Privacy Policy

1. Who We Are

Hush is operated by Hush App, Menachem Begin 121, Tel Aviv, Israel. For privacy inquiries, contact support@hushsleepapp.com.

2. Data We Collect

a. Information You Provide

• Email address — for account creation and authentication.
• Voice recordings — short clips (approx. 30 seconds) used to clone your voice for story narration. Stored encrypted.
• Voice memos — brief audio or text notes about your child's day, used to generate tonight's story. Not retained after story generation unless you save the story.
• Child profile details — name, age, and optionally interests/themes you provide for personalization. We never ask for a child's direct contact information.

b. Automatically Collected Data

• Device type, OS version, and app version
• Session metadata (e.g., when you opened the app, story playback events)
• Crash logs and error reports

c. Payment Data

All payments are processed by Apple. We do not receive, store, or process your payment card details. We receive only confirmation of subscription status from our subscription provider (RevenueCat).

3. How We Use Your Data

• To generate personalized bedtime stories based on your inputs
• To create and store your cloned voice for narration
• To manage your account, subscription, and story history
• To improve story quality and AI performance (using aggregated, non-identifiable data)
• To send transactional notifications (e.g., story ready) if you enable them

4. AI Processing & Third-Party Services

Your inputs are processed by the following AI systems. Each service operates under its own privacy policy, linked below:

• OpenAI (GPT-4o-mini & Whisper) — generates story text from your voice memo and child profile; transcribes voice memos to text. OpenAI Privacy Policy ↗
• ElevenLabs, Inc. — primary voice cloning and story narration synthesis service. Your voice recording is sent to ElevenLabs to create a personalized voice model. Used for all languages except Hebrew. ElevenLabs Privacy Policy ↗
• Cartesia AI — alternative voice synthesis provider used specifically for Hebrew-language stories, where it provides superior quality. Your voice recording may be sent to Cartesia when Hebrew is selected as your story language. Cartesia Privacy Policy ↗

Before your voice recording is sent to any AI service, the app will ask for your explicit consent and disclose exactly which service will receive it.

We do not use your personal data or voice recordings to train publicly available AI models. Your voice clone is stored by ElevenLabs or Cartesia under their respective data processing terms and is used solely to narrate your family's stories.

5. Children's Privacy

• All child profile information (name, age, themes) is provided by a parent or guardian.
• We do not contact children, show them ads, or retain any data linked to a child independently of the parent's account.
• Parents can delete their child's profile and all associated data at any time from Settings → Kids.
• Hush does not comply with COPPA as a child-directed service — it is an adult-operated tool for family use.

6. Data Sharing

We share data only with the following service providers, solely to operate Hush:

• Supabase — authentication, database, and encrypted file storage (voice clones, story audio). Privacy Policy ↗
• OpenAI — story text generation (GPT-4o-mini) and voice memo transcription (Whisper). Privacy Policy ↗
• ElevenLabs — voice cloning and story narration synthesis (primary, all languages except Hebrew). Privacy Policy ↗
• Cartesia AI — voice synthesis for Hebrew-language stories. Privacy Policy ↗
• RevenueCat — subscription and in-app purchase management. Privacy Policy ↗
• Apple — app distribution, payments, and push notifications. Privacy Policy ↗

We do not sell, rent, or broker your personal data to any third party for advertising or commercial purposes.

7. Voice Data & Security

Voice recordings and cloned voice models are stored encrypted at rest. Access is restricted to the authenticated user and to the AI processing pipeline required to generate your stories.

We implement industry-standard security practices (encrypted transport, access controls, encrypted storage). However, no system is 100% secure, and we cannot guarantee absolute security.

8. Data Retention

• Voice clone: Retained until you delete it from Settings → Voice, or until account deletion.
• Story audio: Retained in your history until you delete individual stories or your account.
• Voice memos: Processed transiently for story generation. Not stored beyond story creation unless you save the story.
• Account data: Retained until you delete your account. After deletion, data is purged within 30 days.

9. Your Rights (GDPR)

If you are located in the European Union (or similar jurisdictions), you have the following rights regarding your personal data:

• Access — request a copy of the data we hold about you
• Deletion — request deletion of your account and all associated data
• Correction — request correction of inaccurate data
• Portability — request your data in a portable format
• Restriction — request that we limit processing of your data
• Objection — object to processing based on legitimate interests

To exercise any right, contact support@hushsleepapp.com. We will respond within 30 days.

10. Push Notifications

If you enable push notifications, Hush may send you alerts when a new story is ready. You can disable notifications at any time in your device settings. We do not use push notifications for marketing.

11. Third-Party Links & Services

The app may reference third-party services (e.g., Apple, RevenueCat). Each operates under its own privacy policy. We are not responsible for third-party data practices.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will update the "Last updated" date at the top. Continued use of Hush after changes are posted constitutes acceptance of the revised policy. For material changes, we will provide in-app notice.

13. Contact

For privacy questions or data requests: