PILLOWBOOK
Privacy Policy.
Who we are
Pillowbook is built by CodeEnsis Ltd. ("we", "us"), a company registered in Cyprus. You can reach us at [email protected].
Who this is for
Pillowbook is designed for the parent or guardian who reads the tales aloud. We never ask a child to enter anything.
What we collect
The tales are fixed text and fixed artwork, shipped with the app or downloaded from our servers. The app does not ask for your child's name, age, or anything else about them, and we do not collect photos, audio, video, contacts, or location.
On first launch the app creates an anonymous account through Firebase Authentication: no email, no password, no name. Your purchase and your settings are tied to that account.
Versions up to 1.1.13 also offered Sign in with Apple and Sign in with Google; from version 1.1.14 the app no longer offers them. If you signed in that way, we received the email address the provider gave us, and the display name if it sent one. They are still stored against that account, used only to recognise it, until you ask us to delete it.
A few technical values are stored against the account: when it was created, whether the evening reminder is on, a notification token if your phone lets Pillowbook send notifications, and your device's time zone, so a reminder arrives in the evening where you actually are rather than where our servers are.
When you open a tale you have bought, the app asks our server for its pictures, and the server checks your purchase with RevenueCat before handing them over. Which tales you open and how far you read is kept on your device.
Stories made by earlier versions
Earlier versions of Pillowbook could write a story about your own child. Those stories were generated by an AI model (through OpenAI's API, under a data-processing agreement that excludes API traffic from model training) from a profile you set up: your child's first name, age, story language, interests, and optional extras. The current version no longer writes stories and no longer asks for a profile.
If you made stories with an earlier version, they and the profile they were made from are still stored against your account, so the stories stay in your library and can be restored on a new phone. Deleting your account removes them, as described below.
Who we share it with
Firebase (Google) provides the anonymous account, storage, crash reporting, and basic usage analytics, such as which screens are opened and which tales are read, so we can tell what works. Analytics are not used for advertising. Apple or Google handles payment directly through the App Store or Play Store; we never see your card details. RevenueCat keeps the record of what your account has bought. We share nothing else with anyone.
Purchases
The tales collection is a one-time purchase, billed and managed entirely through your Apple or Google account. We only receive confirmation of what you are entitled to, never your payment details. Earlier versions also sold an annual subscription; if you still have one, you manage or cancel it in your Apple or Google subscription settings.
Children's privacy
Pillowbook is designed for a parent or guardian to read from to a child. The app does not require the child to interact with it, and we do not knowingly collect personal information from a child under 13. If you believe we have, contact us and we will delete it.
The waitlist, which is closed
Before Pillowbook was released this website collected email addresses for a waitlist. That form is gone. Addresses gathered through it, along with the product signed up for and the time and IP of signup, are kept only to send the launch notice and are deleted within 90 days of release. Reply "unsubscribe" to any of those emails to be removed sooner, or write to us and we will remove the address the same way.
Your choices
Reminders can be turned off at any time in Settings. To have everything we hold deleted, including any stories and profile left from an earlier version, write to [email protected]; how to delete your data explains what to include so we can find your record, and we remove it within 30 days. Versions up to 1.1.13 also have Settings → Delete account, which deletes it immediately.
Changes
If this policy changes in a way that matters, we'll show a notice in the app before it takes effect, and summarize the change here with a new date.
Contact
CodeEnsis Ltd. ยท [email protected]