Privacy policy
Delete your SLOMI account: The account deletion guide (German) explains how to request deletion by email without the app installed, which data is affected and how requests are processed.
1. Data controller
The controller responsible for processing data on this website and in the app is:
AgentYard UG (haftungsbeschränkt)
Represented by its managing director Steve Aust
Lausener Bogen 26
04207 Leipzig
Germany
Email: hello@slomi.app
2. General information
We only collect the personal data we actually need to operate the app and website. No advertising trackers, no third-party cookies, no sales of data to third parties.
3. Data when visiting the website
When you visit the website, the hosting provider (Cloudflare, Inc., USA, with a worldwide CDN) processes the following technical data:
- IP address and technical connection data
- Date and time of the request
- Page accessed
- Browser type and operating system
Legal basis: Article 6(1)(f) GDPR (legitimate interest in the stable operation of the website). Data is processed for content delivery, error analysis and protection against abuse. Content is delivered through a worldwide network; processing exclusively within the EU is not guaranteed. Provider information:Cloudflare privacy policy and Cloudflare data processing and transfer terms.
Fonts and technical error reports
The Nunito and Quicksand fonts are served by this website; no connection to Google Fonts is needed. Vercel Web Analytics was removed with the hosting migration on 4 November 2026. We do not embed an additional visitor analytics script.
Cloudflare processes technical operational and security data. Browsers may report network errors to Cloudflare. These reports support technical delivery and are separate from the app listening history.
4. Account data in the app
When you create a parent account in the SLOMI app, we store the following with Supabase (EU region):
- Email address (for sign-in and service emails)
- A password hash for email/password sign-in, never the password in plain text
- Display name (freely chosen, e.g. “Linda”)
- Technical account ID and the association with any Apple or Google parent sign-in used
Apple and Google sign-in are optional sign-in methods in the parent area. The provider tokens required for sign-in are exchanged with Supabase. Free starter stories are also accessible without a parent account.
When signing in with Google, Google may process a user identifier to associate your sign-in authorization with you, as well as your IP address. Google may derive an approximate device location from the IP address to prevent fraud. The iOS sign-in SDK in use also declares technical user and device identifiers that can be linked to a person for analytics; it does not declare them for tracking. Google's own sign-in pages may also process a phone number, for example for two-factor authentication. The SDK manifest also declares other usage data and other data that can be linked to a person for analytics. Which categories are involved in a session depends on the flow on Google's pages. These provider disclosures are distinct from the app's own listening history data. Information:Google Sign-In and privacy and data declarations of the SDK in use. Google explains the disclosures about the phone number and the full sign-in flow in the SDK repository.
Legal basis: Article 6(1)(b) GDPR (performance of a contract).
The Android QR scanner in the parent area uses Google's ML Kit. The bundled barcode SDK processes technical device and app information, an installation identifier, performance metrics, and usage and error events for diagnostics and SDK usage analytics. This identifier is not an advertising ID. It has not been established that this SDK data processing can be disabled completely; the parent gate alone does not prevent SDK initialization.Google's ML Kit data disclosures.
5. Child profiles
Premium Single includes one child profile; Premium Family includes up to four child profiles. We store:
- Display name — can be a nickname; a real name is not required
- Age — used to suggest suitable stories
- Avatar selection — one of our preset brand avatars, no photo upload
- Listening history and playback position — story, time, duration, completion and, where provided, a rating; for “Continue listening” and your own family's listening overview
We do not track children beyond the app. No advertising IDs or heatmaps. Functional listening data is linked to the parent account through the child profile, so it is not anonymous. Families can only see their own data in the parent area. The new acceptance test build does not create its own anonymous installation identifier, send purchase funnel events or transmit the decision paths chosen. Sentry and Firebase/FCM are no longer included in the signed artifact of internal iOS test build 0.1.0 (20). This does not retroactively change older installed test builds; earlier identifiers or decision paths already stored are subject to the relevant data and deletion review.
Personal family recordings
Parents can choose to use the microphone to record a story. The files, their names and the settings for sharing them with children stay on the respective device; SLOMI does not upload these family recordings to Supabase, RevenueCat or ElevenLabs. They are not used for voice cloning. You can delete recordings in the parent area. System backups may include device copies; you manage these backups and any copies already exported yourself. Deleting the app may remove local recordings.
6. Store purchases and subscription synchronization
Subscription payments are handled through the Apple App Store or Google Play. SLOMI does not ask for credit card or bank details during the purchase process. The app integrates RevenueCat, Inc. to verify purchases, restorations and ongoing subscription entitlements. RevenueCat processes store purchase receipts and technical information about the app and device.
For purchase verification, the iOS SDK also sends Apple's device identifier for this vendor (IDFV) to RevenueCat in a request header. This transmission cannot be disabled in the SDK. According to the provider, it does not automatically create a customer attribute; however, the header may be included in operational logs for monitoring and troubleshooting. RevenueCat states a retention period of 45 days per log entry for these request logs. RevenueCat also uses purchase data for subscription analytics.
Deletion of the RevenueCat customer record, including its purchase history, is processed asynchronously. It does not confirm that related data has simultaneously been removed from all logs, backups and archives. The 45 days do not start with account deletion and are not a confirmed period for all of the provider's systems. Other specific retention and deletion periods have not yet been confirmed.
RevenueCat may also determine an approximate country from the IP address and associate it with the customer profile for subscription analytics. According to the provider, the IP address is discarded after determining the country; the derived country is retained separately. A specific retention period for this country has not yet been confirmed. No GPS location is collected in this process.RevenueCat's explanation of the customer profile.
The app establishes this connection automatically in the background for the signed-in parent account to check store offers and existing subscription entitlements. No additional acknowledgement dialog is shown. Without sign-in, no store connection is started. Connecting alone does not subscribe you; a purchase still requires confirmation in the store. No new consent record is stored for this connection. Earlier local acknowledgement records remain unchanged and are removed only for the affected parent account during account deletion. Older installed test builds may still show the previous notice.
SLOMI uses the technical UUID of the signed-in Supabase parent account as the RevenueCat user identifier. Our backend links this identifier to a parent account; it is therefore not an anonymous transaction identifier. Server-side subscription synchronization transfers the following from RevenueCat to Supabase:
- The parent account UUID and the RevenueCat customer, app and subscription associations
- Store and product identifier, Single/Family plan and billing period
- Purchase and transaction references, start and end of confirmed access
- Trial, active, cancellation, expiry or revocation status and verification time
- Event identifier and technical checksums to prevent duplicate or outdated processing
This is used to verify Premium access, the appropriate profile limit and the restoration of existing purchases. For this subscription synchronization, SLOMI does not send children's names, child profile content or story listening histories to RevenueCat. Email addresses and display names are not set as RevenueCat customer attributes either. This statement concerns subscription synchronization; separate storage of listening history with Supabase is described in section 5.
Provider information:RevenueCat privacy policy,RevenueCat security and compliance. Processing by RevenueCat exclusively within the EU is not guaranteed here. The specific contractual and data transfer grounds and the app store privacy disclosures must undergo final review before paid subscriptions become publicly available.
Audio story delivery
Audio files are delivered through a Cloudflare Worker and private R2 storage. The service technically processes the IP address, requested file and connection data for this purpose. Premium files receive signed URLs with a time limit. Processing of this delivery data exclusively within the EU is not guaranteed.
7. Newsletter
If you sign up for our newsletter, we forward your email address to our email service provider Brevo (Sendinblue). Brevo first sends a confirmation email. Your address is only added to the active newsletter list after you confirm the double opt-in (DOI) link. Brevo processes your data on our behalf (processing under Article 28 GDPR). You can unsubscribe at any time using the link at the end of each email. For access and deletion requests, contact us at hello@slomi.app.
8. Services used
The following services are used for the functions described above:
- Supabase (database and authentication) — EU region
- Cloudflare (website hosting, DNS and CDN) — USA / worldwide network
- Brevo (Sendinblue, email delivery) — France
- ElevenLabs (editorial audio production; no upload of private family recordings through this app feature) — USA
- RevenueCat, Inc. (store purchase verification, subscription management and technical synchronization with Supabase)
- Cloudflare (Worker and R2 for protected audio delivery)
- Apple App Store &Google Play (subscription billing)
Information about data processing for website hosting is available in the Cloudflare Data Processing Addendum. You can send questions about the services used and your data to hello@slomi.app.
9. Storage and account deletion
You can request full account deletion in the parent area under Settings → Delete account in the new acceptance test build. Without this app build, you can request it through the public page Delete your SLOMI account and data (German). We verify the account association; you do not need to send us children's names or passwords for this.
- Parent and child profiles, listening history, favorites and server-side playback positions remain stored until the respective profile or account is deleted.
- Full, completed account deletion covers the SLOMI sign-in, associated profiles and functional listening data. A request with a receipt date, target date and processing status is not yet a deletion confirmation.
- The processing target for a verified in-app request is no more than seven calendar days from receipt. For requests without the app, this target period starts after the account association has been checked and acceptance confirmed. We confirm completion and provide information if there are delays. This is an operational target, not a statutory deadline.
- After acceptance of the request has been confirmed, the new app removes this parent account's local private user data from the current device. Failed cleanup must be retried. Other devices, system backups and external copies are not automatically deleted.
- Subscription associations, synchronization data and personal data held by connected services are addressed as part of the deletion request. Apple and Google manage their own purchase receipts; SLOMI cannot remove these from your store account.
- Account deletion does not automatically cancel a store subscription. Cancellation and a deletion request can be made separately; an active subscription does not prevent a deletion request.
Minimal account-linked technical identifiers and deletion markers remain stored in the local app settings. They prevent delayed writes from recreating removed recordings or playback positions; they are not used for tracking. These markers are only removed by deleting the local app data. Session data needed for sign-in and request status is not prematurely deleted by local user data cleanup. System backups and other devices must be managed separately.
The new deletion completion process removes the email address and account UUID from the request, as well as its individual processing records. A technical completion record containing the request identifier and timestamps remains. In the new process, this technical completion record is removed after 30 calendar days. This is our operational retention rule, not a statutory minimum period. Where specific statutory retention obligations prevent deletion of individual items, we will explain the affected data, the reason and the duration. Binding rules for legally required records and backup and provider copies must be finalized before the public launch. This policy does not promise any unverified provider retention period or immediate removal of all backups.
10. Cookies
This website does not use advertising or tracking cookies. Technically necessary cookies are only set when needed for a specific function (e.g. an authentication token when signing in). These do not require consent.
11. Your rights (Articles 15–21 GDPR)
- Right of access (Article 15)
- Right to rectification (Article 16)
- Right to erasure (Article 17)
- Right to restriction of processing (Article 18)
- Right to data portability (Article 20)
- Right to object (Article 21)
You can send informal requests about your data to:hello@slomi.app. You also have the right to lodge a complaint with a data protection supervisory authority.
12. Children and parents
SLOMI is an app for children aged 4 and over. Free starter stories will be available without signing in. A parent account and child profiles are created in the parent area. The parent gate protects adult functions; on its own, it is not proof of valid consent under data protection law. The complete initial account creation and information flow, including Apple and Google sign-in, will be reviewed before the public launch.
13. Changes
This privacy policy will be updated when legal or technical changes occur. Significant changes will be communicated on the website.