Privacy Policy
Last updated: 29 July 2026
This policy covers both the Whybird iOS app and this website. It is written to be read, not to be survived.
We operate no servers of our own, run no analytics, and use no advertising or tracking SDKs. Your child's answers are stored on your device and in your own iCloud account, where we cannot reach them.
1. Who is responsible
The controller of any personal data described here is Brigitte DO VALLE-SANTOS (Entrepreneur individuel (EI)), trading as Whybird, 830 Route de Choisi, 82290 La Ville-Dieu-du-Temple, France, SIREN 531 030 732. You can reach us at hello@whybird.app.
2. What the app collects
Nothing. Whybird has no account, no sign-up, and no user profile. We do not ask for your name, your email, your phone number, or your child's age or birthday, and we do not derive them. The app contains no third-party SDKs, no analytics, no advertising, and no crash-reporting service.
This is not a promise about how we behave with data we hold. It is a description of an architecture in which we hold none.
3. What is stored, and where
When your child answers a question and you choose to write it down, that text — along with your streak, badges and reading history — is stored:
- on your device, in local app storage; and
- in your own Apple iCloud account, in Apple's private CloudKit database, so it syncs to your other devices.
A private CloudKit database belongs to your Apple Account, not to us. We have no credentials for it and no way to read, export or delete its contents. Apple processes it under Apple's own privacy policy and terms.
4. What the app sends and receives
The app makes no requests to any server operated by us, because we do not operate one. It does communicate with Apple in four ways:
- iCloud sync— your progress and your child's answers, to and from your own private database.
- New journeys — the app reads new story content and artwork from a public CloudKit database we publish to. This is read-only and one-directional: content comes down to the phone, and nothing about you or your child goes up. It is how a new journey can arrive without an app update.
- Notifications— the evening reminder is scheduled on your device. A notification that a new journey has landed is delivered through Apple's push service, triggered by content being published, not by anything you did. Notifications are optional; declining them costs you nothing but the reminder.
- Purchases— handled entirely by Apple's StoreKit, see section 5.
Everything else — the four journeys the app ships with, their text and illustrations — is inside the app itself and works with no connection at all.
5. Payments
Subscriptions and the lifetime purchase are processed by Apple. Card details, receipts and billing addresses are handled by Apple and never pass through us — we receive no payment information about you, not even a masked card number. Apple provides us with aggregate, non-identifying sales reports.
6. This website
The site is a set of static pages. It sets no cookies, uses no analytics, no tag manager, no pixels, and no embedded third-party content. Fonts are served from this domain rather than a font CDN, specifically so that visiting the site does not disclose your IP address to a third party. There is no consent banner because there is nothing to consent to.
Our hosting provider, Vercel Inc., processes standard server logs (including IP addresses) to deliver the site and protect it from abuse. That processing rests on our legitimate interest in operating a secure website.
7. If you email us
When you write to us we see your email address and whatever you put in the message. We use it to answer you and for nothing else — no mailing list, no marketing, no sharing. We keep support correspondence only as long as it is useful for handling the matter and any follow-up, and delete it after that. The legal basis is our legitimate interest in responding to people who contact us, and, where your message concerns a purchase, performance of a contract.
8. Children
Whybird is designed for a parent or guardianto read aloud to a child. The paying, operating user is an adult. The app is not in Apple's Kids Category and is not directed to children as independent users.
We do not knowingly collect personal information from anyone, of any age. A child's answer, if you write one down, stays on your device and in your private iCloud — it is never transmitted to us, and it is never included in anything shared from the app unless you explicitly tick the box that includes it.
9. Your rights
If you are in the EU, EEA or UK, you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to data portability. Because we hold essentially no personal data, most of these rights you exercise directly:
- To see or change what is stored — open the app; the chronicle is the whole record.
- To delete everything— delete the app and remove its data from iCloud in your device's iCloud settings. We cannot do this for you, because we have no access.
- For anything we do hold — support email, essentially — write to hello@whybird.app and we will act on it.
You also have the right to lodge a complaint with your local data protection supervisory authority.
10. International transfers
We transfer nothing ourselves. Apple stores iCloud data and processes purchases across its own infrastructure, which may be located outside your country; those transfers are governed by Apple's terms and safeguards.
11. Changes
If this policy changes we will update the date at the top, and for any change that materially affects you we will say so in the app's release notes. We will not quietly start collecting data — if that ever changed, it would be the headline, not a footnote.