Bebiew Privacy Policy for users outside Korea

Effective: October 6, 2026

About this policy

This policy explains how Bebiew handles personal information for families whose Bebiew account belongs to a country or region other than the Republic of Korea.

Accounts in Korea are covered by our Korean privacy policy (개인정보 처리방침) instead.
Each account has a service region. We set it once, when the account is first used, from your app store country or, where that is not available, from the country of your internet connection, your device's time zone or its language region.
The main policy below applies in every country. The country sections at the end add what your local law requires. Where a country section differs from the main policy, the country section applies.
If we translate this policy and the versions differ, the English version applies unless your local law says otherwise.

In short

A parent or guardian holds the account. Children use Bebiew through that account.
We ask for consent once, before the first child profile or child mode, and the person agreeing confirms that they are the child's parent or legal guardian. We collect nothing from or about a child before that.
We use AI services from Anthropic, OpenAI and Google to make stories, pictures, narration and Bebie's chat.
Your data is processed in the United States, Taiwan and Korea.
We do not keep recordings of your child's voice on our servers. We keep the text of what your child said for 90 days, or up to 2 years in a report you choose to keep.
We do not sell personal information. We never use children's data for advertising. There are no ads in the apps, and we run no advertising measurement for users outside Korea.
In the weekly reading league, other families see only an alias such as "Reading friend 123", a league level and a weekly score. You can leave the league at any time. Anything more public, such as a story link or a contest entry, happens only when you choose it.
If we change this policy in a way that matters to you, we email you before the change takes effect.
You can see, correct and delete your family's data, and withdraw consent, at any time.

1. Who we are

The company responsible for your personal information (the "controller" or "organisation") is:

Company: MOFT AI Co., Ltd. (모프트에이아이 주식회사)
Address: Startup Bay, 3F, 86 Jungjeong-ro, Seogwipo-si, Jeju Special Self-Governing Province, Republic of Korea
Business registration no.: 207-87-03818
Representative: Giwoong Kim
Data Protection Officer (privacy officer): Giwoong Kim, admin@moftai.com

In this policy, "we" and "us" mean MOFT AI Co., Ltd. "You" means the parent or guardian who holds the account.

2. What we collect

2.1 From you, the guardian

Account details: your email address, your name or nickname, and your sign-in identifier from Google, Apple or Kakao if you use one.
Consent records: the version of the consent screen you agreed to, when, your service region, and your confirmation that you are the parent or legal guardian of the children you add.
Guardian check: to stop a child from reaching settings, purchases and deletion, we ask a question before guardian actions. We do not store the answer.
Optional answers: if you answer "How did you hear about Bebiew?", the one option you pick and when.
Guardian voice: having stories read in a guardian's own voice is not offered outside Korea, so we collect no guardian voice data from accounts outside Korea.
Event and offer notifications (optional): whether you turned them on, when, whether you also allow them at night, and your device's notification token.
Drawn Friend of the Month entries (optional): for each story you enter, the account and story, the month and time of entry, the version of the entry terms you agreed to, when you withdrew if you did, and whether the entry was picked.
Story links (optional): when you make a link to a story, a value that checks the link (we do not store the link itself), when it was made and when it closes, and your consent.
Support and reports: messages you send us, and reports you make about something the AI produced (which story page or chat turn, the reason, any note, and the outcome).

2.2 About your child, entered by you

Only after you give consent (section 4):

your child's name or nickname, age, and optionally gender, interests, personality hints and "heart treasures" (values you want a story to touch on);
reading, language and learning settings;
a photo of your child, if you add one, so the story's hero looks like your child. You can choose one of Bebiew's character pictures instead;
a drawing by your child and the kind and name of the friend you type, if you use "My drawn friend". We do not keep the location or other details embedded in the photo.

2.3 From your child while using Bebiew

Only after you give consent (section 4):

What your child says or types: answers during stories, chat with Bebie, and speaking activities. We send microphone audio to OpenAI to turn it into text. We keep the text. We do not keep the audio.
Bebie's memory: short notes Bebie picks from things your child clearly said, so later stories and chats can remember them. Each note is also stored as a numeric vector (an "embedding") with a pseudonymous ID.
Reading league: your family's weekly score (pages read plus points from finished daily challenges), your league level, and the league group you are placed in.
Choices and activity: story choices, pages read, quiz and game results, words saved to the word notebook, and a weekly growth record made of numbers only (no sentences, voice or name).
Stories made for your child: the story text, pictures, narration audio and cover.
Help replies: if Bebie gives a help reply (section 5), a record that it happened, when, for which child, and whether it was in text or voice chat. Never your child's words.
Some things stay only on your device and never reach our servers: recordings in "My story, told by me" and in "My own page", picture-diary pages, and books saved for offline reading. For the picture diary and "My own page", our servers keep only how many pages your child kept each day.

2.4 Collected automatically

IP address, browser, operating system, app version, language, time zone, access times, and error and security logs.
For notifications in the app: a device identifier issued by the operating system and a notification token.
For the free first book: a keyed one-way hash of your device ID, with when it was claimed and your service region, so each device can claim only one free book. We never store the raw device ID, and the hash is not linked to your account.
On the website: cookies and local storage needed for sign-in, security and your preferences. We set no analytics cookies for users outside Korea (section 9).

2.5 From the app stores

When you buy in the app, Google Play or Apple tells us the order number or transaction ID, purchase token, store account token, product, amount, currency and store environment. Card and other payment details stay with Google or Apple. We never receive them.

2.6 What we do not collect

We do not collect your location, contacts, or advertising ID. We do not ask a child for an email address or phone number.

3. Why we use it

We use personal information only to:

create and secure your account and confirm it is you;
make, store and play your family's stories, pictures and narration;
run Bebie's chat, speaking activities, the word notebook and learning games;
remember things your child said so later stories feel personal (Bebie's memory);
show you reports about what your child read, chose and said. Reports describe activity. They are not medical, psychological or developmental assessments, and we never rank children against each other;
process purchases, subscriptions and refunds with Google Play or Apple, and keep the records the law requires;
send the notifications you turn on, including event and offer notifications only if you opt in;
run the weekly reading league; take Drawn Friend of the Month entries and post the ones we pick; make the story links you ask for;
keep children safe: check what goes into and comes out of the AI, handle reports, and prevent abuse such as repeat free-book claims;
find and fix errors;
improve the service, using analytics only if you opt in;
meet our legal obligations and handle disputes.

We do not use your data for any other purpose without telling you first and, where the law requires, asking for your consent.

4. Children and guardian consent

Who holds the account. A Bebiew account is held by a parent or guardian aged 18 or over. Children use Bebiew through that account, in child mode on a device the guardian sets up.

Consent, once, before anything about a child. Before you create the first child profile or turn on child mode for the first time, whichever comes first, we show a one-time consent screen. It explains what we collect about your child, why, which providers process it and in which countries, how long we keep it, what other people can see, and how to delete it. You confirm that you are the parent or legal guardian of each child you add, and then agree. You cannot continue without both. We collect nothing from or about a child before you agree.

Your consent covers every child you add to the account later.
We store the consent version, the time, your service region and your confirmation with your account.
You can withdraw consent at any time in Parent dashboard > Data management. Once you withdraw, story creation, chat with Bebie, learning activities and reports stop for every child until you agree again. Stories you already have stay in your library.

Telling your child. For accounts in Singapore and New Zealand, the consent screen asks you to tell your child, in your own words, that you shared their name, age and photo with Bebiew so it can make stories about them. When your child first meets Bebie, Bebie says the same thing in child-friendly words (see the New Zealand section).

Child mode. In child mode a child can make, read and play. Settings, purchases, deletion and the parent pages need the guardian check. The guardian check is not a substitute for your consent.

If a child signed up alone. If you believe a child created an account without a guardian, contact us and we will delete it.

5. How we use AI

What each AI service does, and what it receives:

Writes the story text: Anthropic (Claude). Your child's profile details (name or nickname, age, gender, interests, personality hints, heart treasures, language settings, the drawn friend's kind and name), Bebie's memory notes, earlier story text, and your child's answers at story checkpoints.
Draws the pictures, including a hero who looks like your child: OpenAI. The photo you added, your child's drawing, and picture instructions made from the story. From the photo, OpenAI writes a short description of hair, eyes, skin tone and face shape, which we use only to draw the hero.
Narrates the story: Google (Gemini text-to-speech on Google Cloud). Safety-checked story text, which includes your child's name. Never your child's voice or words. OpenAI narrates a page if Google cannot.
Bebie's chat and voice: OpenAI. What your child says or types to Bebie, and Bebie's memory notes.
Turns speech into text: OpenAI. Microphone audio from your child during stories, chat and speaking activities.
Safety checks: OpenAI. Story text and what your child says, checked before it is shown or stored.
Report sentences, memory notes, quizzes, word explanations: OpenAI. Your child's activity and answers.

More about AI at Bebiew:

Anthropic writes the story text. If Anthropic is unavailable and we switch it off during an outage, OpenAI writes new stories instead. We only ever use the providers listed in section 6.
Bebie is an AI, not a person. In Bebie's room the chat panel shows an "AI" badge, and Bebie says it is an AI friend at the start of each text chat. After a long chat, Bebie suggests a break.
Safety. We check what goes into and comes out of the AI. If your child says something that suggests they may be at risk of harm, Bebie replies with a supportive message, asks your child to tell a trusted grown-up and, in Singapore and New Zealand, gives local helpline numbers. Bebie is not a crisis service, and we do not watch chats live. When Bebie gives this reply in a text chat, or says the helpline numbers in a voice chat, we show you that it happened and when at the top of the parent dashboard, and send a notification to your devices if you turned notifications on. We never tell you your child's words.
People. Our staff look at inputs and outputs only as far as needed for safety, quality and handling an incident or a report you send.
No training. We do not let your family's data be used to train public AI models without separate consent. Anthropic, OpenAI and Google do not use what we send them to train their models under our API terms.
AI can be wrong. AI output can be inaccurate or odd. You can report anything with the report button on your family's stories and in Bebie's chat.
AI labels. Books carry an "AI" mark, and pictures carry machine-readable metadata saying they were made by AI.

6. Who processes your data, and where

We use these service providers. They process data only to provide their service to us.

Google (Google Cloud, Firebase), Taiwan (Google Cloud region asia-east1): our web and app servers.
Google (Google Cloud, Firebase), Korea (Google Cloud region asia-northeast3, Seoul): database, file storage and background jobs.
Google (Firebase), United States and other Google locations: sign-in and app notifications on Android.
Google (Gemini on Google Cloud), United States and other Google Cloud locations (global endpoint): story narration.
Anthropic, United States: story text.
OpenAI, United States: pictures, Bebie's chat and voice, speech-to-text, safety checks, report sentences.
Pinecone Systems, Inc., United States: stores and searches Bebie's memory vectors, with pseudonymous IDs.
Functional Software, Inc. (Sentry), United States: error and performance monitoring. Default personal data sending and session replay are off.
Apple, United States: iOS notifications (which may show your child's name and a story title) and App Store purchase checks.
Google (Google Play), United States: Android purchase and subscription checks.
Microsoft (Azure AI Speech), Korea: pronunciation scores, only for a test group of families we invite. Switched off at present.

How long providers keep what we send them:

Anthropic: deleted within 30 days. Up to 2 years if its automated safety systems flag it, or longer if the law requires.
OpenAI: we turn off request storage. Its safety-monitoring logs can hold requests for up to 30 days, and prompt caches up to 24 hours. Images can be kept longer depending on its safety checks.
Google (narration): can hold requests in memory for up to 24 hours. Keeps a request for up to 90 days only if its automated checks flag possible abuse.
Pinecone: after we delete a vector, its backups are deleted within 90 days.
Sentry: kept until the retention period we set in Sentry ends.

Apple and Google also run their app stores under their own privacy policies. A Drawn Friend of the Month entry we pick is posted on Bebiew's Instagram account, which Meta runs from the United States and other countries under Instagram's own terms (section 9.2). If you choose to sign in with Kakao on the website, or to send a story link with KakaoTalk, Kakao Corp. (Korea) handles that under its own terms.

Not used outside Korea. These providers serve Korean features only and do not receive data from accounts outside Korea: PortOne (Korean card payments), SOLAPI and Kakao (Korean text and KakaoTalk notification messages, and address search for printed books), SWEETBOOK and its couriers (printed books, Korea only), guardian voice processing on Google Cloud in Singapore, and the advertising measurement services of Google (Google Ads), Meta (Pixel and Conversions API) and OpenAI (ChatGPT ads).

7. Sending data to other countries

We are based in Korea, so your data leaves your country. The list in section 6 shows where it goes: the United States, Taiwan and Korea.

How we protect it:

Our contracts with our providers allow them to use the data only to provide their service to us, and require them to keep it secure.
Before you agree, the consent screen names each provider and country, and tells you that those countries' laws may not protect your information the way your own country's law does. We rely on your agreement there as well as on our contracts with the providers.
Each provider's role and retention are set out in section 6.
We send each provider only what it needs for its task. For example, Google's narration never receives your child's voice, and Bebie's memory vectors carry a pseudonymous ID, not your child's name.

The Singapore and New Zealand sections explain how this meets those laws.

8. How long we keep it

A story you did not pay for, with its pictures and audio: 3 days after it is made.
Stories you keep (bought, made with a credit, coupon or subscription, or your free first book): while your account exists. A story you delete goes to the trash and is removed after 30 days.
Your child's photo: until you delete it in Data management (the hero keeps the drawn look), delete the profile, or close the account.
Your child's drawing ("My drawn friend"): kept with the story made from it. Deleted within 24 hours if no story is made.
Recordings of your child's voice: not stored. Audio goes to OpenAI for speech-to-text as your child speaks.
What your child said or typed, summaries of it, report lines that quote it, and Bebie's memory notes and vectors: 90 days after we store it. If you tap Keep on a report, that report keeps your child's words until you remove Keep, delete the data or close the account, and for no more than 2 years after we stored them.
Story choices: while your account exists, as part of the book.
Reports: while your account exists. Your child's words in them are removed after 90 days (above); the record and date, such as "said it in their own words", stay.
Growth record (numbers only): while your account exists.
Results of each learning game step: 1 year, after the week is added to the growth record.
Word notebook: until you remove a word.
Reading league entries: your family's entry in each week's group, with its alias and score, is deleted 90 days after the week ends. Leaving the league takes you out of the current group, and closing the account removes you from every group.
Drawn Friend of the Month entry records: while your account exists, to show each consent and withdrawal. A withdrawn entry is never posted, and anything already posted is taken down.
Story link record: until the link closes (after 30 days, or earlier if you close it or make a new one) or the story is deleted.
Event and offer notification consent: until you turn it off. It lapses after 2 years unless you confirm it again.
Safety-check records (text the safety check flagged): 90 days.
Help-reply records (that it happened, when, for which child, and in text or voice chat): 90 days after the help reply. Deleting the child's AI data in Data management, or closing the account, deletes them sooner.
Reports you make about AI output: 1 year after we handle them.
Account, child profiles and settings: while your account exists.
Notification token: until you sign out on that device. The device record is deleted when you remove the device or close the account.
Free-book device hash: not linked to your account. Kept after you close your account, so the device cannot claim a second free book.
Consent records: while your account exists. Deleted when you close it.
Optional analytics records: Bebie screen records 30 days. Voice-quality measurements, never linked to an account, 90 days.
Purchase, order and refund records: 5 years, as Korean e-commerce law requires of us as a Korean company. These records hold only the order details in section 2.5, never your child's information, and are kept apart with restricted access.
Complaint and dispute records: 3 years.
Access logs: 3 months.
Error monitoring: until the retention period we set in Sentry ends.
Development event logs: no longer collected. All earlier ones were deleted on 29 September 2026.

When you close your account, we delete your account, child profiles, stories, pictures and audio, chat and memory data, reports, and device records from our systems within 10 days. Purchase and dispute records we must keep by law are stored separately, with restricted access, and deleted when their period ends. Copies at our providers are deleted on the schedule in section 6.

9. Sharing, advertising and what other people can see

We do not sell personal information. We do not share it with anyone for their own marketing.
We never use children's data for advertising. We do not use it to target ads, to measure ads or to build ad profiles. There are no ads in the Bebiew apps, and the apps carry no advertising or analytics tags.
No advertising measurement outside Korea. We do not run advertising measurement for users outside Korea, in the apps or on the website.
The public gallery is off outside Korea. Families outside Korea cannot post to it or view it.
Website analytics. We do not run website analytics for users outside Korea.
Other sharing. We disclose personal information only to the providers in section 6, when the law requires it, to protect someone's safety, when you choose one of the options below, or if Bebiew changes hands.
If Bebiew changes hands. If another company takes over Bebiew, your information goes to it only to keep running Bebiew under this policy. We email you before it happens, so you can close your account first.

9.1 The reading league

Every family takes part in the reading league from the start. You can leave it at any time with the Reading league switch on the parent dashboard, after the guardian check, and join again later.
Each week your family is placed in a group of up to 30 families. Other families in the group see only:
- an alias made from a number, such as "Reading friend 123". It is never your child's name, and you cannot set it yourself;
- your league level (for example Bronze or Silver);
- your weekly score, from pages read and finished daily challenges.
They never see your child's name, photo, age, stories or what your child said, and they cannot contact you.
Groups can include families from Korea and other countries.
In Korea, a family that publishes a story in the gallery can also open a public Bebie room that league members can visit. Families outside Korea cannot open or visit public rooms, because these come with the gallery.

9.2 Drawn Friend of the Month (only if you enter)

If your child drew a friend for a story ("My drawn friend"), you can enter that story in Drawn Friend of the Month from your library. Entering is optional and needs the guardian check. The entry terms are shown next to the Enter button, and tapping Enter is your consent for that one story.
Entering costs nothing. Each month we look at the drawings and pick one or a few; nothing is decided by chance. If yours is picked, we post your child's drawing and the story's friend picture on Bebiew's Instagram account and in our story series "Bori's Journey", where the friend may appear as a guest. Anyone can see these posts.
We never post your child's name, face or photo, the story text, or anything about you.
A featured family gets a credit for one free book.
You can withdraw an entry at any time from your library. We never post a withdrawn entry, and we take down anything already posted. We cannot recall copies other people saved while a post was up.

9.3 Sharing a story by link (only if you make one)

You can send a finished story to family or friends by link, after the guardian check and your consent for that link.
Anyone who has the link can read the story's title, text and pictures and hear its narration without signing in. The story may include your child's name and a hero that looks like your child.
The link closes after 30 days. You can close it earlier in your library, and making a new link closes the old one. Linked stories are not in the gallery and are marked so search engines do not collect them.
After a link closes, the story can no longer be read through Bebiew, but we cannot delete copies that people who had the link already saved.

9.4 Event and offer notifications (only if you opt in)

Only if you turn them on in Parent dashboard > Data management, after the guardian check, we send app notifications about Bebiew events, offers, new features and reading reminders.
Each one is marked as an advertisement and says how to turn them off.
We do not send them at night (9 p.m. to 8 a.m. in your local time) unless you also allow that.
Your consent lapses after 2 years unless you confirm it again. You can turn them off at any time, and they stop at once.
Service notifications, such as a finished story or a purchase, do not depend on this choice.

10. Security

We protect personal information with:

access limited to the people who need it, and sign-in and permission checks on every request;
encryption in transit, and Google Cloud's default encryption for stored data;
separation of important data from other data;
review of logs, vulnerability management, supervision of our providers, and an incident response procedure;
error monitoring that does not send default personal data or record sessions.

No system is perfectly secure. If you think your account is at risk, contact us at once.

11. Your rights and choices

You can ask to:

see the personal information we hold about you and your child;
correct it;
delete it;
withdraw consent (see section 4 for what then stops).

How:

Edit or delete a child profile: Parent dashboard > Data management.
Delete a child's AI data (chat, memory, activity records): Parent dashboard > Data management.
Delete your child's original photo: Parent dashboard > Data management.
Delete a story: Library.
Withdraw guardian consent, or opt in or out of analytics: Parent dashboard > Data management.
Turn event and offer notifications on or off: Parent dashboard > Data management.
Leave or rejoin the reading league: the Reading league switch on the parent dashboard (see section 9.1).
Withdraw a Drawn Friend of the Month entry: Library, on that story.
Close a story link: Library, on that story.
Close your account: in the app or on the web, signed in, at bebiew.com/account/delete. Cancel any store subscription first: closing the account does not stop Google Play or Apple from renewing it.
Anything else, or if you cannot sign in: email admin@moftai.com with your account email.

We may ask you to confirm your identity, or that you are the child's guardian, before we act. We do not charge for requests. We reply as soon as we can and within the time your local law sets (the country sections give the limits). If we cannot do what you ask, we tell you why. You can complain to your local privacy regulator (see the country sections).

12. Data breaches

If a breach of personal information is likely to cause you or your child significant harm, we tell you and the regulators as your local law requires. We tell you what happened, what data was involved, what we are doing, and what you can do.

13. Changes to this policy

We post every change on this page with its date. Changes that are not worse for you take effect at least 7 days after we post them. Changes that are worse for you take effect at least 30 days after we post them.
If a change is worse for you, or changes what we collect about your child, why, or who receives it, we also email you when we post it.
If a change uses children's data for a new purpose or in a new way, we ask for your consent again before we do it.

14. Contact

Data Protection Officer: Giwoong Kim
Email: admin@moftai.com
MOFT AI Co., Ltd., Startup Bay, 3F, 86 Jungjeong-ro, Seogwipo-si, Jeju Special Self-Governing Province, Republic of Korea

Country sections

A. Singapore

This section applies to accounts whose service region is Singapore. It adds to the main policy under the Personal Data Protection Act 2012 (PDPA).

Data Protection Officer. Our Data Protection Officer is Giwoong Kim. Business contact: admin@moftai.com. (PDPA s.11)
Children. For a child under 13, we rely on the consent of the parent or guardian, following the PDPC's Advisory Guidelines on children's personal data. Bebiew is for children aged about 3 to 12, so we always ask the guardian. The consent screen in section 4 is how we get it, and the person agreeing confirms that they are the child's parent or legal guardian.
Purposes and consent. We collect, use and disclose personal data only for the purposes in section 3, which we tell you before or when we collect it. If you withdraw consent, we tell you what that means (section 4) and stop within a reasonable time.
Telling your child. The consent screen asks the guardian to explain Bebiew to the child, and Bebie gives Singapore children the short notice in section B too.
Access and correction. We respond as soon as reasonably possible and within 30 days. If we need longer, we tell you within 30 days when we will respond.
Transfers outside Singapore. Before you agree, the consent screen names each provider and country and summarises how your data is protected, and we rely on your consent for the transfer (Personal Data Protection Regulations 2021). We also rely on our contracts with each provider, which allow it to use the data only to provide its service to us and require it to keep the data secure (section 7).
Data breaches. We assess a suspected breach as quickly as we can, and within 30 days. If it is notifiable, we notify the PDPC as soon as practicable and no later than 3 calendar days after we assess it as notifiable. We tell affected people at the same time or soon after, where the breach is likely to cause them significant harm.
What others can see. The public gallery is off for Singapore accounts. Your family's content leaves your account only when you choose it, each time: a story link you make (section 9.3) or a Drawn Friend of the Month entry we pick and post on Instagram (section 9.2). In the reading league, other families see only an alias, a level and a weekly score, and you can leave the league at any time (section 9.1). If you see anything harmful in Bebiew, use the report button or email admin@moftai.com, and we act on it promptly.
Event and offer notifications. Sent only with your opt-in. Each one is marked as an advertisement, names Bebiew as the sender, and says how to turn them off. Turning them off works at once.
Complaints. Contact our Data Protection Officer first. You can also contact the Personal Data Protection Commission (www.pdpc.gov.sg).

B. New Zealand

This section applies to accounts whose service region is New Zealand. It adds to the main policy under the Privacy Act 2020, which applies to overseas businesses that carry on business in New Zealand.

Collection notice (IPP 3). This policy and the consent screen tell you what we collect, why, who receives it, our name and address, that providing it is voluntary but Bebiew cannot make stories without it, and your rights of access and correction.
Telling your child (IPP 3A). Information about your child comes from you, not from your child. So we take two steps to make sure your child knows:
1. The consent screen asks you to tell your child, in your own words, what you shared and why.
2. When your child first meets Bebie, Bebie says: "Your grown-up told me your name and age and shared a photo so we can make stories about you. If anything is wrong, ask your grown-up to fix it." If you chose a character picture instead of a photo, Bebie leaves out the photo.
- You or your child can ask to see or correct this information at any time (section 11).
Fair collection (IPP 4). We collect only what the service needs, and we take extra care because our users are children.
Access and correction (IPP 6 and 7). We respond as soon as reasonably practicable and within 20 working days.
Overseas providers (IPP 12). Our providers in section 6 hold data on our behalf to provide their service to us, and we remain responsible for it (Privacy Act s.11). Some providers keep flagged requests for their own safety checks (section 6), so we also treat what we send them as a disclosure under IPP 12. For that, we rely on your authorisation: before you agree, the consent screen tells you that these providers may not be required by their own countries' laws to protect it the way New Zealand law does. Our contracts with the providers also allow them to use the data only to provide their service to us and require them to keep it secure (section 7).
Disclosures you choose (IPP 11). A story link you make and a Drawn Friend of the Month entry you submit are disclosures you authorise, one at a time (sections 9.2 and 9.3). A picked entry is posted publicly on Instagram, without your child's name or face. In the reading league, other families see only an alias, a level and a weekly score, and you can leave the league at any time (section 9.1).
Event and offer notifications. Sent only with your opt-in. Each one names Bebiew as the sender and says how to turn them off. Turning them off works at once.
Your child's photo (Biometric Processing Privacy Code 2025). The photo is optional; you can choose one of Bebiew's character pictures instead. If you add one, an AI service describes your child's hair, eyes, skin tone and face shape only so we can draw the story's hero. We never use the photo to verify or identify your child, or to infer their health, mood, personality or ethnicity. You can delete the photo at any time (section 11).
Privacy breaches. If a privacy breach has caused or is likely to cause serious harm, we notify the Privacy Commissioner and the affected people as soon as practicable.
Complaints. Contact our Data Protection Officer first. You can also complain to the Office of the Privacy Commissioner (www.privacy.org.nz).