# SleepBuddy Privacy Policy

Last updated: May 26, 2026

SleepBuddy is operated by Benjamin Iheukumere / SafeLink IT ("SleepBuddy", "we", "us"). This policy explains how the SleepBuddy Android app and the SleepBuddy server process data.

Contact: b.iheukumere@safelink-it.com

## 1. What SleepBuddy Does

SleepBuddy is a parents' app for creating, saving and playing personalized bedtime stories. It is not a child chat app. Parents control profile creation, story generation, subscriptions and feedback.

## 2. Data We Process

SleepBuddy may process the following data, depending on how you use the app:

- Child profile information entered by a parent, such as first name, nickname, age, interests, favorite animals, favorite places, fears, avoid-list items, friends and relatives.
- Story inputs entered by a parent, such as selected language, story length, mood, topic, prompt details and advanced composer fields.
- Generated content, including story text, audio generation input/output metadata and story artwork metadata.
- Subscription and entitlement data, including Google Play product ID, plan, credit balance, purchase verification result, renewal state, expiry state and hashed purchase-token references.
- Coupon data, including coupon activation state and server-side credit balance.
- App and device metadata needed for entitlement, abuse prevention and troubleshooting, such as app instance ID, device key, app version, operating system, device model, request IDs, error codes and timing information.
- Diagnostic and outcome reports, including whether story text, audio or artwork generation succeeded or failed and the relevant non-secret prompt/story metadata needed to troubleshoot failures.
- Optional feedback submitted by a parent, including star rating, written feedback, the related story, prompt metadata and device context.
- Server security logs, including request path, status code, hashed IP-related signals, rate-limit events, rejected requests and security events.

We do not collect payment card details. Payments and subscriptions are handled by Google Play.

## 3. Local Storage on the Device

SleepBuddy stores app data locally on the device, including child profiles, saved stories, cached audio files, cached artwork, settings and app-lock state.

Where supported by the platform, sensitive app secrets and identifiers are stored using Android secure storage mechanisms. Stories, audio and artwork may also be included in normal device backups if the operating system backup feature is enabled.

## 4. Server Processing

For production subscription builds, SleepBuddy uses a server-side proxy to:

- verify Google Play subscriptions and renewals;
- enforce story credits and plan duration limits;
- generate story text, narration audio and artwork through configured AI providers;
- prevent misuse, abuse and excessive API cost;
- receive diagnostic reports and story outcome reports;
- provide the internal admin dashboard used to operate the service.

The production OpenAI API key is stored server-side and is not included in the mobile app.

## 5. AI Processing

SleepBuddy uses OpenAI API services to create story text, narration audio and story artwork.

The app and server minimize what is sent for generation. For story generation, profile details are reduced where possible, and exact age is represented as an age bucket. However, when parents request personalized narration, the final story text may include real first names or family/friend names provided by the parent so the audio can sound natural.

Generated stories, prompts, audio inputs and artwork prompts may be processed by OpenAI only to provide the requested app functionality. We do not use this data for advertising.

OpenAI's own API data handling terms and privacy practices may apply to its processing as an external service provider.

## 6. Google Play Processing

Subscriptions are purchased and managed through Google Play. Google Play may process purchase data, payment data, subscription status, account data and device data according to Google's policies.

SleepBuddy receives only the information needed to verify and manage subscription entitlement, such as product IDs, purchase verification results, renewal status and expiry status. Purchase tokens are not stored in plaintext by SleepBuddy; server records use hashed references where possible.

## 7. Why We Process Data

We process data to:

- create personalized bedtime stories requested by parents;
- generate and cache narration audio and story artwork;
- save and display the local story library;
- manage subscriptions, free-tier credits and coupons;
- restore entitlements after reinstall or device changes;
- prevent abuse, fraud, quota bypass and excessive API costs;
- diagnose failed text, audio or artwork generation;
- improve story quality based on optional parent feedback;
- secure the service and comply with legal obligations.

For users in the European Economic Area, the legal bases may include contract performance, legitimate interests in security and service operation, consent where required, and compliance with legal obligations.

## 8. Children's Privacy

SleepBuddy is designed for parents and guardians. Children should not use the app unsupervised.

Parents decide which child profile details are entered. We intentionally avoid collecting more information than needed to personalize bedtime stories. We do not knowingly create accounts for children, target ads to children, or operate an open child chat feature.

If you believe child data was entered without appropriate parental authority, contact us at b.iheukumere@safelink-it.com and we will review the request.

## 9. Sharing of Data

We do not sell personal data.

We may share or process data with:

- OpenAI, for story text, narration audio and artwork generation;
- Google Play, for subscriptions, purchases, license testing and real-time subscription notifications;
- infrastructure, hosting, backup and security providers needed to operate the SleepBuddy server, WAF, TLS endpoint, monitoring and database backups;
- legal or regulatory authorities if required by law.

We do not use third-party advertising SDKs or analytics SDKs in the app.

## 10. Retention

Local app data remains on the device until the parent deletes it, deletes individual stories, resets the app, uninstalls the app, or restores/replaces the device from a backup.

Server-side subscription, coupon, diagnostic, feedback, usage and security records are retained only as long as needed for operation, troubleshooting, abuse prevention, accounting, legal compliance and product improvement. We may keep aggregated or anonymized statistics for longer.

Diagnostic records should not contain secrets such as API keys or full Google Play purchase tokens. If a diagnostic report accidentally contains sensitive data, we may delete or redact it.

## 11. Security

SleepBuddy uses technical and organizational safeguards intended to protect data, including:

- HTTPS transport;
- server-side entitlement checks;
- no production OpenAI key in the mobile app;
- secure local storage for app secrets where supported;
- hashed references for sensitive tokens where practical;
- request rate limits and abuse detection;
- server-side budget and quota guardrails;
- restricted internal admin dashboard access;
- no plaintext logging of API keys or full purchase tokens.

No system can be guaranteed to be perfectly secure. If you believe you found a security issue, contact b.iheukumere@safelink-it.com.

## 12. Your Choices and Rights

Inside the app, parents can delete stories, delete profiles, remove local data and manage subscription status through Google Play.

Depending on your location, you may have rights to access, correct, delete, restrict or object to certain processing of your personal data. You may contact us at b.iheukumere@safelink-it.com to make a privacy request.

Subscriptions can be managed or cancelled in your Google Play account.

## 13. International Processing

SleepBuddy may process data in the European Union, the United States and other countries where our service providers operate. Data protection laws may differ from those in your country.

## 14. Changes to This Policy

We may update this policy when SleepBuddy changes. The "Last updated" date will show the current version. Material changes may also be communicated in the app or through the Google Play listing where appropriate.

## 15. Contact

Benjamin Iheukumere / SafeLink IT  
Email: b.iheukumere@safelink-it.com