Privacy Policy

Napuki ("we", "us") is a bedtime story app for families. This policy explains what data we collect, why we collect it, and the choices you have. The short version: we collect only what we need to create your family's stories, we never sell your data, and you can delete everything at any time.

Who we are

Napuki ("we", "us") operates the Napuki app and website and is the controller of the personal data described here. For any privacy question or request, contact us at support@napukiapp.com.

Who Napuki is for

Napuki is designed for parents and legal guardians. Accounts can only be created and managed by adults. Children use Napuki together with, and under the supervision of, the parent who owns the account.

Data we collect

Account information

Your email address and authentication credentials, used to sign you in and contact you about your account.

Child profile information

The first name (or nickname), date of birth (used to calculate your child's age), gender, interests, and avatar preferences you choose to enter when creating a child profile. If you add siblings or other family members to a story, the names, ages, and genders you enter for them are used the same way. This information is used solely to personalize stories. We recommend using a nickname — a real name is never required.

Parent voice recordings

If you choose to use the voice narration feature, we collect short voice recordings of you, the parent — never of your child. These recordings are used to create a synthetic voice model that narrates stories in your voice. Voice cloning is strictly opt-in.

Story content

The stories, illustrations, and audio generated for your family, stored so you can replay them.

Usage and device data

Basic technical data (device type, app version, crash logs) needed to keep the app working reliably. We do not use third-party advertising trackers.

Notifications

If you turn on reminders, we store your device's push notification token and your reminder schedule so we can send bedtime reminders and let you know when a story is ready.

Feedback and ratings

If you send feedback or rate a story, we store your message or rating along with basic context (such as app version, platform, and OS version) to help us improve.

How we use your data

• To generate personalized stories, illustrations, and narrated audio.
• To operate your account, subscription, and story library.
• To fix bugs and keep the service secure.
• To respond when you contact support.

We do not sell your data, and we do not show ads.

Service providers

We rely on a small set of trusted providers that process data on our behalf — only as needed to run Napuki, and under agreements that forbid using your data for their own purposes:

• OpenAI — generates story text and cover illustrations. We send only what's needed, such as your child's first name, age, and story preferences.
• Cartesia — generates narration audio and, if you use voice narration, builds and stores the synthetic voice model from your recordings.
• RevenueCat, with the Apple App Store and Google Play — process your subscription and purchases.
• Supabase — handles sign-in and authentication.
• Cloudflare R2 — stores your generated stories, illustrations, audio, and voice samples.
• Expo — delivers push notifications.
• Resend (via Amazon SES) — sends account and support emails.
• Sentry — collects crash and error reports so we can fix problems.

Our AI providers (OpenAI and Cartesia) are not permitted to use your data to train their models under our agreements with them. We do not sell your data, and we do not show ads.

Our website

Our website (napukiapp.com) does not use analytics, advertising, or tracking cookies. It loads fonts from Google Fonts, which means Google may receive your IP address in order to deliver those fonts.

Storage and security

Your data is stored with industry-standard encryption in transit and at rest. Access is restricted to what is necessary to operate the service.

Retention and deletion

We keep your data only while your account is active. You can delete individual child profiles, voice models, or stories at any time from the app; deleting a voice model also removes it from our voice provider. To delete your entire account and all associated data — including child profiles, voice recordings, voice models, and stories — email us at support@napukiapp.com. We complete account deletions within 30 days.

Children's privacy (COPPA)

Napuki is directed at parents, not children, and we do not knowingly collect personal information directly from children under 13. All child-related information — a first name or nickname, date of birth, gender, interests, avatar preferences, and any details you enter about siblings — is provided by the parent, with the parent's consent, for the sole purpose of personalizing stories. Voice recordings are always of the parent. If you believe a child has provided us personal information directly, contact us and we will delete it.

Your rights

Depending on where you live (including under GDPR, CCPA, and LGPD), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. You can exercise these rights from the app or by emailing support@napukiapp.com. We respond to all requests within 30 days.

International transfers

Our servers and providers are located in the United States. By using Napuki you understand your data is processed there, protected by the safeguards described above.

Changes to this policy

If we make material changes, we will notify you in the app or by email before they take effect.

Contact

Questions? Email us at support@napukiapp.com.