Privacy Policy

Hushero is a bedtime ritual app. A parent sets it up, a story is written for their child, and the parent reads it aloud. This page explains exactly what we collect, why, where it goes, how long we keep it, and how to get rid of it.

It is written to be read, not to be survived. If any part of it is unclear, write to support@hushero.com and we will answer.

Who we are. Hushero is operated by HUSHERO PTY LTD (ACN 697 628 612), an Australian company with its registered office in Bondi Beach, New South Wales 2026, Australia.

The short version

• We collect the smallest amount we can and still write your child a story.
• We ask for a child’s first name and their age as a number. We never ask for a surname, a birthday, a photo, an address or a phone number.
• Your family’s data is stored in Australia.
• To write a story we send some of it to two AI services in the United States. Your child’s name is not part of that: we swap it for a stand-in first. Section 4 lists every field, with nothing left out.
• We do not sell or share your data with anyone else, and nothing you give us is used to train an AI.
• There are no advertisements in Hushero, and no third party analytics or tracking of any kind.
• You can delete everything from inside the app, at any time, without asking us.

1. What we collect about your child

For each child you add, we store:

• First name, up to 40 characters. We never ask for a surname.
• Age as a whole number between 1 and 10. We deliberately do not ask for or store a date of birth.
• Pronoun, one of she, he or they, so the story never has to guess.
• Bedtime, and optionally a different weekend bedtime.
• A colour you pick for them, and the order they appear in.

That is the complete list. There is no field in our database for a child’s surname, birthday, photograph, address, phone number, school, location or device identifier, because we have no use for any of it.

2. What we collect about the night

As you use the app we store:

• Check ins: which children checked in, at what time, whether that was early, on time or late, how many stars it earned, and which story part it was for.
• Stories: the world you chose, anything you typed to describe your own world, the reading length, how many parts, which children are in it, and whether it is finished.
• The story text itself: the title and full written text of every part, when it was read, and the two short reminder lines generated with it.
• Rewards and badges: reward names you write yourself, which one is currently set as the goal, the stars each child has earned, and badges and their progress. Stars are a running total that only ever climbs, so there is no balance being debited anywhere and nothing is stored about spending them.
• Your own worlds: the name and description of any custom world you create, and which of the eight built in worlds you have hidden.
• Reports: if you report a story, the reason you pick and up to 500 characters of anything you choose to write.

3. What we collect about you

If you stay on the free plan and never sign in, we hold no contact details for you at all. Your household is identified by a random identifier and nothing else.

If you subscribe, you sign in with Apple. Apple then gives us an email address, and you may choose to hide your real one, in which case Apple gives us a relay address that forwards to you and tells us nothing about who you are. We recommend using it. That email address is the only contact detail we ever hold.

We also receive the outcome of your purchase and which plan you bought. That reaches us from Apple through RevenueCat, described in section 6. We never see your card details, and Apple does not give them to us.

4. How stories are written, and what leaves Australia

This is the section most privacy policies would bury, so we have put it in the middle where you cannot miss it.

Hushero does not write the stories itself. It sends a request to two AI services, Anthropic and OpenAI, whose servers are in the United States. Each time a part of a story is written, this is everything they receive:

• A stand-in name for every child in that story. Your child’s real name never leaves Hushero: we swap it for a placeholder before the request goes out, and swap it back before you read the story.
• The age and pronoun of every child, so the storyteller pitches it right and says he, she or they correctly.
• The bedtime, so the closing line can point at the right time tomorrow.
• The world you chose, and anything you typed to describe your own world.
• How long you want the story to be, which part this is, and how many parts there are in total.
• A summary of the earlier parts, so tonight’s part follows on.
• Whether you checked in early, on time or late, which changes the tone.

Nothing else is sent. They do not receive your email address, your subscription, your rewards, your badges, your streaks or your reports.

Under both providers’ paid terms, what we send is not used to train their models. We use those paid tiers specifically for that reason.

Everything about your family stays in Australia. Our database is hosted by Supabase in an Australian region, and family data is not stored anywhere else. The program that writes the story runs in that same Australian region, so your child’s real name is only ever handled there, whichever country you are reading from. The one other thing that leaves is your subscription record, which RevenueCat holds in the United States. It says which plan you bought and whether it is still active, and nothing about your children.

If you are not in Australia

Hushero is available in Australia, Canada, New Zealand, the United Kingdom and the United States, and we are an Australian company. So if you are outside Australia, your family’s data crosses a border twice, and you should know exactly where and why.

The first crossing is storage. Your household is stored in Australia, in the Supabase region described above, whichever country you are in. We chose one region rather than several deliberately, because a single well protected place is easier to secure and easier to delete from than five.

The second crossing is writing the story. As described at the top of this section, a request goes to Anthropic and OpenAI in the United States. It carries a stand-in name rather than your child’s real one.

For readers in the United Kingdom, one point is worth stating plainly rather than leaving in the small print. The UK government has not granted Australia an adequacy decision, which means a transfer of UK personal data to us is what UK law calls a restricted transfer. It cannot rest on Australia being treated as equivalent, because it is not treated as equivalent. It has to rest on specific contractual safeguards instead, and these are the ones it rests on:

• Storage, with Supabase, is covered by the UK Addendum to the EU Standard Contractual Clauses, which forms part of their data processing agreement.
• Writing the story, with Anthropic and OpenAI, is covered by the standard contractual clauses in our agreements with each of them.

We are not relying on the UK Extension to the EU-US Data Privacy Framework for either AI provider. It is a valid route in principle, but only where the American recipient holds a current certification covering the relevant data, and we would rather name a safeguard we can point at than one that rests on a certification we have not confirmed ourselves.

One more thing worth knowing, since it is the kind of detail these documents usually leave out. What reaches the AI providers carries a stand-in name rather than your child’s, as described above. That does not reduce our obligations, and we are not going to pretend it does, but it does mean the data crossing the Atlantic is considerably less identifying than it first sounds.

If you would rather your data not be transferred at all, write to us at the address in section 14.

5. On your phone

A copy of your family’s data is kept on your device so the app works quickly and without a connection. That copy is encrypted, and the key is held in the iOS Keychain rather than in the app.

Bedtime reminders are scheduled by your phone, by your phone alone. We do not send push notifications, and we do not have a server that could.

6. Who else is involved

We use a small number of companies to run Hushero. They are permitted to handle your data only to provide their service to us, and for nothing else.

• Supabase, Australian region, hosts our database and handles sign in.
• Anthropic and OpenAI, United States, write the stories, as described in section 4.
• Apple handles all payments and subscriptions, and provides Sign in with Apple when you subscribe.
• RevenueCat, United States, keeps track of which plan you bought and whether it is still active. It receives only a random identifier for your household and the result of your purchase. It never receives your email address, your child’s name, or anything you or your child have written.

That is the entire list. We do not use advertising networks, marketing platforms, data brokers or third party analytics, and there is no tracking software of any kind in Hushero.

7. What we never do

• We never sell your data, and we never share it for anyone else’s purposes.
• We never show advertisements to you or your child.
• We never use your family’s information to train an AI.
• We never build a profile of your child for marketing.
• We never ask your child for information directly. Everything about a child is entered by their parent.

8. How long we keep things

While you are using Hushero we keep your stories, because your Library depends on them and families re read old ones.

If a household goes 24 months with no activity at all, we delete it and everything in it automatically. We chose a long window deliberately, because most households have no email address on file and we cannot warn you first.

Our own technical logs, which record only which AI service was called, how long it took and what it cost, are kept for 12 months. They contain no story text and nothing that identifies a household.

If you ask us to delete your data sooner, we do it straight away.

9. Deleting everything

Open Settings, pass the parent check, and choose Delete all data. This removes your children, their stories and story text, check ins, stars, rewards, badges, custom worlds and reports, from both your phone and our servers. It cannot be undone and we cannot recover it for you afterwards.

You can also email support@hushero.com and ask us to do it. We will not ask you why.

10. Children’s privacy

Hushero is designed for families with children aged 1 to 10 and is listed in the App Store’s Kids Category. We take the obligations that come with that seriously.

A child never enters their own information. A parent adds each child, and the parts of the app that matter, Settings and anything involving money, sit behind a parent check that a young child is not expected to pass.

We designed the database around this. There is no birthday, no photo, no location, no contact details and no device identifier for any child, because the less we hold the less there is to protect.

If you believe a child’s information has reached us in a way you did not intend, write to support@hushero.com and we will remove it.

The rules we are designing against

Different countries regulate children’s data differently, and Hushero is sold in five of them. Rather than write a version of this section per country, here is the short account of each and how the app already answers it.

United States. COPPA governs personal information collected online from children under 13. It turns on verifiable parental consent, on collecting no more than the service needs, and on not conditioning a child’s participation on handing over more. In Hushero a child never has an account, never types their own details and never sees a sign in screen. A parent creates everything, and the parts of the app that involve money or settings sit behind a check a young child is not expected to pass. The only things attached to a child are a first name and an age in years.

United Kingdom. The ICO’s Age Appropriate Design Code, usually called the Children’s Code, applies to any online service likely to be accessed by someone under 18 in the UK, and its fifteen standards are mostly about defaults: collect the minimum, keep it private unless there is a reason not to, do not nudge children into weakening their own protections, and do not profile them. Hushero has no profiling, no advertising, no recommendation engine, no social features, no public profile and nothing a child can share. There is nothing to nudge anyone towards, because a child does not operate the app at all.

Australia. The Privacy Act and the Australian Privacy Principles apply to us directly, as an Australian company, wherever you are reading this.

Canada and New Zealand. PIPEDA and the Privacy Act 2020 respectively. Both countries hold a UK adequacy decision and both have their own regulator, listed in section 11.

We would rather say this plainly than claim more than we can. These frameworks overlap heavily, and the honest summary is that the app was built to hold as little about a child as it possibly can while still writing them a story, which is the thing all of them are really asking for.

11. Your rights

You can ask us to show you what we hold about your household, correct anything wrong, or delete all of it. Email support@hushero.com and we will respond within 30 days.

Depending on where you live you may also have the right to object to how we use your data, to ask for a copy in a portable form, to withdraw a consent you gave earlier, or to complain to your local privacy regulator.

You never have to go through us to complain. Your regulator is:

Two rights are worth calling out because they are easy to miss. If you are in the United Kingdom you can object to a restricted transfer of your data, which is explained in section 4. And wherever you are, you can delete everything yourself from inside the app without emailing anyone, which is section 9.

12. Security

Data is encrypted in transit and at rest. Every request is checked at the database level so one household can only ever reach its own rows, and that is enforced by the database rather than trusted to the app.

No system is perfect. If we ever discover a breach that affects you, we will tell you what happened and what we are doing about it.

13. Changes to this policy

If we change how we handle your data in a way that matters, we will update this page and change the date at the top. If the change is significant we will tell you in the app before it takes effect.

14. Contact

HUSHERO PTY LTD (ACN 697 628 612) Bondi Beach, New South Wales 2026, Australia support@hushero.com

Last updated 10 August 2026.