Security Disclosure

We are committed to transparency regarding how Little Bedtime Stories protects your data and your children's privacy.

Data Encryption in Transit

All communications between the Little Bedtime Stories app and our servers use TLS 1.2 or higher encryption. This protects your account credentials and voice recordings while they are being transmitted.

Data Encryption at Rest

All user data stored on our servers — including account information and voice recordings — is encrypted at rest using industry-standard encryption. Our cloud infrastructure (Supabase) is hosted on secure, compliant servers.

Parental Gate Security

Sensitive features including account management, purchases, and voice recording are protected by a Parental Gate. This gate uses a math-challenge or PIN code mechanism to prevent unauthorized access by children.

Authentication Security

User accounts are protected by Supabase's authentication system, which supports secure password hashing, session management, and optional multi-factor authentication.

COPPA Compliance

We comply with the Children's Online Privacy Protection Act. All interactive features accessible to children are designed to collect minimal data and require parental authorization for any data submission.

Vulnerability Reporting

If you are a security researcher and believe you have found a vulnerability in Little Bedtime Stories, please responsibly disclose it to us at security@scooplabs.tech. We respond to all reports promptly.