Privacy Policy · BibiQ

Last Updated: 2026/10/7

1. Introduction

BibiQ is an app provided by Tunahan Aktay (“we”, “us”, or “our”). It is listed in Apple’s Made for Kids category, and it is set up and managed by a parent or legal guardian. This Privacy Policy explains what data the app processes, why, and the choices you have. It is part of our Terms of Use.

BibiQ has no accounts, shows no ads, contains no analytics or advertising tools, and does not track your child across other companies’ apps or websites. We never ask for your child’s real name, birth date, email address, photo, voice or location.

2. Who We Are

BibiQ is developed and operated by Tunahan Aktay, who is responsible for the processing described in this policy. Contact: tunahanaktay.apps@gmail.com.

3. The Parental Gate and Consent

Everything in BibiQ that involves money, data leaving the device or a link out of the app sits behind a parental gate. The gate asks an adult to confirm they are 18 or older and then to answer a math question that a young child cannot reasonably solve. The gate appears before:

• every subscription offer, purchase and Restore Purchases;
• links to websites, including this policy and our Terms of Use;
• the Parents area and each action inside it;
• Settings and Delete Account;
• the first time a story is requested from our AI providers.

Passing the gate records parental consent on the device for one year. Before the first story, the app also shows which AI providers will receive data and what they receive. A parent can revoke consent at any time in the Parents area. The app then returns to its first-launch setup, and no story is requested again until an adult passes the gate.

4. Data We Process

Hero nickname and story settings (stored on the device)

During setup, a parent chooses a nickname for the story’s hero, whether the hero is a boy or a girl, a narrator voice and story settings (reading level, story length, rhyming and modern-day examples). The app asks for a nickname, not your child’s real name. These choices are stored only on the device.

Story requests (sent to our AI providers)

When a story is requested, the app sends a description of the story to our AI providers so they can write, illustrate and narrate the requested Bible story:

• Story text and illustrations: OpenRouter, Inc. receives the story’s Bible passage, the story settings, whether the hero is a boy or a girl, and a placeholder in place of the nickname. It passes the request to Google’s AI models, which write the story and draw its pictures. These requests run with zero data retention: Google does not store them or use them to train models. The nickname is never sent for the text or the illustrations; the app puts it back into the story on the device.
• Narration: ElevenLabs receives the text of each page, including the nickname so the narrator can say it, together with the chosen voice and language. ElevenLabs processes this text under its own privacy policy.

All of these requests pass through AIProxy, a secure relay that protects our service keys and blocks abuse. AIProxy uses an anonymous device identifier and your IP address for that purpose, and does not store the content of the requests.

Stories (stored on the device)

The stories, pictures and narration the app creates are saved only on the device, in My Stories. We do not keep copies on our servers.

Purchases

If a parent subscribes, Apple processes the payment. RevenueCat, Inc. receives the purchase history and an anonymous identifier so the app knows which features are unlocked. The app does not send install attribution data to RevenueCat.

App settings and diagnostics

Firebase Remote Config, a Google service, delivers app settings such as update and maintenance notices. It receives a random Firebase installation ID and your IP address to do so, and collects no usage events. Crash reports come only from Apple, for devices whose owners have chosen to share analytics with app developers in iOS Settings.

5. What We Do Not Do

• We do not collect your child’s real name, birth date, contact details, photos, voice recordings or location.
• We do not include advertising, analytics or crash reporting tools from third parties.
• We do not track your child across apps or websites, and we do not build profiles.
• We do not sell or share personal information for advertising.
• No person reads your child’s stories, unless you send one to us when asking for support.

6. Third-Party Services

• OpenRouter, Inc.: routes story text and illustration requests to Google, with zero data retention.
• Google: writes the story text and draws the illustrations through its AI models, with zero data retention; also delivers app settings through Firebase Remote Config.
• ElevenLabs: reads the story aloud from its text.
• AIProxy: secure relay for the AI requests; uses an anonymous device identifier and your IP address against abuse.
• RevenueCat, Inc.: manages subscriptions from the purchase history and an anonymous identifier.
• Apple: handles payments, and crash reports where the device owner allows them.

7. Data Retention

• Nickname, story settings and stories: kept on the device until you delete them. Delete Account in Settings erases them all, and so does deleting the app.
• AI requests: not stored by OpenRouter or Google. ElevenLabs keeps narration requests only as its own retention settings allow.
• Purchase information: kept by Apple and RevenueCat under their own policies.
• App settings requests: handled by Firebase under Google’s retention settings.

8. Data Security

All data travels encrypted between the device, our relay and our providers. Our service keys are protected by AIProxy so they cannot be taken from the app. While no system can guarantee complete security, we apply appropriate technical and organizational measures and review them as the app changes.

9. Children’s Privacy

BibiQ is designed for children, and we follow the laws that protect them, including the U.S. Children’s Online Privacy Protection Act (COPPA) and the EU and UK General Data Protection Regulation. A parent or guardian sets up the app, passes the parental gate before any data leaves the device, and can review, revoke or delete everything described here. If you believe your child shared personal information with us, for example by typing their real name, contact us at tunahanaktay.apps@gmail.com and we will help delete it.

10. International Transfers

Our providers process data in the United States and other countries. Where EU or UK law requires it, these transfers rely on the providers’ data protection terms, such as the EU Standard Contractual Clauses.

11. Your Rights

As a parent or guardian, and depending on where you live, including Turkey, the EU, the UK and the United States, you can ask to access, correct or delete your child’s personal data, object to or restrict its processing, withdraw consent at any time, and complain to your local data protection authority. Because the app has no accounts and keeps your child’s data on the device, you can do most of this yourself: change the nickname in Settings, revoke consent in the Parents area, or erase everything with Delete Account. For anything else, email us at tunahanaktay.apps@gmail.com.

12. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be posted here with a revised “Last Updated” date. If a change is significant, we will announce it in the app or on this page before it takes effect, and ask for consent again where the law requires it.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: tunahanaktay.apps@gmail.com