NurWhispers Privacy Policy

1. Who we are

NurWhispers is operated by NurWhispers. For any questions about this policy or your data, contact us at privacy@nurwhispers.app.

2. Information we collect

• Caregiver: email address, display name
• Children: first name, age, gender
• Story data: generated stories, reading history
• Subscription: payments are processed by Stripe. We store your Stripe customer ID and subscription status — not your full card details.
• Device: basic cookies needed to run the app and keep you signed in; we do not use third‑party ad trackers.

3. How we use your information

• Generate personalized bedtime stories using AI
• Narrate stories using text‑to‑speech when you choose audio
• Manage your subscription and trial
• Improve reliability, safety, and the overall app experience

4. Third‑party services

We share limited data with providers that help us run NurWhispers:

• Anthropic(AI story generation): your child's first name, age, and gender may be included in prompts so stories feel personal and age‑appropriate.
• Microsoft Azure (text‑to‑speech): story text, which may include your child's name, is sent to generate narration audio.
• Stripe (payments): email and payment details as required to bill your subscription.
• Supabase (database & authentication): stores the data described above.
• Vercel (hosting): serves the web application.

5. Children's privacy (COPPA notice)

NurWhispers is designed for parents and guardians to use with children in their care. We collect a child's first name, age, and gender only to personalize stories.

As a parent or guardian, you may:

• Review data we hold by using the app (Settings → Manage Profiles)
• Delete a child's profile and associated stories from Manage Profiles
• Delete your entire account and household data from Settings → Delete Account
• Contact us about your child's information at the email above

We do not:

• Allow children under 13 to create their own accounts
• Use children's data for behavioral advertising
• Sell children's data to data brokers or advertisers
• Collect more information than is reasonably needed for the service

Parental consent. By creating a child profile in the app, you confirm that you are the parent or legal guardian of that child and that you consent to the collection and use of their information as described in this policy.

6. Data retention

• Active accounts: data is kept while your account remains active.
• Deleted accounts: we remove household and story data within seven (7) days of a confirmed deletion request, except where we must retain limited billing records to meet legal or tax obligations.
• Story cache:shared story templates that use placeholder names (not your child's real name) may be retained to serve other families.

7. Your rights

• Access: view profiles and saved stories in the app.
• Deletion: delete your account under Settings → Delete Account.
• Portability: contact us if you need an export of your data.
• Correction: edit caregiver and child profiles anytime in Manage Profiles.

8. Security

• Data is encrypted in transit using HTTPS
• API keys for AI and speech are handled server‑side only
• Database access is protected with row‑level security policies
• We do not store payment card numbers on our own servers

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you at the email address on your account when practical.

10. Contact us

Email: privacy@nurwhispers.app

United States — contact us at the email above for a postal or registered-agent address.