Skip to content
codebiy

Moonhush — Privacy

Privacy Policy

Last updated: September 13, 2026

01

Introduction

This Privacy Policy applies to the Moonhush: Bedtime Stories iOS application ("the App") published by Codebiy, the independent software studio of Orhan Ege Bilge ("we," "our," or "us"). Moonhush is a Kids Category app that parents use together with their children, and it is built to collect as little data as possible. This policy explains what the App stores, how it is used, and the choices parents have.

02

Information We Collect

The App works without creating an account. Only two kinds of data are collected, and neither is used for tracking:

  • User ID: an anonymous identifier created on first launch (Supabase anonymous sign-in). It ties your stories and your free-story or Pro quota to the installation and is never linked to a name, email, or phone number
  • Purchase history: whether a Moonhush Pro subscription is active, checked through Apple and RevenueCat. We never see payment details
03

Stories You Create

To write a story, the App sends the details a parent entered — the child's first name, age, three favorite things, the chosen theme, and the story language — to our story service. The resulting story text, illustrations, and narration are stored under the anonymous identifier so your library can replay them offline. The child's profile itself is kept on the device.

04

What Stays on Your Device

Some features never send anything to us:

  • The good-night voice message a parent records is saved only on the device
  • The microphone is used live to hear a child blow out the light at the end of a story; those sounds are never saved or sent
  • Bedtime and weekly reminders are local notifications scheduled on the device
  • Coloring pages, stickers, and other night corner progress are stored on the device. A finished coloring page can be shared only through the iOS share sheet, behind the parental gate
05

What We Do Not Collect

The App contains no advertising, no analytics of any kind (neither third-party nor our own), no tracking, no social features, no chat, and no links out from any screen a child can reach. We do not collect usage data, diagnostics or crash data, email addresses, contact details, location, photos, contacts, or advertising identifiers. Children cannot type free-form text anywhere in the App; only a parent, behind the parental gate, can edit the profile.

06

AI Story Generation

Story text, a safety review of that text, the illustrations, and the narration are produced through OpenAI's API from the details listed above. Under OpenAI's API terms, data sent through the API is not used to train its models by default. Every story passes an automated child-safety review before it is shown; if generation fails or the review rejects the text or an image, a bundled, human-written story in the selected language is played instead.

07

Children's Privacy

Moonhush is designed for children aged 3–7 using the App with a parent. All information about the child is entered by the parent, is limited to a first name, age, and interests, and is stored only under an anonymous identifier. Purchases, restoring purchases, profile editing, sharing, and settings sit behind a parental gate. We follow applicable children's privacy laws, including COPPA and the GDPR's provisions on children's data.

08

Third-Party Services

The App relies on the following service providers:

  • Supabase — anonymous authentication and storage of generated stories
  • OpenAI — story text, safety review, illustration, and narration generation
  • RevenueCat — subscription status
  • Apple — App Store payments and subscriptions
09

Data Retention and Deletion

Stories are retained so your library keeps working. Deleting the App removes the anonymous session and everything stored on the device, including the voice message. You can ask us at any time to delete all server-side data associated with your anonymous identifier by emailing us; we will delete the stories and generated media.

10

Data Security

Data is stored on cloud infrastructure with encryption in transit, and access to stories is restricted to the anonymous session that created them. No method of transmission or storage is completely secure, but we take reasonable measures to protect it.

11

Your Rights

Depending on where you live (including under Türkiye's KVKK and the EU's GDPR), you may have the right to access, correct, export, or delete data associated with your use of the App. Contact us at the address below to exercise these rights.

12

Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date.

13

Contact Us

If you have questions about this Privacy Policy or your data, contact us:

[email protected]