PILLOWBOOK

Privacy Policy.

Last updated: 2 August 2026

The short version. Every Pillowbook story is generated by AI from what you tell us about your child - it is not written or reviewed by a person. We don't ask for photos, we don't track your child, and we never sell your data. Pillowbook is currently in closed beta (TestFlight / Play internal testing); if you're on the waitlist, your email is used only to invite you and to tell you when the app is publicly available.

Who we are

Pillowbook is built by CodeEnsis Ltd. ("we", "us"), a company registered in Cyprus. You can reach us at [email protected].

Who this is for

Pillowbook is designed for the parent or guardian who sets up the profile and reads the stories - your child is the subject of the stories, not the user of the app. We never ask a child to enter anything themselves.

How your stories are made

Every bedtime story in Pillowbook is generated automatically by an AI model (via OpenAI's API), using the profile you set up - your child's name, age, and interests. Stories are not written or reviewed by a person before they reach your device. Each night's story is new; nothing is drawn from a stock library.

What we collect

When you set up a profile, you tell us your child's first name, age, interests, and - optionally - one thing they're scared of and a favorite stuffed animal or character. We do not ask for or store photos, audio, video, or your child's location. We do not collect your email or a password to use the app itself - it signs you in anonymously through Firebase Authentication. (If you joined the waitlist on this website before the app existed, see "The waitlist" below for what that separate signup collects.)

How we use it

Your child's profile is sent to our story-generation service each night to write a new, personalized story, and is stored - tied to your anonymous device account - so past stories stay in your Library. We never sell this information or use it to build an advertising profile.

Who we share it with

Story text is generated through OpenAI's API under a data-processing agreement that excludes API traffic from model training. Firebase (Google) provides authentication, storage, crash reporting, and basic usage analytics - analytics events are never tagged with your child's name or profile details. If you subscribe, Apple or Google handles payment directly through the App Store or Play Store; we never see your card details, and RevenueCat manages your entitlement without seeing your child's profile.

Subscriptions

Pillowbook offers an optional annual subscription, and a one-time purchase that unlocks the shelf of classic tales. Both are billed and managed entirely through your Apple or Google account. We only receive confirmation of your entitlement, never your payment details.

Children's privacy

Pillowbook is designed for a parent or guardian to use on behalf of a child. The app does not require the child to interact with it, and we do not knowingly collect personal information directly from a child under 13. If you believe we have, contact us and we will delete it.

The waitlist (this website)

Separately from the app, if you join the email waitlist on this website we store the email address, the product you signed up for, and the time/IP of signup for spam protection. We use it only to send a small number of emails (confirmation, beta invite, launch notice) and delete the list within 90 days of launch unless you've opted into a separate newsletter. Reply "unsubscribe" to any of those emails to be removed.

Your choices

You can edit or clear any profile field at any time from Settings. To delete everything, use Settings → Delete account in the app — it is immediate and permanent. If you have already uninstalled it, see how to delete your account and we'll remove your record within 30 days.

Changes

If this policy changes in a way that matters, we'll show a notice in the app before it takes effect, and summarize the change here with a new date.

Contact

CodeEnsis Ltd. · [email protected]