Masaldan Erdeme
Privacy Policy
Last updated: 12 August 2026
Masaldan Erdeme ("the App", "we", "us") is a storytelling app made for children and operated by WITE Bilişim Teknolojileri A.Ş., Huzur Mah. Azerbaycan Cad. No:4B/262, Sarıyer/İstanbul, Türkiye. This policy explains what we collect, why, and the choices you and your child have. The App is designed to be used by a child under the supervision of a parent or guardian ("you"), and it works anonymously, with no account.
1. Our approach to children's privacy
- No accounts, and your data stays on your device. The App works anonymously, with no account and no sign-in. The household, child profiles, activity and library are stored on your device and are backed up and synced across your devices only through your personal iCloud account — we run no server-side user accounts or membership database.
- We show no advertising and use no tools for behavioural advertising. The service we use for subscription management (Adapty, see Section 6) runs without collecting the advertising identifier (IDFA) or IP addresses. Only if you grant the optional "Diagnostics" permission are crash and performance data processed with Google Firebase — without advertising identifiers and solely to keep the App stable (see Section 2).
- We do not sell or rent personal data, and we do not use it for behavioral advertising.
- Setup, settings and any purchases sit behind a parental gate.
- We collect the minimum information needed to run the App.
2. Information we collect
| Data | Why |
|---|---|
| Child profile: a first name or nickname and an age, entered by the parent. | To personalize greetings and choose age-appropriate content. Stored on your device; never sent to our servers. |
| App activity: stories opened, favorites, watch-later, and daily viewing counts. | To provide "continue", favorites, and parental daily-time limits. Stored on your device; never sent to our servers. |
| Created stories: the story idea text, chosen characters and art style sent to our story-generation service, and the resulting story text, images and narration. | To generate a story and save it to your library. Your library lives on your device; the generated image and audio files are kept in our content storage under a random ID, not linked to your identity, so the app can download them. |
| Voice input (only if you use the microphone button): converted to text with Apple's speech recognition, on-device where supported. | To let a child speak a story idea. We do not record or store the audio. |
| Photos (only if you add a character photo): kept on your device; never stored on our servers. Only when you create a story is the photo sent transiently to our story-generation service for that one job: it is safety-checked first (the check is performed by OpenAI), then passed to our image-generation provider (OpenAI) as a reference so the character keeps the same look; the transient server-side copy is deleted when the job finishes. | Shown as that character's picture and used so generated illustrations resemble the character. A story is never generated from a photo that fails the safety check. |
| Subscription status: purchases go through Apple's App Store; our subscription-management service Adapty verifies the subscription state. | To unlock features. Payments are processed by Apple; we do not receive card details. Adapty processes purchase/receipt information under an anonymous profile ID only; it does not collect the advertising identifier (IDFA) or IP addresses. |
| Diagnostic data (only if you grant the optional "Diagnostics" permission): crash reports and performance measurements, processed with Google Firebase (Crashlytics and Performance); on Android additionally limited usage statistics without advertising identifiers (Firebase Analytics, under the app-instance ID only — no advertising ID / AD_ID). No analytics tool is used on iOS. | To find and fix defects and keep the App stable. If you do not grant it, no diagnostic data is processed; you can withdraw the permission at any time in the Parent Area. It is never used for advertising. |
3. How we use information
- Provide and personalize the App and its parental controls.
- Generate stories, images and narration you request.
- Keep your library and settings stored on your device.
- Provide customer support and keep the App secure and reliable.
4. Legal bases (GDPR/UK GDPR)
We process data based on your consent (given by the parent during setup), to perform our contract with you (running the App you set up), and our legitimate interests in keeping the App secure and functional. You may withdraw consent at any time (see Section 9).
5. Children and parental consent (COPPA, GDPR-K, KVKK)
The App is intended for children with a parent's involvement. The parent performs the setup, provides the child's profile details, and consents to this policy on the household's behalf during onboarding. We do not knowingly collect more personal information from a child than is reasonably necessary, we do not condition participation on disclosing more than necessary, and we do not enable children to make personal information publicly available. If you believe we have collected information from a child without proper consent, contact us and we will delete it.
6. Service providers
We share data only with providers that process it on our behalf to run the App:
- Apple — App Store payments and subscriptions, speech recognition, and the backup/sync in your personal iCloud.
- Cloudflare — media delivery and storage (CDN), and the infrastructure our story-generation service runs on.
- AI model providers — OpenAI to generate story text and images and to run content-safety checks, and ElevenLabs to generate narration audio, solely from the idea and character details you submit.
- Adapty — subscription verification and management; runs under an anonymous profile ID without collecting the advertising identifier (IDFA) or IP addresses.
- Google Firebase — only with the optional Diagnostics permission: crash reports and performance measurements (on Android additionally usage statistics without advertising identifiers). Data is processed without advertising IDs and never used for advertising.
Unless you create a story or a character, no data is sent to the AI providers at all (when you create a character, the character's name/description goes to OpenAI for the portrait, and — if you added one — the character photo goes to OpenAI for the safety check). Each provider is bound to use the data only to provide its service. We do not sell data or share it for advertising.
7. Data retention
Your household, profiles, activity and library live on your device (and in your personal iCloud sync) and stay there until you delete them. You can delete everything instantly at any time from Parent Area → Privacy & data → Delete account & data; the deletion propagates to your iCloud copy as well. Character photos are never stored on our servers (see Section 2). The image and audio files of stories you created, and generated character portraits, are kept in our content storage; just email us if you would like them removed. Details: Delete data.
8. International transfers
Our providers (Cloudflare, OpenAI, ElevenLabs, Adapty and Google) may process the data sent during story generation, subscription verification and diagnostics in countries outside your own, including the United States and the EU. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
9. Your rights and choices
- Access, correct, export, or delete your data — in-app ("Export our data" and "Delete account & data") or by email.
- Withdraw consent and stop using the App at any time.
- Depending on your region (EEA/UK/Türkiye/California), you may have additional rights; contact us to exercise them.
10. Security
We use industry-standard measures: encrypted transport (HTTPS), the parent PIN kept in the device's secure storage (Keychain) only as an irreversible hash, and provider access controls. No system is perfectly secure, but we work to protect your information.
11. Changes
We may update this policy. We will post the new version here and update the date above; material changes affecting children's data will be brought to the parent's attention in the App.
12. Contact
Questions or requests (privacy and support): [email protected].
WITE Bilişim Teknolojileri A.Ş., Huzur Mah. Azerbaycan Cad. No:4B/262, Sarıyer/İstanbul, Türkiye.