Privacy Policy

A. What Duskcrumb keeps on the pillow

Duskcrumb is a free iOS Lifestyle app for a parent: photograph tonight’s small crumb, nest a short bedtime draft, Accept it, and play a system bedtime listen. Household notes, the child’s first name and age band you type, tonight’s still, spoken or typed crumbs, story drafts, accepted ReplayItems, bedtime illustrations for that night, optional ParentTake clips, learning notes, widget snapshots, and Share-inbox stills live in on-device storage on this iPhone. Duskcrumb does not create a Duskcrumb account and does not run an account-backed cloud sync of your household shelf.

B. Shelf items you may create

On this phone you may keep:

• A household profile and one ChildPersona (first name, age band 3–5 or 6–8, bedtime window)
• TonightMoment crumbs (photo stills, captions, on-device speech transcripts)
• StoryDrafts you Accept, Edit, or Reject, plus ReplayItems with system bedtime narration
• Up to three picture-book illustrations painted for an accepted night
• Optional ParentTake audio you record after Accept (stays on this phone)
• Local Preference / Correction / Outcome notes that shape later drafts
• Share-extension and Widget / Live Activity paths that Sources still wire through a local suite string for inbox stills / tonight snapshots

Settings → Delete all data or removing the App clears that household from the device. We cannot rebuild wiped on-device nights from our side.

C. Permissions — only when a feature needs them

• Camera — capture tonight’s crumb object for this evening’s story
• Photos (read / add) — pick an existing still, or save tonight’s crumb still and a titled replay frame
• Microphone — speak a short crumb on the pillow, or leave a ParentTake after Accept
• Speech recognition — turn spoken pillow words into text; when the device supports it, Duskcrumb sets requiresOnDeviceRecognition = true
• Local notifications — bedtime-window and missing-crumb reminders on this phone
• App Tracking Transparency — so install-reach measurement may use a device advertising identifier when you allow tracking (see section E)

Deny camera, photos, mic, or speech and the rest of the pillow stays usable through in-app continuations; Duskcrumb does not bounce you into system Settings to continue. Choosing Ask App Not to Track likewise leaves pillow capture, nested drafting after Allow, Accept / listen, and local reminders available (see section E).

D. Purchases

Reviewed Sources ship Duskcrumb without StoreKit, without a consumable balance, without a subscription, and without a Restore Purchases control. Crumb capture, nested drafting after Allow, and system bedtime voice paths are not sold as a separate digital entitlement on this tip.

E. App Tracking Transparency and Adjust (Guideline 5.1.2)

Why we ask for tracking permission

When the App is active and no product permission sheet is covering the screen, Duskcrumb may present Apple’s App Tracking Transparency prompt (ATTrackingManager). The system usage string states that Duskcrumb uses your device’s advertising identifier only to measure whether tonight’s stories actually reach families after install — not to show ads inside the App. If you allow tracking, measurement can associate this install with content-free product signals such as that the App became active or that a bedtime listen path ran, so we can tell which install paths actually reach families.

What happens if you refuse

Ask App Not to Track (or a later withdrawal) does not block photographing a crumb, nesting a draft after Allow, Accept / Edit / Reject, system bedtime voice, illustrations after Accept, ParentTake, Widget / Share handoff, or local reminders. Core pillow flow stays open. Measurement that depends on tracking authorization stays limited or off; Adjust third-party sharing is turned down when tracking is not authorized.

Third parties

Adjust (AdjustSdk) is the attribution / install-measurement path on this tip. When an Adjust app token is stamped into the build and you have authorized tracking, Adjust may receive a device advertising identifier (when the system provides one) plus limited, content-free engagement signals used for install reach — not your bedtime story text, crumb photos, child’s name, or ParentTake audio. Duskcrumb does not ship Firebase Analytics, Firebase Crashlytics, AdSupport-driven ad networks, or another MMP on this reviewed tip, and does not place third-party ads inside the pillow. Household shelf content is not sold to data brokers for advertising. Until a valid Adjust token is present, the measurement SDK does not initialize.

How to withdraw

Change the permission anytime in iOS Settings → Privacy & Security → Tracking, or under Settings → Duskcrumb → Allow Tracking when shown. App Tracking Transparency is independent of AI cloud consent: turning tracking off does not revoke Allow tonight’s draft, and turning Settings → Allow cloud drafts off does not change your ATT choice.

F. Cloud drafts only after Allow

The first time a cloud draft would leave the device, Duskcrumb shows an in-app disclosure with two independent actions: Allow tonight’s draft or Not tonight. Nothing is pre-checked. Decline keeps pillow capture, last night’s listen, and local CRUD available without pretending a draft succeeded.

After Allow, Duskcrumb may send third-party cloud AI providers:

• DeepSeek (api.deepseek.com, model deepseek-v4-flash-vision-exp) — tonight’s photo pixels, the child’s first name if you typed one, age band, words you type or speak, and tonight’s draft text so a bedtime story can be written
• MiniMax (api.minimax.cn) — after you Accept, accepted draft text for the system bedtime voice (speech-2.8-hd via /v1/t2a_v2), and short illustration prompts (image-01 via /v1/image_generation) so up to three warm picture-book paintings can be bound to tonight’s objects

Duskcrumb does not send face indexes, the rest of Photos, ParentTake audio, raw microphone buffers, HealthKit, precise location, contacts, or undeclined advertising identifiers to those AI providers. Cloud analysis is optional storytelling help — not medical, sleep-therapy, or legal advice, and not a promise the child will fall asleep.

Settings → Allow cloud drafts off revokes immediately, stops later DeepSeek and MiniMax requests, and cancels in-flight cloud work. Turning it on again without a prior Allow re-shows the same disclosure; it never grants silently. In-app Privacy, Terms, and provider policy views stay inside the App. ATT permission and AI Allow are separate gates.

G. Network and local handoff

Network access may be used for Adjust measurement after the paths above, consent-gated DeepSeek and MiniMax calls, loading in-app provider policy pages, and fetching the published Privacy / Terms / Support documents from duskcrumb-bedtimestory.pages.dev. Local reminders do not require a Duskcrumb server push channel. Optional Share and Widget code paths may attempt an on-device App Group handoff using the suite string in Sources; tip entitlements plists are empty, so public copy does not claim a signed main-target App Group entitlement beyond what the tip shows.

H. Retention, children, contact

Crumb shelves and related local state remain until you delete them in Settings or remove the App. Data already sent to DeepSeek, MiniMax, or Adjust after you allowed those paths follows those providers’ retention practices. You are the parent using Duskcrumb — a Lifestyle creation tool for caregivers, not a Kids Category app, not a child account surface, and not a device that diagnoses sleep or health conditions. We may update this policy when the reviewed product surface changes; the Updated date above changes when we do. Questions: crumbs@duskcrumb.app.