Privacy Policy

We process your personal information based on the following legal grounds:

• Consent: We process your data with your explicit consent
• Contract Performance: When you purchase our services, we need to process your information to fulfill our contractual obligations
• Legal Obligations: We may be required by law to retain certain data (such as transaction records)
• Legitimate Interests: To protect our network security and prevent fraud, we may process necessary information

💡 Note: We only process your personal information when we have a lawful basis and collect only the minimum information necessary to provide our services.

1. Information You Provide

• Voice Recordings: Voice samples you record on the recording page, used for AI voice synthesis and story generation. This information is only used to create personalized bedtime stories for your child and will not be used for any other purpose.
• Account Information: Email address and phone number provided during registration
• Story Preferences: Selected story themes, child's name, and other relevant information
• Feedback: Suggestions or feedback you provide to us

2. Information Collected Automatically

• Device Information: Device type, operating system, etc.
• Usage Data: Feature usage patterns, generation history, etc.
• Log Information: Access time, browsing history, etc.
• Cookie Information:访问偏好、登录状态等

🚫 Information We Do NOT Collect

• We do not collect user photos or photos of children
• We do not collect precise geolocation data
• We do not collect contact information from your address book

We take your voice data security very seriously and implement the following protective measures:

• Purpose Limitation: Your voice data is used exclusively for generating your personalized bedtime stories and will not be used to train AI models
• Encrypted Storage: Voice data is stored using AES-256 encryption
• Deletion on Request: You may contact us at any time to delete your voice data
• No Third-Party Sharing: Your voice data will not be sold or shared with any third parties
• Local-First Processing: Some processing is performed locally on your device to minimize data transmission

💡 Your Rights: You have complete control over your child's personalized data and may request deletion at any time. After deletion, we will be unable to restore your voice synthesis data.

We implement multiple security measures to protect your information:

• Transmission Encryption: All data is transmitted using HTTPS/TLS encryption
• Storage Encryption: Sensitive information is stored using AES-256 encryption
• Access Controls: Strict limitations on employee access privileges
• Regular Audits: Periodic security reviews and vulnerability scans
• Data Backup: Regular backups to prevent data loss
• Data Minimization: We collect only the minimum information necessary to provide services

We use the following third-party service providers to support our services:

Note: The above third-party service providers will process your information according to their respective privacy policies. We have entered into data processing agreements with these providers to ensure they implement appropriate security measures to protect your personal information.

Regarding international data transfers, we inform you as follows:

1. Cross-Border Transfers

Our data storage provider, Supabase, operates data centers in Singapore (Asia-Pacific region). When you use our services, your personal information (including account information and voice data) will be transmitted over the internet to servers in Singapore for storage and processing.

2. Legal Basis and Compliance Measures

We have implemented the following measures to ensure the legality of international data transfers:

• We have entered into Data Processing Agreements (DPA) with Supabase, specifying the rights and obligations of both parties in data processing
• Supabase has obtained SOC 2 Type II and ISO 27001 certifications
• We ensure that data processing activities comply with applicable data protection requirements

3. Your Rights and Choices

• Right to be Informed: You have the right to know that your personal information will be transferred internationally and stored abroad
• Right to Object: You have the right to object to international data transfers, though declining may prevent you from using our services
• Continued Use Equals Consent: By continuing to use our services, you consent to the international data transfer arrangement

⚠️ Important Notice: If you do not consent to the transfer of your personal information to Singapore, please stop using our services immediately and contact us at haimozhouqiu@outlook.com to request account deletion.

1. Voice Data

• Voice data will be retained until you actively delete it or your account is closed
• You may contact us at any time to request deletion of your voice data
• After account deletion, voice data will be deleted within 15 business days

2. Account Information

• Account information is retained for the duration of your account
• Account information will be deleted within 30 days after account closure

3. Transaction Data

• Transaction records are retained for a minimum of 3 years in accordance with applicable financial regulations

4. Generated Content Auto-Deletion Policy

• Generated content (story text, illustrations, audio) is automatically deleted after 30 days
• You may download and save your stories within 30 days of generation
• After 30 days, the system will automatically purge this data—please save your content in a timely manner

⚠️ Please download and save your stories within 30 days of generation. After 30 days, the system will automatically purge this data.

In accordance with the U.S. Children's Online Privacy Protection Act (COPPA) and the 2026 Amendments:

• This product is designed for parental use; all operations are performed by parents and we do not directly collect personal information from children
• We do not collect biometric data from children (including voiceprints or facial recognition)
• We do not collect photos of children
• Disclosure of data to third parties (ByteDance/Doubao, Alibaba Cloud) requires your knowledge and separate consent—see the Third-Party Services table above
• Under the 2026 COPPA Amendments, biometric information constitutes "personal information" requiring parental consent
• Third-party disclosures require independent consent from parents
• We maintain a data retention policy with defined retention periods
• You may request deletion of all your child's data at any time, and we will complete such deletion within 15 business days
• We will not use children's data for behavioral advertising

If you believe we have violated COPPA, you may file a complaint with the FTC: https://www.ftc.gov/complaint

In accordance with the General Data Protection Regulation's provisions concerning children (GDPR-K):

• Services to children under 16 require parental consent (some member states have lowered this to age 13)
• This product uses age-gating to verify parental identity
• Right to be Forgotten: You may request deletion of all personal data at any time
• Data Portability: You may request export of your data in a portable format
• Right to Object: You may object to certain data processing activities
• Right to Lodge a Complaint: You have the right to lodge a complaint with your local data protection authority
• We adhere to the data minimization principle, collecting only information necessary to provide our services

In accordance with the EU Artificial Intelligence Act (EU AI Act) and applicable transparency requirements:

• Story text and illustrations in this product are generated by AI; each ebook is labeled with "AI-Generated Content"
• AI-generated content is provided for entertainment purposes only and does not constitute professional advice
• Purely AI-generated content is not protected by copyright law; you may not claim copyright over AI-generated stories
• Our product design, character systems, and UI/UX are human-created works and are protected by intellectual property rights
• AI models used: ByteDance Doubao for story generation, Alibaba Cloud Wanxiang for illustration generation, ByteDance CosyVoice for speech synthesis

Under applicable data protection laws, you have the following rights:

• Right to be Informed: Understand how we collect and use your personal information
• Right of Access: Access the personal information we hold about you
• Right to Rectification: Request correction of inaccurate personal information
• Right to Erasure: Request deletion of your personal information (including voice data)
• Right to Restrict Processing: Limit how we process your personal information
• Right to Data Portability: Receive your data in a structured, commonly used format
• Right to Lodge a Complaint: File a complaint with relevant supervisory authorities

To exercise any of these rights, please contact: haimozhouqiu@outlook.com