems
• Parents can report inappropriate content

8.2 AI Learning

• We use data in anonymized form to improve AI
• We do not use specific child data to train AI models
• All data used for learning is stripped of personal identifiers

9. Contact Us

9.1 Contact Information

For questions regarding this Privacy Policy:

• Email: privacy@BedTimeStoriz.xyz
• Support: support@BedTimeStoriz.xyz
• Website: BedTimeStoriz.xyz

9.2 Data Protection Officer

For questions regarding children's data protection, you may also contact our Data Protection Officer at: dpo@BedTimeStoriz.xyz

10. Social Features

10.1 Sharing

The App may contain story sharing features:

• Sharing is done through standard system APIs
• We do not share children's personal data
• Parents control what can be shared

11. App and AI Updates

11.1 AI Improvements

• We regularly improve our AI algorithms
• All improvements comply with our children's safety standards
• New AI features are tested for content appropriateness

11.2 Security Updates

• Automatic security updates
• Notifications about important privacy updates

12. Cookies and Tracking Technologies

12.1 Mobile App

In the mobile app we use:

• Local storage - to save settings and preferences
• Device identifiers - for analytics and personalization
• Analytics SDK - to understand app usage

12.2 Control

You can control some of these technologies in your device or App settings.

13. Regulatory Compliance

13.1 International Compliance

Our privacy practices comply with:

• GDPR (European Union)
• COPPA (United States)
• PIPEDA (Canada)
• LGPD (Brazil)
• Local children's data protection regulations

13.2 Certifications

• We regularly audit our security practices
• We follow industry best practices for children's apps
• We work with children's online safety experts

14. Data Retention Period

14.1 Account Data

• Account data: throughout the activity period plus 1 year after account deletion
• Child data: deleted immediately upon parent request or account deletion

14.2 Story Content

• Generated stories: stored only as long as the user wants to keep them
• Reading history: maximum 2 years in anonymized form

14.3 Analytics Data

• Analytics data: maximum 2 years in completely anonymized form
• System logs: maximum 90 days

15. International Data Transfers

15.1 Data Location

Your data is stored on servers in the European Union when possible.

15.2 Transfers Outside EU

When necessary to transfer data outside the EU, we ensure appropriate safeguards:

• EU Standard Contractual Clauses
• Adequacy decision certifications
• Other legally recognized protection mechanisms

16. Changes to Privacy Policy

16.1 Change Notifications

We will notify you of material changes to the Privacy Policy through:

• In-app notification
• Email to the address associated with your account
• App store update (for major changes)

16.2 Consent to Changes

Continued use of the App after changes are introduced means acceptance of the new Privacy Policy.

17. Final Provisions

17.1 Language

This Policy was prepared in English. In case of discrepancies between language versions, the English version takes precedence.

17.2 Severability

If any provision is deemed invalid, the remaining provisions remain in effect.

17.3 Governing Law

This Policy is governed by and construed in accordance with the laws of the jurisdiction where we operate.

Last updated: October 1, 2025