Privacy Policy

Effective Date: July 29, 2026

Nuvilab Co., Ltd. ("Nuvilab," "we," "us," or "our") operates Peanutkio (the "Service"), an interactive storybook app where children can talk with story characters. This Privacy Policy explains what information we collect, how we use it, and the choices you have. We designed Peanutkio to collect as little information as possible.

1. Information We Collect

The Service does not require account registration. We do not collect names, email addresses, phone numbers, or other information that directly identifies you or your child.

We collect the following limited information:

Category	Details	How It Is Collected
Device & usage information	Device model, OS version, app version, a randomly generated on-device identifier (an anonymous ID created on the device; not linked to your name or account), app session identifier, story interaction events (scene and choice selections), IP address, crash and error logs	Automatically, while you use the app
Voice input	Audio spoken during interactive story scenes. Voice is streamed to OpenAI, which listens and speaks back to continue the conversation (a voice-to-voice AI conversation); we do not store the voice recording on our own servers and do not use voice to identify anyone	Only when the microphone permission is granted and an interactive scene is in use
Conversation content (text)	A text record of the interactive conversation — what the child says or taps and the character's replies — is saved to our activity logs so we can keep the stories safe and improve them. It is stored as text only (no audio recording) and is associated with the anonymous on-device identifier, not with any name or account	When an interactive scene is used

2. How We Use Information

To provide story content and AI-powered character conversations
To keep the interactive conversation safe and age-appropriate, and to improve it
To understand how the Service is used and improve it
To diagnose crashes and errors and keep the Service stable
To prevent abuse and maintain the security of the Service

We do not serve advertising, and we do not sell or share personal information as defined under applicable U.S. state privacy laws.

3. AI Conversation Processing (OpenAI)

To power character conversations, the words your child speaks or types during a story, together with story context, are processed by the OpenAI GPT API (OpenAI, L.L.C., United States).

Voice input is streamed to the OpenAI Realtime API, which processes the spoken audio directly and responds with the character's spoken reply (a voice-to-voice conversation). We do not store the voice recording on our own servers, and voice is not used to identify anyone. A text version of the conversation (what the child says or taps and the character's replies) is separately saved to our own activity logs, as described in Section 4 (Supabase) and Section 5.
If the real-time voice connection is unavailable, the app falls back to the device's built-in speech recognition to convert what the child says into text, and that text is sent to OpenAI to continue the conversation. This is a fallback only; no separate recording is stored.
Under OpenAI's API data policy, data sent to the API is not used to train AI models and is retained for up to 30 days for abuse monitoring, then deleted. (OpenAI API data policy)

4. Service Providers

We use a small number of service providers that process information on our behalf: