Privacy policy
Your family's stories are yours.
This policy explains what we collect, why, who helps us, how long we keep it, and how to have it removed. Effective 6 November 2026.
Who we are
Bhaashi is a trading name of its founder, a sole proprietor ("Bhaashi", "we", "us"). This policy covers www.bhaashi.com, your Bhaashi account (id.bhaashi.com and auth.bhaashi.com) and Stories (stories.bhaashi.com). To reach us about privacy, use the contact form and choose "Privacy or deleting my data".
The short version
- Accounts belong to adults. Children never sign up.
- No ads, no analytics or tracking scripts, and we never sell or share your information for advertising.
- We use what you give us to run the service, and nothing else.
- Ask us and we'll delete your data.
What we collect
Your Bhaashi account
- Your email address, and your confirmation that you are an adult parent or guardian.
- Your password, which is held only by our sign-in service (Amazon Cognito). We never see it.
- Sign-in records: when you signed in or out and from which Bhaashi product, so we can keep accounts secure.
Stories
- What you enter: a nickname and an age band for your child, any story preferences you add (for example characters or things to avoid), book settings, and the chapters and edits you make.
- Narration audio made from your chapters, and playback settings such as reading speed.
This website
- If you use the contact form: your name, email address, topic and message.
Technical information
- Our servers record requests (the page or address requested, the response, timing and error codes) to keep the service working and secure. These records do not contain your stories, messages or passwords.
- Your IP address is seen by our hosting provider when you connect. For the contact form we keep only a scrambled, daily-changing code derived from it, to stop abuse.
Cookies
We use only cookies that the service needs: to keep you signed in to Bhaashi and Stories, and one called bhaashi_theme that remembers whether you chose Day, Night or Auto. We use no advertising or analytics cookies.
Children
Stories is used by parents and guardians, often with their children listening. Children do not create accounts and we do not knowingly collect personal information from children. Stories asks the adult for a nickname and an age band only so chapters suit the listener. If you believe a child has sent us personal information, tell us and we will delete it.
How we use it
- To provide your account and Stories: signing you in, writing and narrating chapters, and saving your books.
- To keep the service secure and working, including fixing errors and preventing abuse.
- To reply when you contact us.
We do not use your stories to train AI models, and we do not sell your information or share it for advertising.
Who helps us
A few service providers process information on our behalf, and only for the job described.
| Provider | What they do | What they receive |
|---|---|---|
| Amazon Web Services (US) | Hosting, our sign-in service (Amazon Cognito), databases, storage and server records | Everything listed above, stored on their servers in the United States |
| OpenAI (US) | Writes each new Stories chapter | Your child's nickname and age band, your story preferences, the book's settings, the idea you typed for tonight and the last chapter you kept. Never your email or password |
| Cartesia (US) | Turns a chapter's text into narration audio | The chapter text only |
| GoDaddy (US) | Our domain name records | No personal information |
OpenAI and Cartesia handle what we send under their own terms for business customers. We send them only what each task needs.
How long we keep it
- Account and Stories data: while your account is open. When you ask us to delete your account, we delete it, including from backups within 30 days.
- Contact messages: up to 12 months, then removed automatically. Sooner if you ask.
- Server records: up to 30 days.
Your choices and rights
You can ask us to show you, export, correct or delete the information we hold about you. Use the contact form; we may ask you to confirm the request from your account's email address, and we answer within 30 days. If you live in California or another place with privacy laws that give you these rights, they apply to you, and we will not treat you differently for using them. We do not sell or share personal information as those laws define it.
Security
Every Bhaashi site uses HTTPS. Passwords are handled only by our sign-in service. Administrative access to our systems needs a registered device certificate or a private key held by the founder. No system is perfectly secure; if something goes wrong that affects your information, we will tell you.
Changes
If we change this policy, we will update it here and change the effective date. If a change matters to how your family's information is used, we will tell you in Stories before it takes effect.