SzeptAI — Privacy Policy
Effective date: 1 June 2026 · Last updated: 1 June 2026
1. Who we are
SzeptAI (“we”, “us”, the “app”) is a bedtime-story and calming-sound app for families. The account holder is an adult parent or guardian (the “user”); stories are created by the adult for a child audience. This policy explains what data we collect, why, who processes it, and the choices you have.
Data controller: [legal entity name], [address / jurisdiction]. Contact: kontakt@szept.ai.
2. Data we collect
2.1 Account data (required)
- Email address — for sign-in and account identification.
- Display name and profile photo — only if you sign in with Google or set them yourself.
- Authentication identifiers — a Firebase user ID and sign-in provider.
2.2 Child profile data (optional, parent-entered)
If you choose to personalise stories, you may create one or more child profiles containing a first name or nickname, age, pronouns, “favourites” interests, and “topics to avoid”. This information is entered by the adult account holder, is used solely to personalise generated stories, and can be edited or deleted at any time. We do not knowingly collect data directly from children.
2.3 Content data
- Generated stories you save (title and text) are stored in your account library.
- Story selections (heroes, world, traits) used to generate a story.
2.4 Diagnostics & analytics (consent-based)
- Crash diagnostics (Firebase Crashlytics) to fix stability issues.
- Usage analytics (Firebase Analytics) — disabled by default. We ask for consent on first sign-in; change it anytime in Profile → Privacy → Analytics. When disabled, analytics events are not collected.
We do not sell your personal data, and we do not use it for third-party advertising.
3. How your data is processed (third parties)
| Processor | Data it receives | Purpose |
|---|---|---|
| Google Firebase (Auth, Firestore, Analytics, Crashlytics) | Account data, child profiles, saved stories, crash logs, analytics (if consented) | Sign-in, cloud storage, stability, analytics |
| Google Sign-In | Google account email, name, photo | Optional sign-in method |
| Anthropic (Claude — LLM provider) | The story prompt, including the child's first name, age, pronouns and favourites/avoid tags you supplied | Generating story text |
| OpenAI (content moderation) | The generated story text, with the child's name redacted before sending | Automated safety screening |
These providers process data on our behalf under their respective terms. Story generation and moderation happen on our server; our API keys are never exposed to the app.
4. Why we can process your data (legal bases)
Where GDPR applies, we rely on performance of a contract (providing the app), consent (analytics, and your decision to enter child profile data), and legitimate interests (security, abuse prevention, and keeping generated content safe).
5. Content safety, moderation & reporting
Generated stories are produced from a tightly constrained, “cozy, zero-danger” prompt and are screened by automated moderation before being saved. You can also report any story from the story screen (the flag icon). Reports and moderation flags are reviewed by our team and may be used to remove content and improve filters.
Retention of safety records: reports and moderation flags are kept on a safety and legal-compliance basis and may be retained after account deletion in a form that supports review and abuse prevention.
6. Data retention
- Account data, child profiles and saved stories: until you delete them or your account.
- Crash and analytics data: per Firebase default retention windows.
- Safety records: see Section 5.
7. Deleting your data
You can permanently delete your account in Profile → Delete Account. This removes your user record, child profiles, saved stories and generation history, and deletes your authentication account. Deletion is irreversible. (See Section 5 for the limited exception covering safety records.)
8. Children's privacy (COPPA / GDPR-K posture)
SzeptAI is a general-audience app and a tool for parents and guardians — it is not submitted to Apple's Kids Category or Google Play's “Designed for Families” programme. The account holder must be an adult (13+ in the US; the age of digital consent in your jurisdiction elsewhere).
We do not collect personal information from children. Any child details (first name or nickname, age, pronouns, interests, topics to avoid) are entered by the adult account holder, who provides them on the child's behalf solely to personalise stories. Because this data is supplied by the parent/guardian rather than collected directly from a child, we rely on that adult's provision and consent rather than operating a separate verifiable-parental-consent (VPC) flow. Child profiles are parent-managed and can be edited or deleted in-app at any time, and usage analytics are off by default for every account.
We do not knowingly allow children to create accounts or provide personal information directly. If you believe a child has provided us personal data without parental involvement, contact us and we will delete it.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to withdraw consent, and to object to or restrict certain processing. You can exercise most of these in-app (edit/delete profiles, toggle analytics, delete your account) or by contacting us. You may also complain to your local data-protection authority.
10. Data security
Data is transmitted over encrypted connections and stored in Google Firebase. Server-side secrets are never shipped to the app. No system is perfectly secure, but we take reasonable measures to protect your information.
11. International transfers
Your data may be processed in countries other than your own (including by the processors in Section 3). Where required, we rely on appropriate safeguards for such transfers.
12. Changes to this policy
We may update this policy as the app evolves. We will update the “Last updated” date and, for material changes, provide an in-app notice.
13. Contact
Questions or requests: kontakt@szept.ai.