Privacy Policy

1. Who we are
2. An app for parents
3. Information we collect
4. Data we do not collect
5. How we use information
6. How stories are made (AI)
7. Who we share it with
8. Analytics and advertising
9. Shared story links
10. Subscriptions and purchases
11. How long we keep data
12. Deleting your data
13. Your rights
14. EU, UK and California
15. Security
16. Where data is processed
17. Third-party services
18. Policy updates
19. Contact

1. Who we are

CozyCaper (“we”, “our”, “us”) is developed by Alina Kozak (Google Play developer name: alinqapps), who is the data controller for the information described here. This policy covers the CozyCaper app for Android and iPhone, the website getcozycaper.com and shared story pages. Contact: alinqapps@gmail.com.

2. An app for parents, not for children

• Our users and customers are adults: parents and legal guardians. The account, every setting, every story request and every purchase belongs to and is made by an adult.
• We do not knowingly collect personal information from children. The limited details about a child that the app holds are entered by the parent, about their own child, for the parent’s own use.
• By using CozyCaper you confirm that you are at least 18 (or the age of majority where you live), that you are the parent or legal guardian of every child whose details you enter, that you have the right to provide those details, and that you agree to their use as described in this policy on the child’s behalf.
• You decide what your child hears and are expected to be present. Please do not hand the app to a child to use alone.
• If we learn that an account was created by someone under 18, or that a child gave us personal information directly, we will delete it. If you believe this has happened, write to alinqapps@gmail.com.

3. Information we collect

Information you give us

• Account. If you sign in with Apple or Google: your name and email address as provided by them (Apple may provide a private relay address). Sign-in is handled by Apple or Google; we never receive your password. You can also use the app without signing in; the account is then tied to your device.
• About your child (entered by you): first name, age range and, only if you choose to add them, gender, a favourite hero, a toy and its name, and a short description of the child’s look for the pictures.
• Story choices: hero, toy, place, lesson, mood, length, picture style, an optional wish you type or dictate, and topics you want stories to avoid.
• Settings: narrator voice, bedtime, time zone and similar preferences.
• Messages you send us, and requests to export or delete your data.

Please keep it minimal. A first name or nickname is enough. Do not enter surnames, addresses, school names, health information or other sensitive details in the wish or description fields. Anything you choose to type there is used to write the story and is your responsibility.

Information created when you use the app

• Your stories: text, pictures, narration, and your ratings of them.
• Purchase information: the plan or story bought, its status and dates, received from Apple, Google and RevenueCat. We never receive card or payment details.
• App usage events (for example “story opened”, “onboarding step finished”, “paywall shown”, “purchase made”), with the platform, app version, device type and model, operating system, language and country. They are recorded on our own servers and by the analytics tools in section 8. These events never contain children’s names, wishes or story text.
• Crash and performance data: what went wrong and on what kind of device, so we can fix it.
• Install source: how you found the app (for example a shared story link or the name of an ad campaign), from the store’s install referrer.
• Advertising identifier of your (the adult’s) device: Apple’s IDFA, only if you allow tracking when iOS asks, or the Android advertising ID, unless you have deleted or limited it in your device settings. It is used only to measure and improve our own advertising, as described in section 8.
• Technical logs: IP address, request times and errors, for security and troubleshooting.

Microphone (optional)

If you choose to say your story idea out loud, the app asks for microphone and speech recognition permission. Your speech is turned into text by your device’s speech service. We receive only the resulting text; we never receive or store the recording. You can refuse or revoke this permission in your device settings and type instead.

4. Data we do not collect

CozyCaper does not collect or access:

• your precise or approximate location;
• your contacts, messages, calendar or call logs;
• photos, videos or files on your device, or your camera;
• photos of your child, their surname, exact date of birth, address or school;
• the list of apps on your device, your clipboard or browsing history;
• card numbers or other payment details.

We collect only what is needed to make and deliver your stories and to run the service.

5. How we use information

• To create, store, play and sync your stories on your devices.
• To run your account, subscription and one-time purchases, and to restore them on a new device.
• To keep stories gentle and bedtime-friendly (story ideas and wishes are checked automatically).
• To understand, in aggregate, how the app is used and improve it.
• To measure and improve our own advertising: to know which campaigns bring parents to the app.
• To keep the service secure, prevent abuse and fix problems.
• To answer your messages and handle your requests.

Legal bases (where the law requires one): performing our contract with you (making the stories you ask for and running your account); our legitimate interests (security, preventing abuse, fixing crashes, improving the app); your consent where we ask for it (for example the microphone permission, tracking permission for the advertising identifier, and analytics or advertising tools where consent is required), which you can withdraw at any time; and legal obligations.

6. How stories are made (AI)

Stories are written, illustrated and narrated by artificial-intelligence services working on our behalf. To make one story we send them only what that story needs:

• These providers process the data to return the result to us, under their own business (API) terms and privacy policies, and may keep requests for a limited time, for example to detect abuse.
• We do not use your stories or your child’s details to train AI models.
• AI-generated content can contain mistakes or unexpected results. Stories are created automatically; no decision with legal or similarly significant effect is made about you or your child.

7. Who we share information with

We do not sell or rent personal information for money. Besides the AI services above, we use:

• DigitalOcean — servers and storage (United States).
• RevenueCat — subscription management; it receives an anonymous account ID and purchase details from Apple or Google.
• Apple and Google — sign-in, app stores and payments, under their own privacy policies.
• Google (Firebase) — app analytics and crash reports; see section 8.
• Meta (Facebook) and other advertising platforms where we advertise CozyCaper — to measure and optimise those campaigns; see section 8 for what they receive.

We may also disclose information when the law requires it, to protect the rights and safety of people or of the service, or as part of a transfer of the app to a new owner, who would have to respect this policy.

8. Analytics and advertising

Analytics and crash reports

To understand how the app is used and keep it stable, we use our own server statistics and two Google tools:

• Google Analytics for Firebase — app usage events, device and app information, an app-instance identifier and, where you allow it, the device’s advertising identifier.
• Firebase Crashlytics — crash reports: what went wrong (a technical trace) and on what kind of device. Crash reports are sent in every country, because we need them to fix problems; they carry no name, email or account ID and nothing you typed.

Google handles this data under the Google Privacy Policy.

Advertising

• No ads inside CozyCaper. The app does not show advertising, to you or to your child.
• We advertise CozyCaper elsewhere (for example on Facebook, Instagram and in app stores) and need to know whether those ads work. For that the app may include the Meta (Facebook) SDK and similar tools of other advertising platforms. They receive your device’s advertising identifier (where you allow it) and basic app events: that the app was installed and opened, and that a trial or purchase was made. The platforms use this to attribute installs to ads and to optimise our campaigns, under their own policies (for Meta, the Meta Privacy Policy).

What is never sent to analytics or advertising partners

Your child’s name, age or any other details about your child, your story wishes, and the content of your stories. The identifiers involved belong to the adult’s device.

Your choices

• In the EU, the European Economic Area and the UK the app asks you first, with two equally prominent choices on the same screen: “No thanks” and “Allow analytics”. Firebase Analytics, the advertising identifier and (on iPhone) the tracking request start only after you allow. You can change your answer at any time in Settings → Privacy → Usage analytics.
• In other countries analytics is on when you start using the app, as the local law allows.
• iPhone, everywhere: the advertising identifier is used only if you tap “Allow” when iOS asks for permission to track. Change it in Settings → Privacy & Security → Tracking.
• Android: delete or reset your advertising ID in Settings → Privacy → Ads.
• Saying no does not limit any feature of the app.

To know whether to ask, our server works out your country from your IP address using a database kept on our own server; the address is not sent to anyone or stored for this.

9. Shared story links

Sharing is optional and is your decision. If you share a story, anyone who has the link can read and listen to it on the web, and the page shows the story as written, which may include your child’s first name and pictures. You are responsible for whom you send the link to, and we cannot control where it is forwarded. You can stop sharing in the app at any time; deleting the story or your account also makes the link stop working.

10. Subscriptions and purchases

Subscriptions and one-time purchases are sold and billed by Apple (App Store) or Google (Google Play). We do not store or process payment information. We receive only the purchase status needed to unlock the app. Prices, trials, renewal, cancellation and refunds are described in the Terms of Use.

11. How long we keep data

• Account, children and stories: until you delete them or your account.
• Deleted stories and children: removed from the app immediately.
• Deletion and export requests: completed within 30 days.
• App usage events: kept for statistics; after your account is deleted they are no longer linked to you.
• Purchase records: also kept by Apple, Google and RevenueCat under their own rules, for example for tax and refunds.
• Technical logs: kept for up to 90 days.

12. Deleting your data

Uninstalling the app does not delete your account or stories. To remove everything, use one of these:

• in the app: Settings → Delete account (recommended, immediate);
• our account deletion page;
• an email to alinqapps@gmail.com.

Deletion permanently removes your account, children’s profiles, stories, pictures and audio and cannot be undone. Deleting your account does not cancel a store subscription. Cancel it in the App Store or Google Play.

13. Your rights

You can ask us to: tell you what information we hold about you; give you a copy of it; correct it; delete it; restrict or object to certain uses; and withdraw consent you gave. Much of this you can do yourself in the app. For anything else, write to alinqapps@gmail.com. We answer within 30 days and may need to confirm that the request comes from the account holder. We will not treat you differently for exercising your rights.

14. EU, UK and California

European Economic Area and United Kingdom (GDPR)

You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw consent, and the right to complain to your local data protection authority. The legal bases we rely on are listed in section 5.

California (CCPA / CPRA)

In the last 12 months we have collected the categories described in section 3: identifiers (name, email, account ID, IP address), information you enter about your family, purchase information, and app activity. We collect them from you and from Apple, Google and RevenueCat, for the purposes in section 5, and disclose them only to the service providers in sections 6 and 7. Identifiers also include the device’s advertising identifier, where you allow it. We do not sell personal information for money. Passing the advertising identifier and app events to advertising platforms to measure and optimise our campaigns (section 8) may count as “sharing” under California law; you can opt out at any time by turning off tracking or resetting the advertising ID in your device settings, or by writing to us. California residents can request to know, correct or delete their information, and will not be discriminated against for doing so.

15. Security

Data travels over encrypted connections (HTTPS), story media links are signed and expire, access to our systems is restricted, and administrative actions on personal data are logged. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your device and your Apple or Google account secure, and for who has access to your device.

16. Where data is processed

Our servers are in the United States, and our service providers may process data in other countries. By using CozyCaper you understand that your information is transferred to and processed in those countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses.

17. Third-party services

Apple, Google (including Firebase), Meta, RevenueCat and the AI providers handle data under their own terms and privacy policies, which we do not control. The app stores and any external links you open are governed by their own policies.

18. Policy updates

We may revise this policy because of new features, legal changes or improvements to our practices. The date below shows the latest version, and we will tell you in the app about important changes. By continuing to use CozyCaper after an update, you accept the updated policy.

19. Contact

Questions, requests or concerns about your data: alinqapps@gmail.com.

Effective date: 1 October 2026

IP Geolocation by DB-IP