At CoCoBun AI, we care about your personal information, therefore we have prepared this Privacy Policy to explain how we collect, use, share, and protect information when you use the CoCoBun AI mobile application, our website, and related services (the "Service"). Most of what we collect happens inside the app. The only information our website collects is an email address, and only if you choose to give us one — see section 3(D).
1) General
- We collect only what we need to provide the Service.
- We do not sell personal information, including children's personal information, to third parties.
- We do not allow targeted behavioral advertising in the child experience.
- Parents/guardians control the child's information.
2) COPPA and Children Under 13
CoCoBun is designed for children, but a parent or legal guardian must provide consent where required by COPPA before we collect personal information from a child beyond what is permitted for "internal operations."
Parents have the right to:
- review the child's information,
- request deletion,
- refuse further collection/use,
- withdraw consent (which may limit features).
To protect children's privacy, certain areas of the app - including account settings, registration, and any subscription or payment-related screens - are accessible only through a parent gate secured by a passcode known to the parent or guardian. Children cannot access, modify, or delete account information without parental authorization.
To make a request, contact us at: privacy@cocobunai.com
3) Information We Collect
A) Information Parents Provide
- Parent email (account, support, required notices)
- Billing/subscription info (handled by Apple/Google; we typically do not receive full payment card details)
B) Information Children (or Parents on behalf of children) Provide
Depending on features enabled:
- Child nickname / profile name (can be an alias)
- Child age or age range (for COPPA and age-appropriate content)
- Text prompts (story ideas, character names)
- Voice recordings (if voice/story narration features are enabled)
We do not intentionally request a child's:
- address, phone number, precise geolocation, government ID
If you enable parental activity monitoring, we may collect data such as time spent in the app and features used. This information is visible to parents or guardians only, is not shared with third parties, and is processed via Apple's Family Controls framework.
C) Automatically Collected (Device/Service Data)
- device type, OS version
- basic log data (IP address, timestamps, crash reports)
- performance metrics necessary to keep the Service working
We use these for internal operations such as security, debugging, and reliability.
If a user chooses to use the voice-to-text (dictation) feature while using the app, this functionality is provided by the device's built-in dictation feature (such as Apple's iOS dictation) and is subject to Apple's own privacy policy. We do not collect or store the audio input from dictation; only the resulting text is received.
D) Information Collected Through Our Website
Our website collects one thing: an email address, and only when you choose to give us one — by joining the waitlist, or by writing to us at one of the addresses published on the site.
- What we use it for: to send you news about CoCoBun, including when the app becomes available, and to reply to you if you have written to us.
- What we do not do with it: we do not sell it, we do not share it with advertisers or data brokers, and we do not use it for behavioral advertising.
- How to get off the list: every email we send has an unsubscribe link, or you can write to privacy@cocobunai.com and we will remove you and delete the address.
- How long we keep it: until you unsubscribe or ask us to delete it.
The waitlist is for grown-ups. Please do not enter a child's email address, and please do not let a child submit the form.
4) How We Use Information
We use information to:
- create and deliver personalized stories and audio,
- maintain account functionality and story history,
- provide customer support,
- protect safety and security, prevent abuse,
- improve reliability and performance (bug fixes, crash diagnostics).
We do not use children's information for behavioral advertising.
5) How We Share Information
We share information only with service providers that help operate the Service, such as:
- cloud hosting and storage providers, which hold your account, your stories, and your voice model;
- a generative text provider, which receives the story prompt in order to write the story;
- a generative image provider, which receives the image prompt in order to draw the illustrations;
- a text-to-speech provider, which receives the story text and the voice model in order to narrate the story;
- app store providers for subscriptions (Apple and Google).
We send these providers only what they need to do their job. We do not send them your child's profile, your account details, or any identifier that would let them work out who a story belongs to. We require every provider to process data on our behalf and on our instructions only, consistent with this Privacy Policy, and not to use it to train their own models.
We do not share children's personal information with:
- advertisers,
- data brokers,
- social networks for targeting.
6) AI Processing and Voice Data
If you enable AI/voice features, relevant text and/or audio may be processed by third-party AI providers to generate story content.
Important: AI outputs may be generated based on inputs, and systems may retain limited logs for safety, abuse prevention, or service quality depending on provider settings. We aim to configure providers to minimize retention and restrict secondary use.
Voice recordings and voice models
When you record a voice so CoCoBun can narrate stories in it, two different things exist, and we treat them differently.
- The original recording. This is the audio you actually recorded. It is used once, to create the voice model, and is then permanently deleted from our systems immediately. We do not keep it, we do not store a copy, and we do not share it.
- The voice model. This is what the recording produces — a synthetic version of the voice. We do keep this, because it is what lets you narrate new stories in that voice later without recording again. Without it, you would have to re-record every time.
The voice model is stored with your account and is used only to narrate stories for your account. It is not shared with other families, it is not used to narrate anyone else's stories, and it is not used to train anyone's models.
You can delete a voice model at any time from inside the app, and doing so removes it from our systems. It is also deleted if you delete your account. Note that deleting a voice in the app deletes the voice model — the original recording is already gone, because we deleted it when the voice was first created.
7) Data Retention
We keep information only for as long as we need it to run the Service, and we do not keep any of it indefinitely. This is what we hold and for how long.
| What we hold | How long we keep it |
|---|---|
| Original voice recording | Deleted immediately once the voice model has been created. Never stored, and never kept if the cloning fails. |
| Voice model | While your account is open, or until you delete the voice in the app. |
| Parent account details (email, name, sign-in tokens) | While your account is open. |
| Child profile (nickname, age range, avatar, preferences) | While the parent account is open. |
| Saved stories, and their text, illustrations and audio | While your account is open. Deleting a story deletes its pictures and audio with it. |
| Stories you didn't save | Deleted as soon as the session ends. They never reach our database. |
| Activity data (if parental monitoring is on) | While your account is open. Visible to the parent only. |
| Sign-in session tokens | For the length of the session. Refreshed when you sign in, cleared when you sign out. |
| Payment details | We never store these. Subscriptions are handled entirely by Apple and Google. |
| Usage and feature analytics | 12 months, on a rolling basis, then automatically purged. |
| Server and error logs | 90 days, then automatically purged. |
| Waitlist email address | Until you unsubscribe or ask us to delete it. |
When you delete your account. A parent can delete the account at any time, from inside the app or by using our account deletion request page. We purge everything — account, child profiles, stories, voice models and their assets — within 30 days. Deleted data may persist in our encrypted backups for up to 90 days before those backups are fully purged.
If you stop using CoCoBun. We don't hold on to a family's data forever. If nobody signs in to an account, we work to a clear schedule:
- 3 months: we email to check whether you'd like to come back.
- 5 months: we email again to warn you that the data is about to be deleted.
- 6 months: if we still haven't heard from you, we permanently delete the account, the stories and every associated file.
Removing the app from your device does not by itself delete your account — if you want the data gone, please delete the account, or simply let the 6-month schedule above run its course.
A lapsed subscription is not a deletion. If a paid subscription ends, the account stays open on the free plan and nothing is deleted.
Staying signed in. If you choose to remain signed in, your session is maintained until you sign out or we detect a security concern that requires you to sign in again.
8) Security
We use reasonable administrative, technical, and physical safeguards designed to protect information, including encryption in transit and access controls. No method of transmission/storage is 100% secure, but we work to protect your data.
In the event of a data breach that affects your personal information, we will notify you as required by applicable law.
9) CoCo's Library and Third-Party Services
The Service includes CoCo's Library, a parent-gated community where families can share the stories they have made. Sharing is optional and off by default: everything your family creates stays in your own Bookshelf unless it is published from your account. Parents are notified whenever a story is published from their account, and can unpublish it at any time.
When a story is published, other families see the story, the profile name on it, and the profile picture. They do not see your email address, your child's age, or anything else from your account. We ask that you do not use your child's real name or a real photograph of your child as the profile name or picture on a published story — the app offers names and pictures you can pick instead.
Anything published can be reported to us at hello@cocobunai.com, and a parent can unpublish or delete their family's own stories at any time. We review reports and may remove a story, or suspend an account, where content breaks our Terms of Service.
The Service may also contain links to third-party websites or services. These links are intended to be accessed by parents and are governed by the third party's own privacy policies. CoCoBun AI is not responsible for third-party practices.
We may use trusted third-party service providers to operate and support the Service in accordance with this Privacy Policy.
10) Your Privacy Rights
Depending on where you live, you may have rights to access, correct, or delete personal information. Parents may exercise COPPA rights for children as described above.
You may also request a copy of the personal information we hold about you or your child by contacting us at privacy@cocobunai.com. We will respond to all data access requests within 45 days.
To delete your account, you can use the delete option in the app's account settings, or fill in our account deletion request page if you no longer have the app installed.
11) Changes to This Policy
If we materially change this Privacy Policy, we will update the "Last Updated" date and may notify parents via email and/or in-app notice.
12) Contact Us
Privacy questions or requests: privacy@cocobunai.com