Privacy Policy
Last updated: 14 June 2026
Hushling is built for families. This policy explains what we collect, why we need it, and how we keep it safe — in plain English.
What we collect
- Your email address — to create your account and send important service messages
- Your voice recording — a short sample you record once, used to create guided exercises in your voice
- Child usage data — which emotion zones and exercises your child uses, and when (no advertising profiles, ever)
- Basic account info — child first name and age range, set up by you as the parent
How we use it
- To run the Hushling app — exercises, dashboard insights, and voice-guided sessions
- To send account emails (reminders, subscription updates) — you can opt out of non-essential emails
- To improve the app based on anonymous usage patterns
We never sell your data. We never use child data for advertising.
How we store it
- Supabase — your account, child profiles, and usage data live in encrypted databases in the EU
- ElevenLabs — your voice sample is sent securely to create your cloned voice; generated audio is stored in Supabase
- Paddle — handles subscription billing; we do not store card details
All data is encrypted in transit (HTTPS) and at rest.
Data retention
- While your subscription is active, we keep your data so the app works
- If your subscription lapses, we retain your data for 90 days in case you re-subscribe
- We email you a 30-day warning before permanent deletion
- After 90 days without an active subscription, your account and all associated data (including voice data) are permanently deleted
- You can delete your account at any time from the parent dashboard — deletion is immediate
Children's data
Hushling is designed for children to use, but only with a parent in charge.
- Children do not create their own accounts — you set everything up as the parent
- We require verifiable parent consent before any child uses the app (UK GDPR compliant)
- We collect the minimum data needed for the app to work — nothing more
- You can view, export, or delete all child data from your dashboard at any time
Your rights
Under UK GDPR, you can access, correct, export, or delete your data at any time.
Contact for data requests: to be confirmed