Privacy Policy

Introduction

This Privacy Policy applies to the Moonhush: Bedtime Stories mobile application ("the App") published by Codebiy ("we," "our," or "us"). Moonhush is a children's app used by parents together with their children, and it is designed around collecting as little data as possible. This policy explains what the App stores, how it is used, and the choices parents have.

Information We Collect

The App works without any account creation. We store only the following, tied to an anonymous identifier created on your device:

• —Story profile: the first name, age, and favorite things a parent enters to personalize stories, and the story language
• —Generated stories: the story text, illustrations, and narration audio created for you, kept so they can be replayed
• —Purchase information: subscription status, processed by Apple and RevenueCat — we never see payment details

What We Do Not Collect

The App contains no advertising, no third-party analytics, no tracking, no social features, and no chat. We do not collect email addresses, contact details, precise location, photos, or device identifiers for advertising. Children cannot enter free-form text anywhere in the App; only a parent, behind a parental gate, can edit the profile.

AI Story Generation

When a parent requests a story, the story profile (first name, age, favorite things) and the chosen theme are sent to OpenAI's API to write the story text, generate the illustrations, and produce the narration audio. Content sent through the API is not used by OpenAI to train its models. Every story also passes an automated child-safety review before it is shown; if it fails, a bundled human-written story is played instead.

Children's Privacy

Moonhush is designed for children aged 3–7 used together with a parent. All information about the child is provided by the parent, is limited to a first name, age, and interests, and is stored only under an anonymous identifier that is never linked to a real identity, email, or phone number. Everything involving payment or settings sits behind a parental gate. We comply with applicable children's privacy laws, including COPPA and the GDPR's provisions on children's data.

Third-Party Services

The App relies on the following service providers:

• —Supabase — anonymous authentication and cloud storage of stories
• —OpenAI — story text, illustration, and narration generation
• —RevenueCat — subscription management

Data Retention and Deletion

Stories and the profile are retained so your library keeps working. Deleting the App removes the anonymous session on the device. You can request deletion of all server-side data associated with your anonymous identifier at any time by emailing us; we will delete the profile, stories, and generated media.

Data Security

Data is stored on secure cloud infrastructure with encryption in transit and at rest, and access is restricted to your anonymous session. No method of transmission or storage is 100% secure, but we protect your information with industry-standard measures.

Your Rights

Depending on where you live (including under Türkiye's KVKK and the EU's GDPR), you may have the right to access, correct, export, or delete data associated with your use of the App. Contact us at the address below to exercise these rights.

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. Material changes will be communicated inside the App's parent area.

Contact Us

If you have questions about this Privacy Policy or your data, contact us: