Hushward privacy policy
Version: 6 October 2026. Magyar változat
Hushward is an app for adults who create bedtime stories for children. This policy explains what personal data Hushward processes, why, who receives it, how long it is kept and what your rights are. It covers the Hushward app for iPhone and Android and the website hushward.app.
The short version
- We ask only for your email address: no name, no password, no child profile.
- To write a story we send your request to OpenAI, including the child's age you set and a hero's name if you add one. Your stories are saved on your phone, not by us. Our server holds a finished story only until your phone confirms it arrived, for at most 24 hours.
- OpenAI keeps requests for up to 30 days to detect abuse and does not use them to train its models. ElevenLabs narrates stories and, only if you choose, makes an AI copy of your own voice. Neither may use your data to train its models.
- No advertising, no selling of data, no tracking across apps or websites.
- Please use invented names, and leave out real names, schools, health details and anything else that identifies a child.
- You can delete your account in the app at any time.
1. Who is responsible
The controller of your personal data is Pere Tamás egyéni vállalkozó (sole proprietor, e.v.), trading as Hushward.
- Registered seat: 1133 Budapest, Pannónia utca 87. 6. emelet 21. ajtó
- Registration number: 62628505, in the register of sole proprietors kept by NAV, the Hungarian tax authority; tax number: 92250107-1-41
- Email: privacy@hushward.app; phone: +36 30 217 4794
We have not appointed a data protection officer because the law does not require one for Hushward. Write to us directly with any question about this policy.
2. What we process and why
Your account
Your email address, an account ID, when you signed up and last signed in, and the app language you chose, so that sign-in emails arrive in your language. For each signed-in session we record the device type, IP address and times, and we keep a short security log of sign-in events. One-time sign-in codes are emailed to you through Scaleway.
Why: to give you an account and keep it secure.
Creating stories
When you ask for a story, we send OpenAI your story subject, the child's age you set (2 to 12), the reading length, the story language and the options you chose, a hero's name if you add one, and the saved character (name, traits, world) when you continue a story. OpenAI writes the story and checks your subject and the finished story for suitability. For the illustration, OpenAI receives a short description of a scene from the story, written without names.
We do not save your subjects or stories in our database. Each finished story and its illustration waits on our server until your phone confirms it arrived, for at most 24 hours, so a story interrupted by a lost connection still reaches you.
We record that a story was requested, with its length, time and outcome but no content, to apply your allowance and keep the service reliable. We also count the AI usage each story causes, such as the model and amount used, without content, to manage our costs.
Before your first story we ask you to allow AI sharing. We remember which version of that notice you accepted and when you last decided. If you do not allow it, or withdraw it, no new stories can be created; stories saved on your phone stay available.
Why: to write the stories you ask for, keep them suitable for children and prevent misuse.
Story ideas
The app can suggest story subjects. They come from a shared list prepared without any information about you.
Reporting a story
If you report a story, we receive a copy of the story as it is, its title, your subject, any reason you give and your account ID, so that we can review it.
Why: to find and fix unsuitable stories.
Feedback
If you send feedback, we receive your message, the category you picked, a reply address if you give one, the app version, platform, system version and app language, and your account ID.
Why: to read your message and reply if you asked us to.
Narration (on plans that include it)
To narrate a story we send its text and the narrator you chose to ElevenLabs, which returns the audio. The audio is saved on your phone. ElevenLabs keeps the text and audio in our account's history, so that we can resend a recording you paid for if it did not reach your phone. Narrations in a stock voice stay there while you have an account and are deleted within a day after you delete it; narrations in your own voice are deleted from ElevenLabs a day after they are made, or sooner if your voice is deleted. We keep a record of each narration, with a fingerprint (hash) of the text, the narrator, the minutes used and ElevenLabs' reference numbers, but never the text itself.
Why: to provide the narration you asked for.
Your own voice (Premium, if available)
If you choose to record your voice, your one-minute recording is sent to ElevenLabs. It transcribes the recording so we can check that it contains the agreement, the five words shown and a single voice, then makes an AI copy of your voice. We keep the recording in private storage and the voice copy at ElevenLabs. Only your account can use your voice. We also record which version of the agreement you read, in which language and when.
Why: because you asked for it, with your consent, which you give by reading the agreement aloud. You can withdraw it at any time by deleting your voice.
Purchases (if available)
Subscriptions and minute packs are sold through the App Store or Google Play, which handle payment. RevenueCat helps us confirm purchases: it receives your account ID and your purchase history from the store. We keep your plan, purchase and renewal dates, store transaction numbers and minute balances. If you delete your account, RevenueCat keeps that purchase history under the random account number, with no email or name, so that one purchase cannot be claimed again by another account. We delete it if you ask.
Why: to give you what you bought, handle refunds and prevent fraud.
Crash reports
Crash reports are off unless you turn them on, on the Terms & privacy screen, which is also in Settings. When they are on and the app crashes or hits an error, it sends Sentry a report with the error type, where in the app's code it happened, the app version, system version and device model. Reports never contain your account ID, email, stories or anything you typed. Sentry does not store IP addresses for Hushward, and location details are removed. You can turn reports off at any time.
Why: to find and fix faults, with your consent.
Our website
When you visit hushward.app, our host processes your IP address and browser details to deliver the pages. The site uses no cookies and no analytics.
When you contact us
If you write to us, we keep the correspondence to answer you, and for complaints as long as the law requires. Email to privacy@hushward.app is forwarded to our Gmail inbox, which Google provides under its own terms and privacy policy.
3. Children
Hushward is for adults. Children should not create accounts or use the app on their own; if we learn that a child has an account, we will delete it.
We never ask for a child's name and we do not build child profiles. The age you set stays on your phone and is sent only with each story request. Your requests can still contain information about a child, so please use invented names and leave out real names, schools, health details and other identifying or sensitive information. If such information reaches us anyway, it is protected in the same way, and you can ask us to delete anything we hold.
A child has data protection rights over information about them. As their parent you can exercise these rights for them by contacting us.
4. Legal bases
Under the EU GDPR and the UK GDPR we rely on:
| What | Legal basis |
|---|---|
| Your account, sign-in, story requests and delivery, narration, purchases | Performing our contract with you, Article 6(1)(b) |
| Information about a child in a story request: age, names, other details | Legitimate interests, Article 6(1)(f): yours and ours in an age-appropriate, safe story, with the safeguards in this policy |
| Safety checks, allowances and abuse limits, security logs, usage records, story reports, feedback | Legitimate interests: keeping children safe, preventing misuse, and keeping Hushward secure, reliable and affordable |
| Crash reports | Your consent, Article 6(1)(a), which you can withdraw in the app at any time |
| Your own voice | Your consent, Article 6(1)(a), and explicit consent, Article 9(2)(a), so far as checking a recording counts as biometric processing. Hungarian law also requires your consent to record and use your voice (Civil Code 2:48) |
| Answering requests and complaints, keeping legal records | Legal obligation, Article 6(1)(c) |
Where we rely on legitimate interests you can object; see section 9.
5. Who receives your data
These providers process data for us, only on our instructions and under data processing agreements:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database, sign-in, storage, server functions | Frankfurt, Germany |
| OpenAI (our contract is with OpenAI Ireland) | Writing stories, safety checks, illustrations, story ideas | United States |
| ElevenLabs | Narration, voice copies, transcribing voice recordings | United States |
| Scaleway | Sign-in emails | France |
| Sentry | Crash reports | Germany |
| RevenueCat | Confirming purchases | United States |
| Cloudflare | Our website; forwarding email sent to privacy@hushward.app | United States and worldwide |
Apple and Google run the app stores and sell purchases under their own terms and privacy policies, as independent controllers.
We do not sell or rent your data, share it with advertisers, or let our providers use it to train AI models. We disclose data to authorities only when the law requires it.
6. Transfers outside the EU and the UK
Some providers process data in the United States. We rely on the EU–US Data Privacy Framework and its UK Extension where the provider is certified, and otherwise on the European Commission's standard contractual clauses, with the UK Addendum for UK data. Contact us for a copy of these safeguards. Transfers between the EU and the UK rely on adequacy decisions.
7. How long we keep data
| Data | Kept |
|---|---|
| Account (email, ID, dates, language), AI-sharing choice, plan and minute balances | Until you delete your account |
| Sign-in sessions | Until you sign out, the session ends or you delete your account |
| Security log of sign-in events | Up to 7 days |
| A finished story and illustration waiting for your phone | Until your phone confirms it arrived, at most 24 hours |
| Records of story requests (no content) | 90 days; your account ID is removed when you delete your account |
| AI usage records (no content) | 13 months; your account ID is removed when you delete your account |
| Story reports and feedback | 90 days; deleted at once if you delete your account |
| Narrations in a stock voice at ElevenLabs | While you have an account; deleted within a day after you delete it |
| Narrations in your own voice at ElevenLabs | A day after they are made, or until your voice or your account is deleted if sooner |
| Narration records (no text) | Kept; your account ID is removed when you delete your account |
| Your voice recording and voice copy | Until you delete your voice, your Premium plan ends or you delete your account |
| Record of the voice agreement you read | Until you delete your account |
| Purchase events from the stores | 400 days, or until you delete your account if sooner |
| Purchase records at RevenueCat | Kept under a random account number after you delete your account; deleted if you ask |
| Crash reports | Up to 90 days |
| Requests at OpenAI | Up to 30 days, longer only where the law requires it or for content OpenAI identifies as abusive |
| Transcription logs at ElevenLabs | Under ElevenLabs' own retention rules |
| Scaleway's log of the sign-in emails we send you (address, subject, delivery) | Under Scaleway's own retention rules; deleted if you ask |
| Database backups | Overwritten within 7 days |
| Your requests and complaints to us | 3 years |
8. What stays on your phone
Saved stories, characters, illustrations and narration audio, the child's age and story choices, reading settings, your goodnight phrase, narrator choices, recent story ideas, your sign-in and your AI-sharing status are stored on your phone. We cannot see or delete them. To remove them use Settings → Clear this device, sign out, or uninstall the app. Deleting your account does not remove them, because other people may use the same phone.
9. Your rights
You have the right to access your data, have it corrected, have it erased, restrict its processing, receive it in a portable format, object to processing based on legitimate interests, and withdraw consent at any time. To delete your account and its data, use Settings → Delete my account, or follow hushward.app/delete-account if you no longer have the app.
For any other request, email privacy@hushward.app from the address you use with Hushward. We may confirm the request through that address and will not ask for identity documents unless there is real doubt. We answer within one month, or within three months for complex requests, telling you within the first month. It is free.
Deleting your account erases your account, sessions, AI-sharing choice, plan and minute records, reports, feedback, and your voice with the narrations made with it, and removes your account ID from usage records. Copies at OpenAI expire within 30 days, database backups and the security log within 7 days, and narrations in stock voices at ElevenLabs within a day. RevenueCat keeps your purchase history under a random number, and Scaleway its log of the sign-in emails we sent you; we delete either if you ask. For the purchase history, give us the store's order number, as nothing else links it to you any more. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play.
Hushward makes no decisions about you with legal or similarly significant effects. Our safety checks automatically decline some story subjects; you can rephrase, or contact us if you think a decision was wrong.
10. Complaints
You can contact us first, and we will acknowledge a complaint within 30 days at the latest. You can also complain to a supervisory authority:
- Hungary: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), 1055 Budapest, Falk Miksa utca 9–11; postal address 1363 Budapest, Pf. 9; +36 1 391 1400; ugyfelszolgalat@naih.hu; naih.hu
- United Kingdom: the Information Commission (ICO), ico.org.uk/make-a-complaint
- the authority in the EU country where you live or work.
You can also go to court. In Hungary you may bring the case before the regional court (törvényszék) where you live.
11. Security
Data is encrypted in transit. Database rules let each account reach only its own data, and reports and feedback cannot be read back from the app. Keys to our providers are held only on our servers, and accounts at our providers use multi-factor authentication. Only the founders can access the systems.
12. Changes
Each version of this policy is dated and earlier versions stay available. We tell you in the app about important changes, and before your story data goes to a new recipient we ask for your AI-sharing permission again.