Privacy Policy
Effective 1 October 2026
In short: Kidsnooze is made for parents to use with their children. It has no sign-up and asks for no name, e-mail or phone number. To deliver stories and check your subscription, the app uses a random, anonymous identifier. There is no advertising, no analytics and no tracking. We never sell data.
1. Who we are
The Kidsnooze app (“the app”) and its content service are provided by Aldina Rondić, a private individual in Serbia (“we”, “us”). We are the data controller for the data described here.
Contact for anything about privacy: dinafazlic97@gmail.com or maidr52@gmail.com
2. What we process and why
| Data | Why | Kept |
|---|---|---|
| Anonymous account — a random account ID, a household ID and a device record (platform — iOS or Android — the device model name, such as “iPhone” or “Pixel 8”, when it was created and last used). A sign-in token is stored on your device — in the Keychain on iPhone, in the app’s private storage on Android; our server keeps only a hash of it. | Recognising your app without asking you to sign in, and linking your subscription to it. | While you use the app, or until you ask us to delete it. |
| Subscription records — on iPhone, from Apple’s signed purchase data: transaction IDs, product (monthly or yearly), expiry date, whether it was refunded or revoked, and the App Store environment. On Android, the purchase token Google Play gives the app, which our server uses to ask Google for the subscription’s product, expiry date, and whether it is active, cancelled or refunded. Your anonymous account ID is attached to the Google Play purchase so the subscription can be linked to your app. | Unlocking premium stories for as long as your subscription is active, including after renewals, refunds or cancellations Apple or Google reports to us. | For the life of the subscription and up to 3 years after it ends, to handle disputes and legal obligations. |
| Server logs — IP address, time, requested address, and the app and system version sent by your device. | Security, preventing abuse, and fixing errors. | Web server logs are deleted automatically after 14 days. Your IP address is also held in memory for up to one hour to limit repeated requests; it is not saved. |
We do not receive your name, Apple ID, Google account, e-mail, payment card or location. Payments are handled entirely by Apple or Google.
3. Data that stays on your device
Your chosen language, age filter, sleep timer, what plays after a story, crossfade length, selected white noise, where you stopped in a story, and the last confirmed subscription expiry are saved only on your device. They are not sent to us. Deleting the app removes them. On iPhone the Keychain sign-in token may remain until you reset the device.
4. What we don’t do
- No advertising, analytics, crash-reporting or tracking SDKs.
- No advertising ID or other device identifiers are collected.
- No tracking across apps or websites, and no data brokers.
- No selling or sharing of personal data for marketing.
- No microphone, camera, contacts or location access in the stories app.
5. Legal bases
Where the EU General Data Protection Regulation (GDPR) or the Serbian Law on Personal Data Protection applies, we rely on: performance of a contract — providing the app and the subscription you bought; and legitimate interests — keeping the service secure and working (server logs, abuse limits).
6. Who else is involved
- Apple processes App Store purchases, renewals and refunds under its own privacy policy and sends us signed confirmation of your subscription status.
- Google processes Google Play purchases, renewals and refunds under its own privacy policy. Our server asks Google Play for the status of your subscription and receives notifications from Google when it changes.
- netcup GmbH (Germany) hosts our server in a data centre in Vienna, Austria, acting on our instructions.
Your data is stored in the European Union. We don’t transfer it elsewhere, except to the extent Apple or Google processes purchase data under its own terms.
7. Children
Kidsnooze is meant for parents to use with their children, for example to play a bedtime story. We follow Google Play’s Families Policy and the principles of the U.S. Children’s Online Privacy Protection Act (COPPA) and the GDPR.
- The app does not ask a child, or anyone, for personal information: no name, age, e-mail, photo, voice or location.
- The age filter in the library is stored only on the device and is never sent to us.
- There is no advertising, no analytics, no tracking and no advertising ID, and no third-party SDKs that collect data.
- There are no chats, comments, profiles or other ways for a child to share information.
- Subscriptions are bought by the holder of the Apple ID or Google account, through Apple or Google.
If you are a parent and believe we hold data about your child, write to dinafazlic97@gmail.com or maidr52@gmail.com and we will delete it.
8. Your rights
You can ask us to access, correct, or delete your data, to restrict or object to its processing, or to receive it in a portable format. Write to dinafazlic97@gmail.com or maidr52@gmail.com.
Because we don’t know your name or e-mail, we may need information that lets us find your records — for example the date of your purchase. If we can’t identify your data, we will tell you. Cancelling a subscription is done in your Apple ID settings or in Google Play, not by deleting data.
You may also complain to a supervisory authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs); in the EU, the data protection authority in your country.
9. Security
All traffic is encrypted (HTTPS). Sign-in tokens are stored hashed, premium audio is delivered through links that expire, and access to the server is restricted.
10. Changes
If we change this policy, we will update the date above. For significant changes we will announce them on kidsnooze.com.