Privacy policy

SaySi · Last updated 2026-11-14

Who we are

SaySi operator: Istmo One LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Privacy officer: Istmo One LLC Privacy Team (support@booksaysi.com). Contact: support@booksaysi.com.

SaySi is an app for a parent or legal guardian and children reading picture books together. We handle a child's information only after the guardian has stated an adult birth year and consented. The Grown-up Zone and purchases sit behind a guardian-only lock (a simple question each time, or a PIN the guardian sets).

What we receive

Book page photos: the phone crops the photo to the page and blurs any face before sending it. The cropped page photo (faces blurred) is kept only in this phone's archive so the page can be read again, until you delete it there or delete the app; it cannot be exported or shared. The original photo (before cropping) is never stored, on the phone or on our server, and our server holds page photos only in memory while processing them. Location data (EXIF) is removed.

Page fingerprints: numbers that let us recognise a page again. They contain no text and no image.

Pearl records: when pearls were used and for what (new page, re-read, …).

Device information: a random value made at installation, platform, app version, language, time zone, country or region (from the app and phone settings; used for prices, the legal rules of your country and the right store), and the result of the app integrity check (Play Integrity / App Attest).

Server logs: each request leaves the IP address, the time and the requested address in our server logs. Used only for security and to find faults; how long they are kept is in the retention policy.

Consent records: the version of the wording a guardian agreed to, the time and how the guardian was checked.

Guardian sign-in (optional): the email address when a guardian signs in by email; with Google or Apple sign-in, that account's unique identifier and, if the guardian chose to share it, the email address (it may be an Apple "Hide My Email" relay address). A name or profile photo included in the sign-in response is not kept. Used only to link the same guardian's phones into one family and to send sign-in codes, the weekly report and pearl alerts. When an account that used Apple sign-in is deleted, we ask Apple to revoke the sign-in link.

Child profiles: an optional nickname, an age band and an animal picture; reading time (daily totals), page counts and the books read to the end (title, sticker, date).

Word notebook (if you save words): the words saved by double-tapping them while reading, their language, the meaning in the other reading language, the sentence each word came from (in both languages, up to 300 characters each) and where it was read — for a world story the book's name and page number, for a book read with the camera the book's name and a reference to the page kept on this phone. Words can be saved in kids mode and in adult mode and are kept per family. Used only to show the notebook and let you look the words up again. To find the meaning, the word and its sentence are sent to the translation service; when you tap 🔊, the word is sent to the voice service (see "Who processes it for us"). A word's sound file is made once per word, whoever saved it, and shared by everyone; it contains nothing about the family. Deleted when you delete the word or the account.

Purchase records (if you buy): the product, the store transaction number, purchase and refund state.

Referral records (if you use a referral code): your family's referral code and which family referred which. Used only to give the referral reward (pearls) and to make sure it is received once; deleted or made anonymous when the account is deleted. They contain nothing about the child.

Error reports (if you send one): tapping "Send to developer" on an error screen sends the screen address, the app version, platform and app language, the error text (email addresses and tokens removed) and, from the app, the random value identifying the family. Used only to fix the fault; deleted after 30 days. Nothing about the child, no book content, no photos and no email addresses are sent.

Help & feedback messages (if you send one): the type (suggestion, question, bug report) and text sent from the contact screen behind the guardian-only lock, an optional reply email address, optional pictures or screenshots the guardian picks (up to three; location and camera details are removed before sending), and the app version, platform and app language the screen shows as attached. Used only to answer you and improve the service; attached pictures are kept with the message, and everything is deleted after one year or when the account is deleted. Nothing else about the child and no book content is sent.

What we use it for

Reading, translating and voicing pages; recognising a page again; counting pearls; daily time limits and bedtime; preventing abuse; proving the guardian's consent; sending mail to guardians. We build no advertising profiles.

The app contains no ads and no third-party analytics.

Who processes it for us

Hosting: Amazon Web Services (Singapore, ap-southeast-1); encrypted database backups in AWS Tokyo (ap-northeast-1) — our servers and database.

Reading, translation and voices: Google LLC (Google Cloud: Cloud Vision, Cloud Translation, Cloud Text-to-Speech) processes page photos and text on our behalf.

Voice synthesis: Microsoft Corporation (Azure AI Speech) turns the text to be read aloud into voices on our behalf. Only page text, the lines the characters say and notebook words are sent; no photos and no information about the child.

In-app purchases: Apple (App Store) and Google (Google Play) process the payment. The store receives only a random value identifying the family (a hash the family number cannot be worked back from); we receive from the store only the purchase records (product, transaction number, purchase and refund state).

Guardian mail delivery and forwarding help & feedback messages to us: Amazon SES (Amazon Web Services, USA) for app mail; Zoho Mail (Zoho Corporation, USA) for replies to help & feedback.

International transfers

The providers below process information outside Korea (PIPA Art. 28-8). When and how: each time the service is used, the information needed is sent over an encrypted network connection (TLS).

The hosting provider Amazon Web Services (Singapore, ap-southeast-1); encrypted database backups in AWS Tokyo (ap-northeast-1) (when the servers are outside Korea; the country is listed with the provider) — items: the information listed under "What we receive" (page photos exist only in memory while processed; pictures attached to a help & feedback message are kept with the message). Purpose: running our servers and database. Retention: as in the retention policy (/legal/retention).

Google LLC, Google Cloud (policies.google.com/privacy) — country: the United States and other countries where Google has data centres (we use global endpoints with no fixed processing region). Items: face-blurred page photos, page text, text to translate and to voice. No names, contact details or child profiles are sent. Purpose: reading text and finding objects, translation, speech synthesis. Retention: while the request is processed (under Google Cloud's data processing terms).

Microsoft Corporation, Azure AI Speech (privacy.microsoft.com) — country: the United States (US East region). Items: only the text to voice (page text and the lines the characters say). No photos, names, contact details, child profiles or other information about the child are sent. Purpose: speech synthesis. Retention: while the request is processed (under Microsoft's Product Terms and Data Protection Addendum).

Apple Inc. (App Store, apple.com/legal/privacy) and Google LLC (Google Play, policies.google.com/privacy) — country: the United States. Items: a random value identifying the family (a hash), the product, the store transaction number, purchase and refund state (payment details go to the store directly). Purpose: confirming, restoring and refunding purchases. Retention: until the account is deleted; transaction records that prevent duplicate grants remain without a family link (retention policy).

The mail delivery provider, when located outside Korea (Amazon SES (Amazon Web Services, USA) for app mail; Zoho Mail (Zoho Corporation, USA) for replies to help & feedback, listed with its country) — items: the guardian's email address and the message (for a help & feedback message, its text, attached pictures and the reply address). Purpose: sending mail to guardians, answering messages. Retention: for the provider's processing period; our own records as the retention policy says.

How to refuse, and what happens: if you do not want these transfers, do not consent, or withdraw consent or delete the account in the Grown-up Zone. Hosting and page reading are essential to the service, so refusing them means camera reading cannot be used. Nothing goes to the mail provider unless a guardian signs in.

Nothing identifying the family goes to a store unless you buy.

How long we keep it

See the retention policy (/legal/retention). Page text and audio stay on our server for 24 hours only; after that they exist only on your phone. Only the words you save to the word notebook, with their sentences, are kept on the server until you delete them.

Your rights

In the Grown-up Zone you can download your data and delete the account with all its data at any time. Deletion completes within 30 days; backups age out within 35 days. Withdrawing consent stops camera reading. Contact: support@booksaysi.com.

Children

Information about children under 14 (Korea) or under 13 (elsewhere) is processed only with a guardian's consent (PIPA Art. 22-2, the US COPPA, GDPR Art. 8), given behind the guardian-only lock (a question and a PIN).

What we collect from children: the book page photos a child takes (faces blurred on the phone; the cropped photo kept only in that phone's archive, never the original and never on our server), that page's text and fingerprint, a random value identifying the device, reading time, page counts and the books read to the end; and the nickname, age band and animal picture a guardian enters. We do not collect a child's name, contact details, location or voice (the microphone is never used).

We use children's information only for the purposes above, never make it public or sell it, and build no advertising profiles. There is no feature for a child to talk to other people or make information public. Providers receive only what their task needs.

Guardian's rights: a guardian can review (download) the information collected about the child, have it deleted, and refuse further collection or use (withdraw consent). Do this in the Grown-up Zone or ask us at the contact below.

Operator contact: Istmo One LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA, support@booksaysi.com.