Legal

1What this is about

1.1 These terms apply to the use of the Poquito app for iOS and Android (the "app"). The provider is Poquito Media UG (haftungsbeschränkt), Langhansstraße 86, 13086 Berlin, Germany, registered in the commercial register of the Local Court of Charlottenburg under HRB 278401 ("we" or "us").

1.2 With the app you create personalised read-aloud stories in which your child plays the main role. These terms set out what we owe you and what we expect from you.

1.3 Paid subscriptions and purchases of credit are additionally governed by the terms of the App Store or Google Play. Section 8 explains why.

1.4 Your own terms and conditions do not become part of the contract unless we expressly agree to them in text form.

1.5 A consumer within the meaning of these terms is any natural person who enters into the contract for purposes that are predominantly outside their trade, business or profession.

1.6 If you obtained the app from the App Store, the additional provisions in Section 18 also apply. Insofar as they concern your relationship with Apple, they take precedence over the other provisions in the event of a conflict.

2Poquito is a service for adults

2.1 The app is intended exclusively for adults and for private use. By registering, you confirm that you are at least 18 years old.

2.2 Your child does not create an account, does not enter anything and is not a party to the contract. Your child can only listen to the stories in our series and to personalised stories that you have read and released beforehand (Section 5.4).

2.3 If you create a profile for a child for whom you do not have parental responsibility — for example as a grandparent or godparent — you warrant that the child's parents or guardians agree.

3Your account and how the contract is concluded

3.1 You need an account to use the app. There is no right to registration.

3.2 When registering, you provide your first name and a valid email address. Alternatively, you can sign in with your Google or Apple account. Your details must be truthful.

3.3 This is how the contract is concluded: you enter your details, can check and correct them before submitting, and complete registration with the button provided for this. In doing so, you make an offer to conclude a free-of-charge contract for the use of the app's basic functions. We accept it by activating your account and sending you a confirmation by email.

3.4 The contract language is German. We provide this English translation for your convenience; the German version is authoritative. We store these terms in their current version. You can access, save and print them at any time in the app and at poquito.ai/app/agb, in English at poquito.ai/en/app/terms. We send you the version in force at the time of your registration with the confirmation.

3.5 The app shows you the scope of free use — for example, how many stories you can create without a subscription and whether we give you credit to start with. We may change this scope for new accounts. Section 9 applies to your existing account.

3.6 Keep your login details secret and let us know if you have reason to believe that someone else is using your account.

3.7 You can delete your account at any time — in the app under "Settings" and independently of the app at poquito.ai/delete-account. When you delete it, we remove the data belonging to your account unless statutory retention obligations prevent this. There is no mere deactivation.

3.8 Important: Deleting your account does not end your subscription. A subscription taken out via the App Store or Google Play must be cancelled separately in the settings of the respective store. We cannot do this for you. Credit is tied to your account and lapses on deletion, purchased credit as well as credit given to you. There is no refund for it. Please use your credit before deleting your account; the app and the deletion page show you beforehand how much you have left. For credit you bought before this version 1.5 applies to you, we will continue to refund the unused part of the purchase price on request to legal@poquito.ai. If you withdraw from the user contract, section 19 applies to purchased credit.

3.9 As a consumer, you can withdraw from the usage contract within fourteen days. The withdrawal instructions in section 19 explain how; you will find the model withdrawal form in section 20. The easiest way is the "Vertrag widerrufen" ("Withdraw from contract") button in the app under "Settings", or the page poquito.ai/withdrawal, which works without logging in. For subscriptions and credit, the withdrawal rules of the respective store apply (section 8.2).

4What we provide

4.1 We provide you with an app with which you can generate read-aloud stories. They are based on the details you enter about the characters and on the topic card you choose. We also provide ready-made stories from our series.

4.2 We owe you the generation of a story based on your details, not a particular content outcome. Section 5 explains how the stories are created and what this means for their content.

4.3 We endeavour to keep the app available at all times. Interruptions due to maintenance, technical faults or failures of upstream services are excluded from this.

4.4 We use service providers to deliver our services. Our privacy notice sets out who they are and what they process.

4.5 The app's page in the App Store or on Google Play shows you which devices and operating system versions the app requires before you download it.

5How the stories are created — and how to report content

5.1 The text of the story and the read-aloud audio version are generated with artificial intelligence systems. We label the stories in the app as generated with artificial intelligence. For the audio version we use a ready-made voice provided by the speech synthesis vendor. We do not clone voices and do not process voice recordings of you or your child.

5.2 A story is written anew each time it is requested. It may contain linguistic inaccuracies or factual errors and may differ from other stories in structure, style and length. This is inherent in the way it is generated. We point this out to you separately before you register and ask you to confirm it.

5.3 We created the illustrations in the app in advance using artificial intelligence tools. They are not generated from your details. We never ask you for a photo of your child or of other people and do not generate images of them.

5.4 We use automated checks to avoid content that is unsuitable for children. These checks do not catch every single case. That is why the app only releases the audio version of a personalised story for your child once you have read the story and confirmed that it suits your child. We read and approved the stories in our series before publication.

5.5 If you find something in a story that is not suitable for children or is unlawful, please report it to us. In the app, every story has a "Report content" button. You can also write to us at report@poquito.ai.

5.6 It helps us to know which story it is, which passage you mean and what is wrong with it. We don't need anything more.

5.7 We confirm receipt and review every report. If the story is indeed unsuitable or unlawful, we remove it and adjust our checks. We let you know how we decided. Reporting is free of charge and has no disadvantages for your account.

6What we expect from you

6.1 Keep your details accurate and up to date.

6.2 Do not use the app unlawfully and do not try to circumvent technical protection measures or usage restrictions.

6.3 Tell us about defects as soon as you notice them.

6.4 If you create characters based on real people, please make sure that these people agree. Use first names only — for people outside your family, ideally made-up names — and leave out details that the story does not need, in particular details about health, religion or similarly sensitive topics.

6.5 Do not share your login details and do not allow your account to be used by several households. Family Sharing under Section 18.2 remains unaffected.

7Your rights in the stories

7.1 To the extent that rights exist in the stories and audio files generated for you, you receive a simple (non-exclusive) right to use them privately, unlimited in space and time. It continues to apply after the contract ends.

7.2 Any commercial exploitation — in particular publication, reproduction for commercial purposes or passing on for a fee — requires our prior consent in text form.

7.3 All rights in the app itself, its design, the topic cards and the character Cleo remain with us, as do any rights in the illustrations, to the extent such rights exist.

8Subscriptions and credit — who your contractual partner is

8.1 You buy paid subscriptions and credit exclusively through the store's billing and not from us. Your contractual partner is the operator of the store from which you obtained the app:

• App Store: your contractual partner is Apple Distribution International Ltd.
• Google Play: your contractual partner is Google Commerce Limited.

8.2 These purchases are governed by the terms of the respective store. There you will also find information on your right of withdrawal, refunds and cancellation. We are not a party to these contracts and do not receive any payment details from you when you buy.

8.3 The prices shown to you during the purchase process apply. All prices include statutory VAT. Invoices and payment receipts are provided by the respective store.

8.4 A subscription includes a certain number of stories per billing month. The app shows you how many before you buy. Stories from this allowance that you do not use in a billing month expire at its end and are not carried over to the next one.

8.5 You buy credit individually or in packs. You redeem it in the app for particular services, for example for an additional story or for the audio version of a story. The app shows you what a credit covers before you buy. We may also give you credit, for example when you start or as part of a promotion; others may also give you credit as a gift where the app offers this.

8.6 Credit does not expire as long as your account exists. This applies to purchased credit as well as to credit we give you, for example on registration. It is available to you in addition to a subscription. When you create a story or an audio version, we first use your subscription allowance, then credit given to you and finally purchased credit. Credit is tied to your account and cannot be transferred to another account. Sections 3.8, 12.3 and 12.4 govern what happens to purchased credit if you delete your account or we terminate the user contract.

8.7 You cancel your subscription in the settings of the App Store or Google Play. The app shows you how to get there.

8.8 If you use a trial period, it turns into a paid subscription when it ends unless you end it beforehand. The respective store informs you of the length of the trial period, the subsequent price and how to end it before you sign up.

8.9 As long as a subscription exists or you have credit, we unlock the corresponding scope in the app. Our privacy notice explains which information we receive from the store for this purpose.

9Updates and changes to the app

9.1 During the term of the contract, we provide you with the updates that are necessary to keep the app in conformity with the contract. These include security updates.

9.2 You receive updates via the App Store or Google Play, as with any other app. We do not push updates to your device by bypassing the stores. Whether you update automatically is up to you in your device settings.

9.3 Beyond the changes required to maintain conformity, we may change the app if there is a valid reason for doing so — in particular adaptation to new technical environments or operating systems, changes to or discontinuation of our service providers' services, security reasons or a change in the law —, if this does not cause you any additional costs and if we inform you clearly and comprehensibly about the change. If a change impairs your access or the usability of the app more than insignificantly, we will inform you in text form at least six weeks in advance and point out your right to terminate. You may then terminate the contract free of charge within 30 days of receiving the information or, if the change takes effect later, within 30 days of it taking effect.

9.4 A reduction in the scope of free use under Section 3.5 for your existing account is a change within the meaning of Section 9.3.

10If something doesn't work

10.1 Your statutory rights remain unaffected. If you are a consumer, the statutory provisions apply in the event of defects, in particular the provisions on consumer contracts for digital products, to the extent that they apply to the contract in question.

10.2 Subject to Sections 3.8, 12.3 and 12.4, claims relating to your subscription or to purchased credit — for example for a refund — are directed against the store as your contractual partner and follow its terms. Please still tell us about the problem: we take care of the technical side.

10.3 If you refuse to cooperate reasonably and as necessary in determining whether an impairment is caused by your digital environment, you bear the burden of proving a defect to that extent. Section 11 remains unaffected.

10.4 If you are a trader, the limitation period for claims for defects is twelve months from provision. This does not apply to claims under Section 11.1.

11Liability

11.1 We are liable without limitation for intent and gross negligence, for injury to life, body or health, under the provisions of the German Product Liability Act and to the extent of any guarantee we have given.

11.2 In the event of a slightly negligent breach of an obligation whose fulfilment is essential for the proper performance of the contract and on whose fulfilment you may regularly rely, our liability is limited to the foreseeable damage typical for the contract.

11.3 Otherwise, our liability is excluded.

11.4 These limitations also apply in favour of our legal representatives and vicarious agents.

12Suspension, term and termination

12.1 If you breach Section 6, we may temporarily suspend your account if this is necessary to protect other users, the service or third parties. We inform you of the suspension and the reason for it and lift it as soon as the reason no longer applies. In this case, the store's refund rules apply to an ongoing subscription.

12.2 The free user contract runs for an indefinite period. You can end it at any time without notice by deleting your account.

12.3 We may terminate the user contract with 30 days' notice. If a subscription is running, our termination takes effect at the earliest at the end of the billing period already paid for. In the notice of termination, we point out that you must end the subscription with the store so that it does not renew. If you have purchased credit that you have not used by the time our termination takes effect, we refund you the part of the purchase price attributable to that credit. We do not refund credit that we gave you.

12.4 The right of either party to terminate for good cause remains unaffected. Good cause exists for us in particular if you breach Section 6 again despite a suspension or warning. The rules on refunding credit in Section 12.3 apply accordingly; our claims for damages remain unaffected.

12.5 Termination of the user contract does not affect your subscription with the store. Section 3.8 applies.

12.6 After termination, we delete your account in accordance with Section 3.7. You may continue to use stories that you previously saved outside the app in accordance with Section 7.1.

13Data protection

13.1 How we handle your data and your child's data is set out in our privacy notice. You can find it in the app and at poquito.ai/en/app/privacy.

13.2 The privacy notice is not part of these terms.

14Changes to these terms

14.1 We may amend these terms if this is necessary to adapt them to a change in the law, to supreme court case law or to a change in our offering.

14.2 We present the amended terms to you the next time you start the app and ask for your consent. Without your consent, they do not take effect in relation to you. Your silence does not count as consent.

14.3 If you do not agree, you can continue to use the app to the existing extent. In this case, we may terminate the user contract in accordance with Section 12.3.

15Dispute resolution

15.1 We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.

16Final provisions

16.1 The law of the Federal Republic of Germany applies, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a consumer, mandatory consumer protection provisions of the country in which you have your habitual residence remain unaffected.

16.2 If you are a merchant, a legal entity under public law or a special fund under public law, Berlin is the exclusive place of jurisdiction.

16.3 Should individual provisions be invalid, the validity of the remaining provisions remains unaffected.

17Contact

18Additional provisions for users who obtained the app from the App Store

The following provisions apply only if you obtained the app from the App Store.

18.1 These terms are concluded solely between you and us, not with Apple. We alone are responsible for the app and its content.

18.2 The non-transferable right to use the app applies to Apple devices that you own or control, within the usage rules of the Apple Media Services Terms and Conditions. Insofar as we have enabled Family Sharing, members of your family group may also use the app.

18.3 Apple has no obligation to provide any maintenance or support services for the app.

18.4 If the app fails to conform to any applicable warranty, you may notify Apple. In that case Apple may refund the purchase price to you. Beyond that, Apple has no warranty obligation. Your statutory rights remain unaffected.

18.5 We, not Apple, are responsible for your claims relating to the app, in particular product liability claims, claims that the app fails to conform to any applicable legal or regulatory requirement, claims under consumer protection and data protection law, and claims for infringement of third-party rights. Claims under your purchase contract with Apple (Sections 8 and 10.2) remain unaffected.

18.6 If a third party claims that the app infringes its intellectual property rights, we alone are responsible for defending against such claims.

18.7 When using the app, you comply with applicable third-party terms, such as those of your mobile network provider.

18.8 You represent that you are not located in a country that is subject to a United States embargo or that has been designated as a terrorist-supporting country, and that you are not listed on any corresponding list of prohibited parties.

18.9 Apple and its subsidiaries are third-party beneficiaries of these terms. Upon your acceptance of these terms, Apple has the right to enforce them against you.

19Withdrawal instructions

Right of withdrawal

You have the right to withdraw from this contract within fourteen days without giving any reason.

The withdrawal period is fourteen days from the day the contract is concluded.

To exercise your right of withdrawal, you must inform us (Poquito Media UG (haftungsbeschränkt), Langhansstraße 86, 13086 Berlin, Germany, phone +49 162 7572525, email legal@poquito.ai) of your decision to withdraw from this contract by means of a clear statement (e.g. a letter sent by post or an email). You may use the model withdrawal form in section 20, but this is not mandatory.

You can also exercise your right of withdrawal online: in the app under "Settings" using the "Vertrag widerrufen" ("Withdraw from contract") button, and without logging in at poquito.ai/withdrawal. If you use this online function, we will promptly send you an acknowledgement of receipt on a durable medium (e.g. by email), stating the content of your withdrawal declaration and the date and time it was received.

To meet the withdrawal deadline, it is sufficient for you to send your notice of withdrawal before the withdrawal period has expired.

Effects of withdrawal

The usage contract with us is free of charge. If you withdraw from it, there are therefore no payments for us to refund. Withdrawal ends the contract; we delete your account and the associated data as with an account deletion (section 3.7).

Subscriptions and credit

This right of withdrawal only concerns the usage contract with us. You buy subscriptions and credit from the App Store or Google Play (section 8). Their withdrawal and refund are governed exclusively by the terms of Apple or Google; please contact the respective store directly. Withdrawing from the usage contract does not end a subscription; you must cancel it with the store (section 3.8). By way of derogation from section 3.8, we refund purchased credit you have not yet used at the time of withdrawal pro rata; please write to legal@poquito.ai.

20Model withdrawal form

(If you want to withdraw from the contract, please complete and return this form.)

(*) Delete as appropriate.

1The path of the first name

When you tap "Create story", the following happens.

1. You enter the details. First name, birthday, gender and the selected traits are stored in our database. It is located in Frankfurt am Main, Germany.
2. Your account stays with us. What we pass on contains neither your name nor your email address nor any identifier of your account. The requests come from our server, not from your device. OpenAI and Google therefore cannot readily link a story to your account or your family. We cannot rule this out entirely, for example where a rare first name coincides with other details from the story.
3. The text is created. OpenAI receives your child's first name, age, gender and traits, the first names, roles and traits of the other characters and the chosen topic card, and writes the text from this in the USA. We do not pass on the date of birth, only the age. The transfer is encrypted.
4. The voice is created. For the audio version, the finished text goes to Google, including in the USA, where it is turned into speech. Your child's first name is spoken in the process, so this text contains the names.
5. You decide what your child hears. The text and the audio file are then stored in our database in Frankfurt again. Your child can only hear the audio version once you have read the story and confirmed that it suits your child.
6. Everything is deleted again. You can delete any story individually. If you delete your account, everything is deleted from our systems within 30 days, including backups, unless we are legally required to retain something (Section 8). What OpenAI and Google keep for a short time for abuse monitoring, they delete within the periods set out in Section 9.

2All content is created with artificial intelligence

This is the core of Poquito, and we say it expressly here once more.

The text. Each personalised story is generated anew at the moment you request it — by a language model from OpenAI, based on the details you have entered. Personalised stories are not templates with a gap for the name: each one is written anew for you. That is why each one reads differently. And that is why a story may also contain linguistic inaccuracies or factual errors.

The series. The ready-made stories in our series were created with the help of artificial intelligence. We read and approved each of them before publication. They contain no details about you or your child.

The voice. The read-aloud version is speech synthesis, not a recording of a human. It is created by Google. We use a ready-made voice provided by the vendor — we do not clone voices and never ask you for a voice recording of yourself or your child.

The illustrations. The images in the app were also created with AI tools. We made them in advance: they are not generated from your details, and they never show your child.

We label this. Every story is labelled in the app as generated with artificial intelligence. The audio files also carry a machine-readable label.

Artificial intelligence makes mistakes. A story may be linguistically inaccurate or factually wrong. That is why the app only releases a personalised story for your child once you have read it and confirmed that it is suitable.

You can report content. If you find something in a story that is not suitable for children, report it to us using the "Report content" button or at report@poquito.ai. We review every report.

Nobody at our end reads along. Before a story reaches you, we check it automatically for unsuitable content (Section 4). This check is carried out by machine. Otherwise we do not look at your stories — unless you report one or ask us for help with a particular story. Our software developer has access to the database, but only to operate the app and fix errors, not to read stories.

Your details serve only your story. OpenAI and Google process what we send them on our behalf and only to create the story. They do not use it to train or improve their language or voice models, and not for advertising. There is one exception, and we name it: both providers keep requests in order to detect misuse of their services — OpenAI generally for up to 30 days, Google for 55 days. If a violation of their usage rules is suspected, an authorised person at the provider may review the content concerned. Google may also use this data to improve its systems for detecting misuse. The providers may keep the data for longer if they are legally required to; under its terms, OpenAI also reserves the right to keep it for longer where reasonably necessary to protect its services or third parties from harm, for example where content is flagged as a possible violation. This data is not used for any other purpose, unless a provider is legally required to disclose it. Poquito uses OpenAI's standard API terms; no different arrangement is currently in place. We have applied to exclude this retention at OpenAI as well (zero data retention); as soon as OpenAI enables it for us, we will use it and update this notice. We do not train any models with your details either.

Nothing decides about you. The artificial intelligence generates a text. It does not assess you or your child, makes no decision about you and creates no profile.

3Who is responsible

Poquito Media UG (haftungsbeschränkt), Langhansstraße 86, 13086 Berlin, Germany, registered in the commercial register of the Local Court of Charlottenburg under HRB 278401.

We answer questions about data protection at legal@poquito.ai.

4What data we process

Your account

Your first name and email address, plus a password that we store only as a hash. We need these details to maintain your account and sign you in. Without them we cannot set up an account for you.

If you sign in with your Google or Apple account instead, we receive from there your email address, the name stored there and an identifier with which we recognise you next time. In that case we do not store a password. If you choose "Hide My Email" with Apple, we only receive a forwarding address and never your real one. Google and Apple learn that you have signed in with us; they are themselves responsible for this processing (see Section 6).

Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR.

We also store which version of our terms and which consents and confirmations you agreed to, and when. This allows us to prove what was agreed.

Legal basis: our obligation to demonstrate consent, Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, and our legitimate interest in being able to prove the content of the contract, Art. 6(1)(f) GDPR.

Details about your child

First name, birthday, gender and the traits you select from a fixed list. These details determine how the story is told and for which age group it is written.

We do not collect this data from your child but from you. It is nevertheless personal data of your child, and we treat it accordingly. Because we cannot inform your child ourselves, this notice is addressed to you as the person acting for your child. If you create a profile for a child for whom you do not have parental responsibility — for example as a grandparent or godparent — you need the agreement of the child's parents or guardians.

Before the first story is created, we show you in the app that the stories are created with AI and which details go to OpenAI and to Google for this, including the first names, and ask whether you agree. Without your okay, we do not create a story. This step serves transparency and is not consent within the meaning of the GDPR; the legal basis remains our legitimate interest (below). You can object under Section 11.

Why the exact date of birth: your child's age changes between two birthdays, and the story should match it. That is why we show you in the profile how old your child is right now and write the story in language that suits that age. On the birthday, both change automatically without you having to do anything. We pass only the age to OpenAI, not the date of birth.

Please no sensitive details. The app does not ask about health, religion or similarly sensitive topics. Please do not enter such information through names or other details either.

Legal basis: our legitimate interest, and yours, in delivering the story you ordered, Art. 6(1)(f) GDPR. We know that children's interests weigh particularly heavily here, and we have weighed them: the details are limited to what is necessary, come only from you, are not analysed, are not passed on to third parties for their own purposes — apart from the providers' abuse monitoring (Section 2) — and are deleted together with your account. We pass on neither a surname nor an address, an email address or an identifier of your account to OpenAI and Google, and your child only hears a personalised story once you have released it. Without these details we cannot generate a personalised story — that is the core of the service you order from us.

Other characters in the story

You can create other people — parents, siblings, friends, pets — each with a name, traits and their relationship to your child.

Please only create people who agree to this, and use first names. For people outside your family, a made-up name is best. We cannot inform these people ourselves because we do not know them and have no contact with them. This notice is therefore publicly available so that they can inform themselves here.

Legal basis: Art. 6(1)(b) GDPR insofar as your own details are concerned; for the details about other people, our legitimate interest, and yours, in delivering the story you ordered, Art. 6(1)(f) GDPR. The details are limited to first names and a few traits and are difficult to attribute to any person without your account; we do not pass on any identifier of your account to OpenAI and Google.

Stories and audio files

We store the generated texts and audio recordings in your account so that you can listen to them again. We also store whether you have released a story for your child.

Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR; insofar as stories and audio files contain details about your child or other characters, our legitimate interest under Art. 6(1)(f) GDPR (see above).

Series and listening progress

If you listen to stories from our series, we store in your account which episodes you have already heard, so that you can continue where you left off. We also count how often an episode is played in total — without any link to your account — to decide which series to continue.

Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR. The count without any link to your account contains no personal data.

Automated content check

Before a story reaches you, we check it automatically for content that is unsuitable for children. To do this, the generated text is analysed by machine. No person reads along.

Legal basis: our legitimate interest in ensuring that no unsuitable content appears in an app whose stories are intended for children, Art. 6(1)(f) GDPR.

Subscription, credit and purchases

You buy subscriptions and credit exclusively via the App Store or Google Play. From there we receive the information whether your subscription is active, what it includes and which credit you have bought. We do not see your payment details when you buy.

We store which subscription you have, how many stories are still available to you in the current month, how much credit you have and when you last created a story. We need this to reflect your subscription and your credit.

We use the RevenueCat service to manage subscriptions and purchases. It matches which purchase from the store belongs to which account with us. Your name is not transmitted, but an identifier that only we can attribute to your account, plus a device identifier, your purchase history, your country and the app version used.

Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR.

When we refund credit to you

If we refund unused purchased credit to you, for example after a withdrawal or a termination by us (sections 12.3 and 19 of the terms), we process your name, the bank account we transfer the money to and the purchase receipt from the store. The transfer goes through our bank; the records go to our accounting and to our tax advisor.

Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR; for keeping the records, our legal obligation, Art. 6(1)(c) GDPR in conjunction with Section 147 of the German Fiscal Code (AO) and Section 257 of the German Commercial Code (HGB).

Notifications

Reminders of your reading time. If you switch them on, the app reminds you of your reading time at the set time in the evening. The app schedules and creates these reminders directly on your device. They do not pass through any server — neither ours nor that of any other provider.

Notice that an audio version is ready. We send this notice from our server as soon as the audio version of a story is ready. For this we store an identifier of your device through which it is delivered: on iPhone and iPad via Apple's notification service, on Android devices via Google's Firebase Cloud Messaging.

No notification mentions names, neither yours nor your child's. You can switch both off at any time in the app or in your device settings. We obtain your consent in the app, separately for the reminders; your device's system prompt alone is not enough for us.

Legal basis: for the reminders and for storing and reading the device identifier, your consent, Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG). You can withdraw it at any time with effect for the future. We send the notice that an audio version is ready to perform our contract, Art. 6(1)(b) GDPR.

When you write to us or call us

If you send us an email or call us (the number is in the legal notice), we process your details to answer your enquiry. If you ask us for help with a particular story, we look at that story for this purpose.

Legal basis: performance of our contract with you, Art. 6(1)(b) GDPR, or our legitimate interest in answering enquiries, Art. 6(1)(f) GDPR. We delete the enquiry once it has been dealt with and no retention obligation applies.

When you report content

If you report a story that is unsuitable for children or unlawful, we process your report, the story concerned and the information from which account the report comes. In this case a person at our end looks at the reported story — that is the purpose of the report. Once the report has been dealt with, we remove the names and the link to your account and keep only the case and its outcome in order to improve our automated checks.

Legal basis: our legitimate interest in ensuring that no unsuitable content appears in an app whose stories are intended for children, Art. 6(1)(f) GDPR.

When you delete your account via our website

If you use the page poquito.ai/delete-account, we process the email address you enter there and your browser's connection data in order to match your request to your account, confirm it and carry out the deletion. The page does not load any analytics or advertising tools.

Legal basis: compliance with our legal obligation to erase, Art. 6(1)(c) GDPR in conjunction with Art. 17 GDPR.

If you withdraw from the contract

If you withdraw from the usage contract, for example via the "Vertrag widerrufen" ("Withdraw from contract") button in the app or via poquito.ai/withdrawal, we process your name, your account's email address, the content of your declaration and the time it was received. We use this to match the withdrawal to your account, send you the acknowledgement of receipt by email and then delete your account. The page poquito.ai/withdrawal loads no analytics or advertising tools.

Legal basis: Compliance with our legal obligations on withdrawal, Art. 6(1)(c) GDPR in conjunction with Sections 355 and 356a of the German Civil Code (BGB). We keep the record of the withdrawal on the basis of our legitimate interest in being able to show that we handled it properly, Art. 6(1)(f) GDPR.

Technical data

When the app calls our interface, connection data is generated, including your IP address. It is processed at Supabase. We need it to provide the app and to fend off attacks.

Legal basis: our legitimate interest in secure operation, Art. 6(1)(f) GDPR.

5What is stored on your device

The app stores information on your device and reads it again: your sign-in, your settings, your credit balance and the stories you opened most recently. Without this you would have to sign in again every time you start the app. The integrated RevenueCat module reads a device identifier to match your purchases; the modules for signing in with Google or Apple only access your device if you choose that sign-in.

These accesses are technically necessary to provide the functions you requested, Section 25(2) No. 2 TDDDG. For the reminders the app schedules on your device and for the device identifier through which we deliver notices that an audio version is ready, we ask for your consent (Section 4, "Notifications"). We store nothing on your device that serves advertising or measuring your behaviour.

6Who we pass data to

We do not sell data and pass nothing from the app to advertising networks.

These service providers work on our behalf

We have concluded contracts with them under Art. 28 GDPR; they may process the data only for us and only on our instructions — apart from abuse monitoring at OpenAI and Google (Section 2).

These companies decide on the processing themselves

They are controllers in their own right, not our processors. We have no influence on their processing.

Authorities. If we are legally obliged to do so, we disclose data to authorities, Art. 6(1)(c) GDPR. We examine every such request and disclose only what may lawfully be requested.

7Transfers to countries outside the EU

Some of our service providers process data outside the European Union:

• USA: OpenAI, Google, RevenueCat, Vercel and Firebase Cloud Messaging. At OpenAI and Google this also concerns the first names of your child and the other characters, but not any identifier of your account. At Vercel it concerns the audio files, in which the first name is spoken, and your device's IP address when the app loads an audio file.
• Other countries where Google operates data centres: Google may also generate the audio version there.
• Singapore and USA: Supabase accesses the data in Frankfurt from there for maintenance and support.
• Uruguay: our software developer works from there.

For Uruguay, the European Commission has decided that it ensures an adequate level of data protection (Art. 45 GDPR). All other transfers are based on the European Commission's standard contractual clauses (Art. 46(2)(c) GDPR), which we have concluded with the service provider or which the service provider has concluded with its sub-processors. You can find a copy of the standard contractual clauses on the European Commission's website; we will send you one on request.

Please note that in the USA, government authorities may access data under certain conditions and that the legal remedies available against this are weaker than in the European Union.

8How to delete your data

You can delete your account at any time. There are two ways:

• In the app under "Settings", item "Delete account".
• Via the page poquito.ai/delete-account. You don't need the app for this.

When you delete your account, we remove your account, the details about your child and all other characters, your stories and the associated audio files, your listening progress, as well as your data at RevenueCat. There is no mere deactivation with us.

After we receive the request, complete deletion from our systems takes up to 30 days, because our backups also have to be overwritten in rotation.

We keep individual details for longer if we are legally obliged to do so. We restrict such data and use it only for the purpose for which we must retain it. If you withdraw from the contract, we also keep the record of your withdrawal for twelve months (section 4).

You can delete individual stories at any time without giving up your account.

Your subscription with the App Store or Google Play does not end when you delete your account. You must cancel it there separately. Credit lapses on deletion, purchased credit as well as credit given to you (Section 3.8 of the terms).

9How long we store data

10What we don't do

11Your rights

You can at any time request access to the data we have stored about you and your child (Art. 15 GDPR), have it rectified (Art. 16) or erased (Art. 17), restrict processing (Art. 18) and receive your data in a portable format (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3)).

These rights also belong to your child. If your child is old and mature enough, they can exercise them themselves; otherwise the persons with parental responsibility exercise them as legal representatives. If you do not have parental responsibility yourself, the persons who do, or the child, can contact us.

A message to legal@poquito.ai is enough. We reply within one month.

12How we protect your data

Transmission between the app, our servers and our service providers is encrypted. We store passwords only as a hash. Each account sees only its own data; access to the database is limited to what is necessary for operation. We do not pass any identifier of your account to OpenAI or Google; the requests come from our server, not from your device. We select service providers according to whether they also meet these requirements.

13Complaints

You can lodge a complaint with a supervisory authority if you believe that we are violating data protection law. The authority responsible for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany, datenschutz-berlin.de.

You can also contact the supervisory authority where you live.

14Changes to this notice

We update this notice when our processing changes. The date of the current version is shown at the top. We will point out significant changes to you in the app. This notice is also available in German.

Point of contact for authorities and users under Art. 11 and 12 of the Digital Services Act: legal@poquito.ai, in German or English.

We are neither willing nor obliged to participate in dispute resolution proceedings before a consumer arbitration board.