PILLOWBOOK
Privacy Policy.
Who we are
Pillowbook is built by CodeEnsis Ltd. ("we", "us"), a company registered in Cyprus. You can reach us at [email protected].
Who this is for
Pillowbook is designed for the parent or guardian who sets up the profile and reads the stories - your child is the subject of the stories, not the user of the app. We never ask a child to enter anything themselves.
How the stories are made
There are two kinds of story in Pillowbook, and they are made in completely different ways.
The classic tales are fixed text and fixed artwork, retold and illustrated by us and shipped with the app. Reading one sends us nothing about your child, and needs no account. They are the same for every reader.
A story about your own child is generated automatically by an AI model (via OpenAI's API) from the profile you set up: first name, age, language, interests, and the optional extras below. It is not written or reviewed by a person before it reaches your device, and each one is new rather than drawn from a stock library.
What we collect
You can read the free tale without telling us anything. A profile is only needed for a story about your own child, and it holds their first name, age, story language, interests, and optionally whether they are a boy or a girl, one thing they are scared of, and a favourite toy or character. We do not ask for or store photos, audio, video, or your child's location.
The app signs you in anonymously through Firebase Authentication on first launch. No email and no password. You can later choose Sign in with Apple or Sign in with Google so a purchase survives a lost phone, and only then do we receive the email address that provider gives us, along with the display name if it sends one. That is your address, not your child's, and it is used to recognise the account and nothing else.
Two technical values are stored against the account: a notification token, if you turn on the evening reminder, and your device's time zone, so a reminder arrives in the evening where you actually are rather than where our servers are.
How we use it
Your child's profile is sent to our story-generation service when you ask for a story, and is stored against your account so past stories stay in your library and can be restored on a new phone. We never sell this information and never use it to build an advertising profile.
Who we share it with
Story text is generated through OpenAI's API under a data-processing agreement that excludes API traffic from model training. Firebase (Google) provides authentication, storage, crash reporting, and basic usage analytics - analytics events are never tagged with your child's name or profile details. If you subscribe, Apple or Google handles payment directly through the App Store or Play Store; we never see your card details, and RevenueCat manages your entitlement without seeing your child's profile.
Subscriptions
Pillowbook offers an optional annual subscription, and a one-time purchase that unlocks the shelf of classic tales. Both are billed and managed entirely through your Apple or Google account. We only receive confirmation of your entitlement, never your payment details.
Children's privacy
Pillowbook is designed for a parent or guardian to use on behalf of a child. The app does not require the child to interact with it, and we do not knowingly collect personal information directly from a child under 13. If you believe we have, contact us and we will delete it.
The waitlist, which is closed
Before Pillowbook was released this website collected email addresses for a waitlist. That form is gone. Addresses gathered through it, along with the product signed up for and the time and IP of signup, are kept only to send the launch notice and are deleted within 90 days of release. Reply "unsubscribe" to any of those emails to be removed sooner, or write to us and we will remove the address the same way.
Your choices
You can edit or clear any profile field at any time from Settings. To delete everything, use Settings → Delete account in the app — it is immediate and permanent. If you have already uninstalled it, see how to delete your account and we'll remove your record within 30 days.
Changes
If this policy changes in a way that matters, we'll show a notice in the app before it takes effect, and summarize the change here with a new date.
Contact
CodeEnsis Ltd. · [email protected]