Privacy policy
Hushspun is an app that weaves a personal bedtime story for a child and reads it aloud. The app is provided by Puuti Partners Oy (Business ID 3645720-5), Mäkikulma 2, 37570 Lempäälä, Finland, the data controller for the processing described here. Contact: info@satukone.app.
1. What data we process
| Data | Where it comes from | What it is used for |
|---|---|---|
| Device identifier (random) | Created by the app on first launch | Linking your own stories and sample-story listening to your device without an account. Without an account you get no story wool. |
| Story ingredients: story type and topic (for example an encouraging story about fear of the dark), characters, place, mood, age group, length, special wish | You choose them | Writing the story |
| Listeners’ first names and age group | You enter them. Optional, but an encouraging or educational story needs the child’s first name. | The story is told to the child by name. Names become part of the story text. |
| Finished stories, their audio and listening history | Created during use | Your own library, sequels, the shared library (if you allow it) |
| Story wool balance and usage events | Created during use | Measuring use of the service and preventing abuse |
| Email address, or Google account identifier, email address and name | If you sign in | The same library and balance on all your devices |
| An identifier derived from your IP address | Network connection | Abuse prevention (for example limits on the sign-in bonus and on sign-in codes). The IP address itself is not stored in the database. |
| A support message and the images you attach to it | You write the message and choose the images (optional) | Replying to your message and investigating the problem (section 6) |
| Purchases and subscriptions: product, price, time, payment and subscription identifiers, subscription status and billing period, accepted terms version and consent, and refunds | Created when you buy story wool, a subscription or the story advent calendar | Delivery, managing the subscription, order confirmations, withdrawal and refunds, and bookkeeping |
| Withdrawal notice details: name, the selected purchase and additional information | You write them when you withdraw from a purchase | Handling the notice and refunding the payment |
| Permission for story tips by email | You give it when signing in (optional) | Sending story tips to your email. You can withdraw the permission with the link in the message. |
| Bedtime reminder: browser notification address, reminder time and time zone | You turn the reminder on (optional) | Sending the reminder at the time you chose |
The app contains no advertising and no tools that track users. Page views are counted with cookieless, aggregated statistics (section 8). We do not collect location data or your device’s address book, and we do not use the microphone in the background. The microphone is used only if you create your own voice: you then send a sample you record yourself (section 5). The only contact details we process are the ones you give us yourself, such as your sign-in email address or the reply address on a support message. The app is meant to be used by an adult: children do not create accounts or enter their own data.
When a new account receives the one-time sign-in bonus, we store with the grant the type of network, for example a hosting or VPN network, and the network operator’s number. We do not store the IP address. The legal basis is our legitimate interest in preventing misuse of the service.
We do not see or store the details of your payment card or other payment method: you give them directly to the payment service when you pay.
2. Children’s data
A parent may enter a child’s first name and age group so that the story is told to the child by name, and choose a picture for the profile. These and the story topic described below are the only data about the child. They are stored in the story text and in the child’s profile, which is kept in the service under your device or account identifier. A profile holds the first name, the age group and the chosen picture. An encouraging or educational story needs the child’s first name, and the topic of the story, for example fear of the dark or a visit to the doctor, is stored in the story details together with the child’s name. The topic and the name are also sent for writing the story. Encouraging and educational stories are not shared in the shared library. Stories are private by default: a story appears in the shared library only if you have given your permission. The app asks for it separately, and you can change your choice in the profile. Only finished stories whose content has passed our check reach the library. A shared story may show the listener’s first name and the other ingredients you chose, such as the characters, the place and the wish, but stories cannot be searched by name. You can withdraw your permission at any time, and your stories are then removed from the shared library while staying in your own library. At the same time we delete the copies of your stories saved in listeners’ libraries. The copies are also deleted when you delete the story or your account. You can delete a story from your own library at any time.
The app is not meant for a child to use alone, and we do not collect information directly from a child. The listener’s first name stays in the story text for as long as the story is in your library and is removed with the story or the account. Children’s profiles are kept in the service so that the same profiles are available on another device when you sign in; a copy stays on the device. Deleting a profile removes it from both the service and the device, and deleting your account removes every profile.
In the United States, children’s privacy is governed by COPPA (the Children’s Online Privacy Protection Act). The service is not directed to children under 13 using it themselves, and we do not knowingly collect information from a child under 13. If we learn that we have, we delete it. A parent can ask to review or delete their child’s data at info@satukone.app.
3. Purposes and legal bases
The data is used to write the story and read it aloud, to show your library, to calculate your story wool balance, to prevent misuse and to keep the service working.
- Contract: weaving, reading and storing stories is the core of the service (GDPR Article 6(1)(b)).
- Legitimate interest: abuse prevention and reliability of the service (Article 6(1)(f)).
- Contract: purchases and subscriptions, their confirmations, withdrawal and refunds (Article 6(1)(b)).
- Legal obligation: bookkeeping and the confirmations required by the Finnish Consumer Protection Act (Article 6(1)(c)).
- Consent: sharing stories to the shared library (Article 6(1)(a)). Consent can be withdrawn in the profile.
- Consent: story tips by email and bedtime reminders (Article 6(1)(a)). The permission can be withdrawn with the link in the message, and the reminder in the profile.
4. Recipients
We use the following categories of recipients. Processors process data only on our behalf and on our instructions, and do not use it for their own purposes. The payment service is also an independent controller for the tasks described in the table.
| Category | Role | What it receives |
|---|---|---|
| Application hosting, database and storage service | Running the app, storing data and audio files | All data listed above. The database is located in Europe. |
| AI service that writes the story | Story text | Story ingredients, including the story type and topic, special wish, listeners’ first names and age group. No device identifier or contact details. |
| Speech synthesis services (primary and backup) | Reading the story aloud; creating your own voice (beta) | The story text, one sentence at a time; your voice sample, if you create one |
| Sign-in service (Sign in with Google, optional) | Authentication | The service tells us the account identifier, email address and name |
| Hosting provider’s abuse protection (only if the check is switched on) | Telling people apart from automated programs if a device gets free wool without an account. The check is not in use at the moment. | IP address and technical details of the browser and device for the check. The service tells us only the result of the check. |
| Payment service | Processing payments, charging subscriptions, receipts and refunds | Email address, the account’s random identifier, the product bought and its price, the accepted terms version, and the payment method details you give directly to the payment service. For these details the payment service is also an independent controller, for example in fraud prevention and anti-money-laundering obligations. |
| Email sending service | Sending sign-in codes, order confirmations, receipts and story tips | Email address and the content of the message |
| Email service where our staff receive messages | Handling support messages, withdrawal notices and customers’ replies | The content of the message, the reply address and your name if you give it |
| Browser notification services | Delivering the bedtime reminder to your device | Notification address and the reminder text |
| Bookkeeping: accounting firm and accounting software | Statutory bookkeeping | Details of purchases and refunds and the payment service’s reports |
Some processors operate outside the European Economic Area, mainly in the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses. Details of the processors are available on request from info@satukone.app.
5. My voice (beta)
If you create your own voice, you read a short text into the microphone. The sample is sent to the speech synthesis service, which creates a reader that sounds like you, and the sample is kept in our storage for the lifetime of the voice. For now your own voice is available only on specially selected test accounts. The voice is available only on your account, and shared stories are always read by the fixed readers. You can remove the voice in your profile at any time; it is also removed when access to the feature ends. Removal closes the voice immediately: the reader can no longer be chosen, and audio read with it is no longer played from the service. Deleting the sample itself, the reader created at the speech synthesis service and the recordings made with it happens in the background, and a single deletion may need retries or handling by our staff. Audio already downloaded to your device cannot be removed by us afterwards. Clone only your own voice: using a child’s or anyone else’s voice is not allowed.
6. Contacting support and image attachments
When you send a message from the app, the details you provide – the topic, the message, the reply address, the language, the app version and a shortened form of your account identifier – are delivered as an email message to Hushspun support, who read the message and reply to you. Any images you attach are stored in our storage, and the message contains a secret link to them.
The link works without a separate sign-in, so anyone holding the link can open the image while it is valid. The link expires in 7 days: after that it no longer works and the stored image is queued for deletion. Deletion runs in the background, so the file may not disappear from storage at exactly the moment the link closes. The expiry of the link does not delete an email that has already been sent or a copy taken from it. Do not write sensitive information in the message or attach it in images.
7. Retention periods
- Stories and library: until you delete the story or ask us to delete your data.
- Copies of your shared stories saved in listeners’ libraries: until you withdraw your sharing consent or delete the story or the account.
- Unfinished and failed usage events: 30 days.
- Share links: 24 hours.
- Sign-in codes: 10 minutes. Sign-in session: at most 180 days.
- Audio files: at most 10 years, so that the same story need not be read again. Sentence-level audio clips used to read the same sentence again are not yet deleted together with a story or account. They are not linked to your account and are deleted after at most 10 years.
- Bedtime reminder notification address: until you delete the reminder or the account.
- Withdrawal notices: the name and additional information are deleted with the account; the time and subject of the notice are kept for the bookkeeping period.
- Your own voice sample and voice: for the lifetime of the voice, at most until your access ends.
- A link to an image attached to a support message: 7 days, after which the image is queued for deletion.
- Failed human checks for the dashboard, if the check is switched on: 30 days, without any user or device identifier.
- Technical service logs for troubleshooting: for a short time, after which they are deleted automatically.
- Feedback given when deleting an account (the reason and up to 200 characters of free text): kept for developing the service, without any link to the account.
- Bookkeeping records of purchases and payments: six years from the end of the year in which the financial period ended, as required by the Finnish Accounting Act, also if you delete your account.
When the app confirms that the deletion succeeded, the deleted story, voice or account is no longer available in the service: it is not restored and its audio is no longer played from the service. If you receive an error when deleting, the outcome may be uncertain. Check the status in the app and contact support if needed. Physically deleting the stored files happens in the background, and a single deletion may need retries or handling by our staff, so we do not promise that every file disappears from storage at the same moment. The deletion work stays queued until it is completed.
8. Cookies and device storage
The app stores in your device’s own storage the settings (language, theme, reader), the children’s names, the device identifier and its key, and an unfinished story draft. Signing in uses strictly necessary cookies: one keeps you signed in, and two short-lived ones protect Google sign-in while signing in is in progress. Signing in by email uses only the cookie that keeps you signed in. No other cookies are used.
The app’s pages include a cookieless statistics script from our hosting service that counts page views and page load speed. It records which page was visited, the site the visitor came from, the country and the type of device and browser. The statistics are aggregated and do not identify an individual user or device. We use them only to develop the service.
9. Your rights
You have the right to access your data, to request rectification or erasure, to object to processing and to withdraw consent. Stories can be deleted directly in the app. For other requests write to info@satukone.app. We reply within one month. You may also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
10. Changes
We update this policy when the service changes. We tell you about significant changes in the app or by email. The current version is always at satukone.app/privacy.