Privacy Policy

1. Introduction

This Privacy Policy explains how Bedtime Lens: Photo Stories ("Bedtime Lens", "the App", "we", "us") collects, uses, and protects information when you use the App. Bedtime Lens is operated by Yevhenii Nimenko, an independent developer (the "Operator").

Bedtime Lens turns a few of your family photos into a short, calm bedtime story for children, using AI to identify what is shown in each photo and then generate a story from the items you confirm.

We designed the App to work with as little personal data as possible. The short version:

• No account is required. You never give us your name, email address, or password.
• Your photos are not stored on our servers. They are processed to identify what is in them and then discarded.
• No advertising, no tracking, no analytics SDKs. We do not sell or share your data with advertisers, and the App contains no third-party ad or analytics trackers.

2. Information We Collect

2.1 Anonymous identifier

When you first launch the App, our backend creates a random anonymous user ID for your installation. It is not derived from your name, email, phone number, Apple ID, or device serial number, and we cannot use it to identify you in the real world. It exists so the App can find your saved stories and your subscription status.

2.2 Photos (processed, not stored)

To create a story, you select 3–8 photos from your photo library or camera. Each photo is:

1. transmitted to our backend over an encrypted connection (TLS);
2. passed to our AI provider (OpenAI) to identify the main subject (for example, "Tabby Cat");
3. discarded. We do not save your photos on our servers, and they are never written to any database or storage bucket we operate.

We do not perform facial recognition, face matching, or any biometric analysis, and we do not use your photos to train AI models.

2.3 Photo detection results

For each processed photo we store the text output of the identification step: a short label, a category (e.g. "animal", "toy"), a one-sentence description, gentle story hints (mood, setting), and — if you correct the AI's guess — the name you typed. This text is linked to your anonymous user ID.

Because you can type any name when correcting a guess (for example, your pet's or child's nickname), that text is stored as part of the detection result and the story. Please only enter information you are comfortable including in a story.

2.4 Generated stories

We store the stories the App generates for you — title, story text, the storytelling mode you chose, the confirmed items the story was built from, and, when provided, the story language and the child age setting used to tune vocabulary. Stories are linked to your anonymous user ID so your library works.

2.5 Subscription status

If you subscribe, the purchase itself is handled entirely by Apple. We never see your payment card, billing address, or Apple ID credentials. To unlock premium features, we receive and store your entitlement status (active/inactive, plan identifier, expiry date) from our subscription-management provider, RevenueCat, linked to your anonymous user ID.

2.6 Usage counters and technical data

To operate the free tier and protect the service from abuse, we store:

• how many stories your anonymous user has generated, and whether the free story has been used;
• coarse, short-lived rate-limiting counters, which may temporarily reference your IP address. These counters exist only to throttle excessive requests and are routinely cleared; we do not use IP addresses to profile you or determine your precise location;
• standard server logs and error reports needed to keep the service running securely.

2.7 Support communications

If you email us, we receive your email address and whatever you include in the message. We use it only to respond to you.

3. Information We Do NOT Collect

We do not collect: your name, email address (unless you email us), phone number, contacts, precise location, browsing history, advertising identifiers, government identifiers, or biometric data. We do not run third-party analytics, advertising, or social-media SDKs in the App.

4. How We Use Information

We use the information described above solely to:

• identify photo subjects and generate the bedtime stories you request;
• keep your story library and subscription status working across sessions;
• enforce the free-tier limit and prevent fraud and abuse (rate limiting, quota checks);
• automatically screen story inputs and outputs with moderation technology to keep content child-appropriate;
• diagnose and fix technical problems;
• comply with legal obligations.

We do not use your data for advertising, we do not sell it, and we do not share it with data brokers.

For users in the European Economic Area and the United Kingdom, our legal bases are: performance of a contract (providing the App and your subscription), legitimate interests (service security, abuse prevention, and troubleshooting), and consent where required (e.g. access to your photo library, which iOS asks you to grant).

5. AI Processing and Service Providers

We share data only with the service providers required to run the App, and only for the purposes below:

OpenAI processes data as our service provider under its API terms: API data is not used to train OpenAI's models, and inputs may be retained by OpenAI for a limited period (typically up to 30 days) solely for abuse and misuse monitoring before deletion.

Each provider is bound by its own privacy commitments; none of them is permitted to use your data for advertising on our behalf.

6. Children's Privacy

Bedtime Lens is made for parents and guardians — adults create the stories; children only enjoy the result. The App is not directed at children, and children should not use it unsupervised.

• We do not allow children to create accounts (there are no accounts at all) or make purchases.
• We do not knowingly collect personal information from children. The optional child age setting is a number used only to tune story vocabulary; it is not linked to any real-world identity.
• Photos you select may include your children. Those photos are processed transiently as described in Section 2.2 — never stored, never used for facial recognition or AI training. The AI is instructed not to identify real people by name and not to infer sensitive information.
• You control every input: you choose the photos, confirm or correct every identification, and can avoid entering real names entirely.

If you believe a child has provided us personal information without parental consent, contact us at the address below and we will delete it.

We aim to comply with the U.S. Children's Online Privacy Protection Act (COPPA), the EU GDPR (including its provisions on children's data), and other applicable children's-privacy laws.

7. Data Retention

• Photos: not retained (see Section 2.2).
• Detection text and stories: retained so your library keeps working, until you ask us to delete them or we remove them during routine cleanup of inactive data.
• Rate-limiting counters: short-lived and routinely purged.
• Subscription records: retained while relevant for entitlement, accounting, and audit purposes.
• Support emails: retained as long as needed to handle your request.

Note: because the App uses anonymous identifiers, deleting the App from your device breaks the link between you and your data on our servers; the orphaned data is then subject to routine cleanup.

8. Your Rights

Depending on where you live (e.g. GDPR in the EEA/UK, CCPA/CPRA in California), you may have the right to access, correct, delete, or receive a copy of your data, to object to or restrict certain processing, and to lodge a complaint with your supervisory authority. We do not "sell" or "share" personal information as defined by the CCPA.

To exercise any right, email us at the address below. Because we hold no name or email for you, we may ask for information from your installation (such as the anonymous user ID shown in the App's settings, where available) to locate your data. We respond within the timelines required by applicable law.

9. Security

All traffic between the App, our backend, and our providers is encrypted in transit (TLS). AI provider keys are stored only on the server, never in the App. Database access is restricted with row-level security so each anonymous user can read only their own data, and all writes go through our controlled backend. No method of transmission or storage is 100% secure, but we work to protect your data with industry-standard measures appropriate to an app of this kind.

10. International Data Transfers

Our service providers may process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses or an adequacy framework the provider participates in.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated through the App or our website before they take effect. Continued use of the App after changes take effect means you accept the updated policy.

12. Contact

Yevhenii Nimenko — Operator, Bedtime Lens: Photo Stories Email: support@bedtimelens.com Website: https://bedtimelens.com