Last updated: September 4, 2026
Pillow ("Pillow", "we", "us", or "our") respects your privacy and is committed to protecting personal data, including information relating to children.
This Privacy Policy explains what personal data we collect, how we use it, when we share it, how long we keep it, and the choices and rights available to you.
Pillow is designed primarily for parents and legal guardians. Where children access or interact with the Service, we apply appropriate safeguards to protect their personal data in accordance with applicable data protection law.
This Privacy Policy should be read together with our Terms of Service.
Pillow is the data controller responsible for the personal data covered by this Privacy Policy.
For the purposes of applicable UK data protection law, references to "Pillow", "we", "us", and "our" mean the relevant data controller identified above.
We collect personal data that is reasonably necessary to provide, secure, and improve the Service.
This may include:
We use appropriate technical safeguards when storing account credentials and do not store passwords in plain text.
Where a parent or legal guardian creates a child profile, this may include:
We do not require a child's surname or precise date of birth for ordinary use of the Service.
Parents and legal guardians should avoid providing information that is not necessary for the Service, particularly sensitive or highly personal information about a child.
Depending on how you use Pillow, we may process:
Some of this information may relate to a child. We process it only for the purposes described in this Privacy Policy and in accordance with applicable law.
We may collect information such as:
We use this information primarily to operate, secure, troubleshoot, and improve the Service.
Payments are processed through third-party payment providers.
We do not store full payment card details on our own systems unless we expressly state otherwise.
Payment providers may process payment information in accordance with their own privacy policies and applicable data protection requirements.
We use personal data to:
We do not use children's personal data for advertising profiling.
Where we use personal data for product improvement, we apply appropriate safeguards and do not use children's personal data for purposes that are incompatible with the purposes described in this Privacy Policy.
We process personal data using one or more lawful bases under applicable UK data protection law.
Depending on the processing activity, these may include:
We process information where it is necessary to provide the Service you have requested, manage your account, process your subscription, or perform our contractual obligations.
Where consent is required, such as for certain marketing communications or optional cookies, we will ask for your consent before carrying out the relevant processing.
You can withdraw consent at any time.
We may process information where necessary for legitimate interests, such as:
provided that our interests are not overridden by the rights and interests of the individual concerned.
We may process and retain information where necessary to comply with legal, regulatory, accounting, tax, or other legal obligations.
Where children's personal data is involved, we consider the applicable requirements relating to children's information and use an appropriate lawful basis for each processing activity.
Pillow is designed primarily for parents and legal guardians.
We do not intentionally require children to create independent customer accounts or enter into contracts with Pillow.
Where a parent or legal guardian creates a child profile or provides information about a child, we process that information to provide the requested Service and for the other purposes described in this Privacy Policy.
We apply data minimisation principles and seek to collect only information reasonably necessary for the Service.
We do not knowingly use children's personal data for targeted advertising.
Where the Service is likely to be accessed by children, we design relevant features and data-processing practices with the applicable standards of the UK Children's Code in mind, including privacy, transparency, data minimisation, data sharing, parental controls, profiling, and children's data rights.
Where appropriate, we provide information and controls designed to help parents and children understand how personal data is used.
Pillow uses artificial intelligence technologies to generate personalised stories and related content.
Depending on the feature used, information such as story prompts, preferences, and other inputs may be processed by AI technology providers acting on our behalf.
We use appropriate contractual and technical safeguards when engaging third-party providers to process personal data.
AI-generated content is produced for the purpose of providing the Service. It is not intended to make decisions about children that produce legal or similarly significant effects.
We do not knowingly use children's personal data to train third-party AI models for unrelated purposes without an appropriate legal basis and, where required, consent.
Where our practices regarding AI training or model improvement change materially, we will update this Privacy Policy and provide any additional notices or choices required by law.
We use automated and other safeguards designed to reduce harmful, abusive, or inappropriate outputs.
Where human review is used as part of safety, moderation, support, or system improvement processes, access to personal data is limited to what is reasonably necessary for that purpose and subject to appropriate safeguards.
We do not routinely require human reviewers to inspect children's stories for ordinary service use.
We may share personal data with carefully selected service providers where this is necessary to operate Pillow.
Depending on the services we use, these providers may include:
We require relevant service providers to protect personal data and process it only in accordance with our instructions and applicable law where they act as our processors.
We may also disclose personal data:
We do not sell personal data.
Pillow includes sharing functionality that allows you to share information about Pillow with others.
When you use the Share button, Pillow generates and shares a generic branded card and a link to our website.
The shared card does not contain:
Sharing takes place through the sharing functionality provided by your device or operating system.
Pillow does not receive information about who you share the card with or which application you use to complete the share, except where such information is independently provided to us through another interaction with our Service.
When you download a story, the resulting files may contain the full personalised story and generated audio.
These files are intended for your private family use and, once downloaded, are stored on your device rather than in your Pillow account.
We do not intentionally embed tracking technologies, hidden identifiers, or Pillow account information in downloaded story files.
Where technically supported, filenames and document properties are designed not to disclose a child's name.
You are responsible for protecting downloaded files once they are stored on your own device or shared with others.
Some of our service providers may process personal data outside the United Kingdom.
Where a transfer of personal data is subject to UK rules on international transfers, we use an appropriate lawful transfer mechanism and safeguards required by applicable UK data protection law.
Depending on the circumstances, these safeguards may include:
Where required, we carry out appropriate assessments and implement supplementary safeguards.
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.
Our retention periods depend on the type of information and why we hold it.
| Data category | General retention approach |
|---|---|
| Account information | While your account is active and for a reasonable period afterwards where necessary for legal, security, or operational purposes |
| Child profiles | Until deleted by the parent or guardian or the account is otherwise closed, subject to lawful retention requirements |
| Stories and generated audio | In accordance with the 30-day library-retention terms described in our Terms of Service |
| Payment and transaction records | For as long as required for accounting, tax, fraud prevention, dispute resolution, and legal obligations |
| Security and technical logs | For a limited period appropriate to security, troubleshooting, and operational needs |
| Marketing preferences | Until you withdraw consent or the information is otherwise no longer required |
| Customer support records | For as long as reasonably necessary to resolve the matter and meet legal or operational requirements |
When personal data is no longer required, we securely delete or anonymise it where appropriate.
We use appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.
Depending on the type of information and processing involved, these measures may include:
No online service can be guaranteed to be completely secure. However, we continuously work to maintain appropriate safeguards for the Service and the personal data we process.
Subject to applicable law and certain legal exceptions, you may have the right to:
Parents and legal guardians may also have rights in relation to personal data concerning their children, subject to applicable law and the circumstances of the request.
To exercise your rights, contact privacy@pillow.kid.
We will normally respond to a valid request within one month. In certain circumstances, applicable law may allow us to extend this period.
We may need to verify your identity before completing a request in order to protect personal data and prevent unauthorised disclosure.
If you are a parent or legal guardian and believe that Pillow holds personal data relating to your child, you may contact us using the details in this Privacy Policy.
We may ask for information reasonably necessary to verify your identity and your authority to make the request.
We will handle requests relating to children's personal data in accordance with applicable data protection law and with appropriate consideration of the child's rights and interests.
Pillow uses cookies and similar technologies to operate and secure the Service.
We may also use optional analytics or similar technologies to understand how the Service is used and improve its performance.
We count visits to our own pages using our own systems, without cookies and without sending anything to a third-party analytics provider. We record the page visited, the site that linked to it, and the general device type. We do not store your IP address; it is used only to generate a temporary identifier that is renewed daily and cannot be used to recognise you from one day to the next or to build a profile of you. These records are deleted after 90 days.
Where consent is legally required for optional cookies or similar technologies, we will request that consent before using them.
You can manage available cookie preferences through our cookie controls where provided.
Blocking certain essential cookies may affect the functionality of the Service.
The Service may contain links to or integrations with third-party services.
Third-party services operate under their own privacy policies and terms. Pillow is not responsible for the privacy practices of third parties that operate independently from us.
Where we use a third party to process personal data on our behalf, we take appropriate steps to ensure that the processing is governed by appropriate contractual and data protection safeguards.
We may update this Privacy Policy from time to time to reflect changes to the Service, our data-processing practices, applicable law, or regulatory requirements.
Where we make material changes, we will provide appropriate notice, which may include email notification or a prominent notice within the Service or on our website.
The "Last updated" date at the top of this Privacy Policy indicates when the policy was most recently revised.
If you have concerns about how we process personal data, please contact us first at privacy@pillow.kid.
You also have the right to lodge a complaint with the UK's Information Commissioner's Office (ICO): https://ico.org.uk
You may contact the ICO if you believe that your personal data has been processed in breach of applicable data protection law.
If you have questions about this Privacy Policy, your personal data, or how Pillow handles children's information, please contact us:
Privacy: privacy@pillow.kid
Support: support@pillow.kid
Website: https://app.pillow.kids