Who we are
Bedtime Bee is operated by Storybee Ltd, a company registered in England and Wales under company number 17142469. Our registered office is 21D Endlesham Road, London, SW12 8JX, United Kingdom. Storybee Ltd is responsible for deciding how personal information is used for the Bedtime Bee app and website. You can contact us at [email protected].
Who Bedtime Bee is for
Bedtime Bee is intended for use by adults on behalf of children. Children should use Bedtime Bee with a parent or guardian. We do not knowingly create child accounts or ask children to provide contact details.
Information we collect
When you use the iOS app, we may collect account details supplied through Sign in with Apple, including your Apple account identifier and email address where Apple provides it. When you use the website, we collect the email address you provide for password-free sign-in.
We also process toy photos, toy names, story preferences, prompts, generated text, illustrations, narration information, saved stories, device and session identifiers, security information, purchase and credit records, support messages, and service logs.
For web purchases, we receive transaction identifiers, payment status, amount, currency, refunds, disputes, and limited customer information from Stripe. We do not receive or store your full payment-card number or security code.
If you use the app-to-web physical-book flow, we also process the delivery name and UK address, contact details you provide for delivery, the approved final book PDF, proof-approval record, order and tracking information, and cancellation, refund, reprint or support records.
How and why we use information
We use personal information to create and save stories, provide narration, authenticate users, maintain account libraries, issue and manage credits, process and reconcile purchases, prevent fraud and misuse, operate security controls, provide support, investigate failures, comply with legal obligations, and improve the reliability of Bedtime Bee.
We process this information where it is necessary to provide the service or perform a contract with you, to comply with legal obligations, for our legitimate interests in securing and operating Bedtime Bee, and with consent where the law requires it.
Toy photos and generated stories
Toy photos and prompts are processed to create personalised stories and illustrations. A temporary copy of a web-uploaded photo may be held in your browser while you complete sign-in and payment. It is removed when the story job is accepted or when Bedtime Bee next detects that the temporary copy has expired.
Once submitted, the source photo is held temporarily in Bedtime Bee’s systems for no longer than 15 minutes and is deleted earlier when processing finishes. The source photo may be transmitted to AI service providers where necessary to analyse the toy and create the story. The original source photo is not saved in your story library.
Generated story text and illustrations are stored so that you can return to your library. They remain available until you delete them, delete your account, or we are otherwise required to remove them.
Physical books
If the limited physical-book beta is made available to you, you must review and approve the complete book before paying. We send the approved final PDF and the delivery details needed to manufacture and deliver the personalised book to our print and delivery providers. We use the resulting order, tracking and support information to fulfil your order and help with cancellation, damage, non-delivery, refunds or reprints.
Final book files are private. Access links expire, access is authorised for a specific fulfilment purpose, and personalised print-asset access is recorded for security and support. We do not put story text, child details, titles, dedications, images, addresses, email addresses, payment information or private file links into general analytics.
The physical-book beta will not be made available until its provider, privacy, retention, legal and physical-sample reviews are completed. This policy does not claim that a pending review has been approved.
Service providers
We use service providers to operate Bedtime Bee. These include Cloudflare for hosting, storage and security services; Stripe for web payments and payment-fraud prevention; Resend for transactional emails; Apple for iOS authentication and in-app purchases; Prodigi for approved physical-book manufacture and fulfilment if that beta is enabled; and specialist providers for AI story generation, image generation, narration, analytics, advertising, and customer support.
Stripe processes payment information under its own privacy notice and may act as an independent controller for parts of its payment and fraud-prevention services. Other providers process information only as needed to supply their services to us and must protect it appropriately.
Browser storage and security
The website uses essential browser storage to retain your draft, maintain your sign-in session, reconnect you after Stripe Checkout, and temporarily preserve a selected photo while you complete the creation flow. We also use Cloudflare Turnstile and related security technologies to distinguish genuine users from automated abuse. We do not use the story creator’s browser storage for personalised advertising.
Children's privacy
Because Bedtime Bee may involve children, we aim to collect only what is needed, avoid public profiles or social features, and give parents control over saved stories. If you believe a child has provided personal information without parental involvement, contact [email protected].
Advertising and purchases
Purchases made within the iOS app are handled by Apple. Separate website story-pack purchases are handled by Stripe. Website story packs do not add iOS purchases, subscriptions, or App Store entitlements.
If advertising is shown in the app, it is configured for general-audience and child-directed treatment. We do not use toy photos, prompts, generated stories, or payment information for personalised advertising.
Retention and deletion
Temporary source photos are handled as described above. Magic-link credentials expire after 15 minutes. Generated stories and account information are retained while your account remains active or until you request deletion.
For physical fulfilment, temporary working files normally expire within 24 hours and private provider-access links normally expire within 72 hours. The proposed technical setting labels the approved final print PDF for retention for up to 730 days to support fulfilment and authorised reprints. That duration, automatic deletion evidence and the detailed schedules for delivery addresses, order audit, notifications and support records will receive final privacy and legal review before the beta is enabled.
Purchase, delivery, refund, fraud-prevention, accounting, security, audit, notification, and support records may be retained for longer where reasonably necessary or required by law. When information is no longer needed, we delete it or anonymise it.
You can delete saved stories from your library and request deletion of your account by contacting [email protected]. Account deletion removes account-scoped physical-book database records from the active service. Final asset deletion and any accounting, dispute, fraud-prevention, security or other statutory retention exception must follow the reviewed schedule; we will explain any applicable exception when handling the request.
International processing
Some service providers may process information outside the United Kingdom. Where data-protection law requires it, we use recognised safeguards such as adequacy regulations or approved contractual protections.
Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to the use of your personal information, and to receive a portable copy of certain information. You may also withdraw consent where processing relies on consent.
To exercise these rights, email [email protected]. You may complain to the UK Information Commissioner’s Office at ico.org.uk, although we would appreciate the opportunity to address your concern first.
Contact
Questions about privacy can be sent to [email protected].