Privacy Policy
Last updated: January 2026
1. Introduction
SleepyScroll ("we," "our," or "us") is committed to protecting the privacy of our users, especially the children who enjoy our bedtime stories. This Privacy Policy explains how we collect, use, and safeguard information when you use our mobile application and website.
2. Information We Collect
Account Information
- Email address (for account creation and communication)
- Subscription status and credit balance
Note: Passwords are managed securely by our authentication provider (Supabase) and are never accessible to SleepyScroll.
Story Data
- Story prompts you provide
- Generated stories associated with your account
- Favorite stories and preferences
3. How We Use Your Information
- To generate personalized bedtime stories
- To manage your account and subscription
- To ensure content safety through moderation
4. Children's Privacy (COPPA Compliance)
SleepyScroll is designed for use by parents and guardians with their children. We take children's privacy seriously:
- We do not knowingly collect personal information directly from children under 13
- All accounts must be created by a parent or guardian who is at least 18 years old
- Story prompts are moderated to ensure child-safe content
- We do not display advertising to children or share children's data with advertisers
- Parents can request deletion of their family's data at any time
5. Content Safety
All story prompts are screened through OpenAI's content moderation system before story generation. This ensures that all generated content remains appropriate for young children. We employ strict filters to prevent scary, violent, or inappropriate content from being created.
6. Data Storage and Security
Your data is stored securely using industry-standard practices:
- All data is encrypted in transit (TLS/SSL)
- Passwords are hashed using secure algorithms
- We use Supabase for secure database hosting with row-level security
- Regular security audits and updates
7. Third-Party Services
We use the following third-party services:
- Supabase - Authentication and database
- OpenAI - Story generation and content moderation
- Vercel - API hosting
- Apple App Store - App distribution and payments
8. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Export your data
- Opt out of marketing communications
9. Data Retention
We retain your account data for as long as your account is active. Stories are kept indefinitely unless you delete them or your account. Upon account deletion, all associated data is permanently removed within 30 days.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the app. Continued use of SleepyScroll after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at: