Privacy Policy

1. Who we are

This policy explains how Hushmoon ("Hushmoon", "we", "us") handles information in the Hushmoon app for iPhone and iPad (the "app") and on this website, hushmoon.app. Hushmoon is operated by ELAQ Limited, Unit 2, 2 Bridge Street, Athlone N37 F1W4, Ireland. You can reach us at support@hushmoon.app.

Hushmoon is a parent-directed app. It is designed to be set up and operated by a parent or guardian, who chooses and plays stories, lullabies and sounds for their child. Children do not create accounts, chat, type or speak into the app.

2. Information stored only on your device

The following stays on your iPhone or iPad. We do not receive or store it on our servers. Hushmoon's data files are excluded from iCloud and device backups, so they don't leave your device that way either.

• Child profiles: your child's first name, age (0–8), pronouns (he, she or they), up to three favorite things, and an optional "Sounds like" spelling that helps the narrator say the name correctly. You can add more than one child.
• Saved stories: stories on the Story Shelf, so they can play offline.
• Settings: your AI-stories choice, narration voice and speed, lullaby and sound preferences, sleep-timer and bedtime-reminder choices.
• Free-tier usage: a count of the AI stories made on this device, used to apply the free plan's limits.

The "Sounds like" spelling is used only by the on-device narrator and is never included in a story request. Stories are read aloud on your device using Apple's built-in speech voices. Lullabies and sleep sounds are generated on your device. No audio is recorded, and the app does not use the microphone.

3. AI stories are your choice

Before Hushmoon writes its first AI story, it shows a one-time screen that lists exactly what would be sent and asks you to choose "Allow AI stories" or "Use built-in stories only". You can change your choice at any time with the AI stories switch in the app's Settings.

If you choose built-in stories only (or turn AI stories off later), Nimbo tells stories from a set of templates stored in the app. They are filled in with your child's name and favorites right on your device, and nothing about your child is sent anywhere. Built-in stories are also used when you are offline, when a new AI story can't be written, or when the free plan's AI stories are used up.

4. When you ask for a new AI story

Only if you have allowed AI stories, tapping to create a new personalized story sends a request to our story server (story.hushmoon.app) over an encrypted (HTTPS) connection. The request contains:

• your child's first name, age, pronouns (he, she or they), and up to three favorite things;
• the optional "one thing from today" note, if you typed one;
• the story length you picked and a random number used to vary the story; and
• a random install ID, sent in a request header and used only for rate limiting (see section 5).

It does not contain the "Sounds like" spelling, your other children's profiles, your saved stories or anything else from your device. Like any internet request, it also carries your device's IP address.

What happens to it

• Our server checks that the request is valid and within rate limits, then sends the child's first name, pronouns, age, favorite things, today's note, the story length and a story setting chosen from the random number to Anthropic's Claude API (a Claude Haiku model), which writes the story. The install ID and your IP address are not sent to Anthropic.
• The story is checked by a safety filter and returned to your device, where it is saved to your Story Shelf.
• Our server does not store the request or the story, and does not log names or request contents. Once the story is sent back to you, our server keeps nothing.
• We never use this information to build a profile, for advertising, for training AI models, or for any purpose other than writing the story you asked for.

Our service providers

• Anthropic, PBC processes the story details on our behalf solely to write the story. Under Anthropic's commercial terms, data sent through its API is not used to train its models. Anthropic keeps API data only for a limited period under its commercial API data-retention policy (for example, to detect misuse) and then deletes it. See Anthropic's Privacy Center and Anthropic's privacy policy.
• Cloudflare, Inc. hosts our story server (a Cloudflare Worker) and this website. Your IP address is used transiently to deliver the response and to rate-limit requests, and Cloudflare processes connection data as needed to protect against attacks. See Cloudflare's privacy policy.

If you never create a new AI story (for example, you only use built-in stories, lullabies, sounds or saved stories), no child information is ever sent anywhere.

5. The random install ID

The app creates a random identifier (a UUID) and stores it on your device. It is sent with AI story requests so our server can limit how many stories one install can request in a short time, which protects the service from abuse.

• It is random. It is not your Apple ID, your device's advertising identifier, or any hardware identifier, and it is not linked to your child's name.
• It is used only for rate limiting. Rate-limit counters for the install ID and IP address are short-lived and expire within minutes; they are never used for tracking, analytics or advertising.
• Deleting the app or using "Delete all data" removes it; a new random ID is created next time.

6. Purchases and subscriptions

All purchases are processed by Apple through the App Store. We do not receive your name, email address, payment card or billing details. The app uses Apple's StoreKit on your device to check whether you have an active subscription or lifetime purchase. Apple's handling of your purchase is covered by Apple's privacy policy.

Purchases, links that leave the app, "Report this story" and "Delete all data" sit behind a simple parental gate (a multiplication question), so a child can't reach them by accident.

7. Notifications

If you turn them on, Hushmoon's bedtime reminder and free-trial reminder are local notifications, scheduled and delivered by your device. No push-notification service is used, and nothing is sent to us to schedule them. "Delete all data" also cancels any pending reminders.

8. What we don't do

• No third-party SDKs of any kind in the app: no analytics, advertising, attribution, crash-reporting or social SDKs.
• No ads, no analytics, and no tracking across apps or websites. We do not use the advertising identifier (IDFA).
• No accounts, logins, chat or social features.
• No microphone, camera, photos, contacts or location access. No voice recordings of anyone.
• We do not sell, rent or share personal information, and we do not use it for targeted advertising.

9. This website and emailing us

This website uses no cookies, no analytics and no trackers, and loads nothing from third-party servers. Our host, Cloudflare, processes IP addresses and standard request information to serve pages and keep the site secure.

If you email us, including with "Report this story" in the app (which opens an email with the story's title), we use your email address and message only to reply and help you, and we delete support emails when they're no longer needed. Please don't include your child's information in emails; we never need it to help you.

10. Children's privacy (COPPA)

Hushmoon is intended for use by parents and guardians, not by children on their own. It is not listed in the App Store's Kids category, and we do not knowingly collect personal information directly from children under 13.

We follow the principles of the US Children's Online Privacy Protection Act (COPPA):

• The parent provides it. The only information about a child that the app handles is what a parent chooses to enter: a first name, age, pronouns and favorite things, plus an optional note about the day.
• The parent decides. Nothing about a child leaves the device unless the parent has chosen "Allow AI stories", and the parent can switch AI stories off at any time.
• Minimal and single-purpose. When AI stories are allowed, only the details listed in section 4 are sent, only to write the story the parent asked for, and our server keeps none of it. We don't ask for a child's last name, photo, voice, location or contact details, and we don't use children's information for advertising, profiling or training AI models.

If you believe a child has sent us personal information (for example, by email), please contact us at support@hushmoon.app and we will delete it.

11. Your choices, rights and deleting your data

• See or edit what's stored: everything Hushmoon keeps is visible in the app. Edit or remove a child in Settings → Manage children, and remove saved stories from the Story Shelf.
• Stop sending story details: turn off AI stories in Settings. Nimbo will use built-in stories instead.
• Delete everything: Settings → Delete all data (behind the parental gate) permanently erases all profiles, saved stories, settings, the free-tier count and the install ID from your device, and cancels pending reminders. Deleting the app also erases them.
• Server-side data: because our server stores nothing, there is no copy of your child's information on our servers to access or delete. Deletion happens on your device.
• Subscriptions: manage or cancel in the app (Settings → Manage subscription) or in your Apple ID settings (Settings → your name → Subscriptions).

Parents and guardians can ask us at any time what information we hold about their child and ask us to delete it. Depending on where you live (for example, in the EU, UK, or US states such as California), you may also have the right to access, correct, delete or port your personal information, to object to or restrict processing, and to not be discriminated against for exercising these rights. To make a request, email support@hushmoon.app. Since everything is stored only on your device, we will usually be able to confirm that we hold no data about you beyond any emails you've sent us. You may also complain to your local data protection authority.

Where the GDPR or UK GDPR applies, we process story details on the basis of your choice to allow AI stories and to provide the service you request (performance of a contract), and the install ID and IP address for our legitimate interest in preventing abuse. ELAQ Limited is the data controller. Our lead supervisory authority is Ireland's Data Protection Commission (dataprotection.ie).

12. Security

We keep data to a minimum, which is the best protection. Story requests are encrypted in transit with HTTPS, our server's API keys are stored as secrets and never in the app, and on your device Hushmoon's files are protected by iOS data protection. No system is perfectly secure, but we have designed Hushmoon so that very little exists to be exposed.

13. International users

Our story server runs on Cloudflare's global network, and Anthropic may process requests in the United States. Where information is transferred internationally, we rely on our providers' appropriate safeguards, such as Standard Contractual Clauses.

14. Changes to this policy

If we change how Hushmoon handles information, we will update this page and its "last updated" date. If a change is significant, for example if we ever stored story requests, we will tell you in the app before it takes effect and, where required, ask for your consent.

15. Contact us

Questions, requests or concerns: support@hushmoon.app.
ELAQ Limited, Unit 2, 2 Bridge Street, Athlone N37 F1W4, Ireland.