Privacy Policy

Last updated: May 23, 2026

This page explains what data Masalevi (web and mobile) collects from its users, how it uses that data, and your rights. Contact: doganpamuklu05@gmail.com.

1. Data we collect

  • Account info: email address, name, and a secure (bcrypt) hash of your password.
  • Child profile: the child's name, age, siblings, interests, real fears, family values, cultural tone, and the chosen story protagonist (name + type). Used exclusively to personalize bedtime stories.
  • Generated content: story text and TTS audio (MP3) the app produces.
  • Story universe (bible): a JSON record of each child's story world (characters, locations, ongoing arcs) — so every night's story builds on the previous nights.
  • Usage counter: how many generations your account has used (for quota tracking).

We do not collect: browsing history, location, contacts, device identifiers, or third-party advertising data. The app connects to no ad networks and ships no user data to analytics services.

2. Why we use the data

  • To create your account and let you log in.
  • To generate stories personalized to your child (name, interests, values are woven into the story).
  • To narrate the story and store the audio so you can replay it later.
  • To make each night's story connect to the previous one.
  • To track your usage quota (abuse prevention).

We never use your data for marketing, profiling, or sale. We do not show ads.

3. Third-party services

Stories and audio are generated by AI. The following services receive data for that purpose:

  • OpenAI (San Francisco, USA) — to generate the story text and narration. The child's name, age, and story-universe data are sent to the OpenAI API. OpenAI's privacy policy: openai.com/policies/privacy-policy.
  • Railway (Hosting) — the server infrastructure where the data lives.

We never sell or transfer your data to any other third party.

4. Storage and security

Data is stored on a persistent disk on Railway in a SQLite database; audio files are written as MP3 to the same disk. Passwords are stored only as bcrypt hashes — never in plaintext. All connections use HTTPS. Only the administrator has direct access to the database; users can only see their own data.

5. Note about children

The person creating the account is the parent or caregiver. The child's information is entered by the parent and used exclusively to personalize the bedtime stories for that child. The app does not directly target children under 13 or collect data from them; child information lives on the parent's account.

6. Your rights

  • Access: know what data we hold about you.
  • Correction: update incorrect information.
  • Deletion: have your account and all data (child profiles, stories, audio) permanently deleted.
  • Export: request a copy of your data.

To exercise any of these rights, email doganpamuklu05@gmail.com — we respond within 30 days at the latest.

7. Policy updates

If we make significant changes to this policy, we will notify account holders by email and update the "Last updated" date on this page.

8. Contact

Any questions, requests, or privacy concerns: doganpamuklu05@gmail.com

Türkçe: /gizlilik