Privacy Policy

Who we are

HushScrolls (https://hushscrolls.app) is a personalized AI bedtime story service for families. The business name is HushScrolls. The service is operated by Scott Savage trading as HushScrolls (Scott Savage). Australian Business Number (ABN): 87 606 341 996.

Contact for privacy questions: hello@hushscrolls.app.

Data minimisation

We design HushScrolls to collect and keep only the personal information needed to operate the Service: signing you in, securing your account, delivering stories and characters you create, billing (if you subscribe), and keeping the product reliable and safe. We do not build advertising profiles from your content, and we do not sell personal information.

Information we collect

• Account details — email address, password (stored hashed by our auth provider), display name, and language preference.
• Phone number — when you verify a mobile number for account security or account recovery. We use a telephony provider (Twilio) to send one-time verification codes by SMS.
• Story & character content — information you enter for characters and stories (for example names, ages, descriptions, and prompts), plus the AI-generated stories and illustrations we create for you so you can save and re-read them. See below for how optional source photos are handled.
• Billing — if you subscribe, payment is processed by Stripe. We receive subscription status and limited billing metadata; we do not store full card numbers.
• Technical data — device and browser type, app version, approximate location from IP (for security and service delivery), and diagnostic/error logs (e.g. via Sentry where enabled).
• In-app feedback — if you submit feedback through the app, we store your message, category, optional rating, account id, and limited context (for example which screen or story you were on and platform) so we can improve the product. Please avoid including sensitive family details in feedback text.

Source photos (create-from-photo)

If you choose to create a character from a photo, you may send an image from your device so our AI vision model can read appearance traits (for example hair, clothing, or other visual details) and help fill in the character form.

• We do not store your uploaded source photo in our databases, object storage, or account library. The image is processed only for that analysis request and is not kept as a saved photo on your profile.
• During the request, the image is transmitted securely to our AI vision provider so the model can analyse it. After analysis completes, we keep the text traits returned for the character (and later any AI-generated character or story illustrations you create)—not the original photo file you uploaded.
• The source photo may exist briefly in memory or transit while the request is handled. It is not retained as a permanent asset of HushScrolls.

AI providers process the image under their own terms and security practices for providing the model. We do not use source photos for advertising, marketing, or training our own marketing models.

How we use information

• Create and secure your account
• Generate personalized stories and illustrations
• Analyse optional source photos only to extract character traits (without storing the photo)
• Send verification SMS and essential service emails
• Process subscriptions and provide customer support
• Improve reliability, safety, and product quality
• Meet legal and regulatory obligations

We do not sell your personal information. We do not use children's photos or story content for advertising.

Children and family content

HushScrolls is designed for parents and caregivers. Accounts are intended for adults. Story characters may describe children, and you may optionally send photos of children in your care for one-time character analysis (as described above—we do not keep those source photos). You are responsible for having authority to provide that information. We process this content only to provide the service you request.

Sharing with service providers

We use trusted processors who only handle data as needed to run HushScrolls, including:

• Hosting and infrastructure (e.g. Vercel)
• Authentication and database (e.g. Supabase)
• AI model providers for text and image generation
• SMS verification (Twilio)
• Payments (Stripe)
• Email delivery (e.g. Resend) and optional error monitoring

These providers process data under their own security and privacy practices and our agreements with them.

Data retention

We keep account data and the story/character content needed to run your library while your account is active, and for a reasonable period afterward if needed for backups, disputes, or legal requirements. Uploaded source photos used for create-from-photo are not retained in our storage after the analysis request finishes. You may request deletion of your account and associated personal data by contacting hello@hushscrolls.app.

Security

We use industry-standard measures such as HTTPS, access controls, and hashed credentials. No method of transmission or storage is 100% secure; please use a strong unique password and keep your login details private.

Your rights

Depending on where you live, you may have rights to access, correct, export, or delete personal information, or to object to certain processing. Contact us at hello@hushscrolls.app and we will respond within a reasonable time.

International transfers

HushScrolls may process data in Australia and other countries where our providers operate. Where required, we take steps appropriate to the transfer.

Changes

We may update this policy from time to time. The “Last updated” date at the top will change when we do. Continued use of HushScrolls after changes means you accept the updated policy.

Contact

HushScrolls
Operated by Scott Savage trading as HushScrolls
ABN 87 606 341 996
Website: https://hushscrolls.app
Email: hello@hushscrolls.app