A little care for your privacy.

1. Who provides Hushsu

Hushsu is operated by MB Piruz Afruz, a small partnership registered in Lithuania, under the Piruz Games brand. MB Piruz Afruz is responsible for the personal information described in this notice (the data controller).

Company registration number: 306655229.
Registered office: Laisvės pr. 60, LT-05120 Vilnius, Lithuania.
Privacy contact: hello@piruzlabs.com.

This notice covers Hushsu 1.0 on Android, iPhone and iPad, supported earlier beta builds and the web testing version. The web game keeps its collection in that browser. Earlier beta data may remain in an upgraded installation; this notice identifies those legacy features separately.

2. What stays on your device

Hushsu stores your chosen appearance, unlocked items, settings and journey progress locally. Upgraded beta installations may also retain an earlier nickname, pronunciation preference, charm engraving or photo sticker. A randomly generated local player identifier keeps the save together; it is not an advertising identifier. You can use a made-up name.

The free release does not offer photo selection or a photo-sticker editor. Earlier beta versions used only the image a player selected and saved a cropped local copy; they did not scan the entire photo library. An existing local sticker can remain in an upgraded save. The Home Screen widget uses a local shared container to display your selected appearance, calm level, charm text and, when equipped, your photo sticker. These can be visible to someone looking at your screen.

Guest play does not upload your names or photos. On iPhone or iPad, if you enable cloud backup, your charm engraving is included, so use a nickname if you prefer; voice nicknames and photos are excluded. Its generic bundled character voices play offline. Personalized name speech and name-entry controls are not offered in the free release. Your iPhone, iPad or browser backup settings may separately back up app data through your platform provider. Android automatic app backup is disabled in this release; uninstalling the Android app or clearing its storage can erase its local collection.

3. Store testing and support

Google Play distributes and updates the Android app and provides its testing and platform diagnostic services under the Google privacy policy. Hushsu does not include an advertising or third-party analytics SDK. Its fictional pet calm meter and breathing activity do not collect your health information or read health sensors.

Apple’s TestFlight processes testing information such as installation and session activity, device and app versions, crashes and feedback. Depending on how you join and what you submit, Apple may make your tester name, email address, comments and screenshots available to us. We use this information to investigate problems, improve the game and answer you. See Apple’s TestFlight privacy notice for Apple’s practices and controls.

If you email us, we receive your email address, message and any attachments you choose to send. Please avoid including passwords, payment details or unnecessary personal information. We do not use support messages or beta feedback for targeted advertising.

4. Photos, recordings and sharing

The Android free release does not include recording, photo selection, image uploads or in-app sharing. On iPhone and iPad, recording and sharing require the in-app parent challenge. Recording starts only when you choose it. The iPhone and iPad recorder captures game video and game audio; its microphone and camera are off. Exports may show your engraved name or photo sticker. Review the result before sharing.

Hushsu opens your device’s share controls. It does not publish to Instagram, TikTok or another service automatically. The recipient or service you choose receives the material you share and handles it under its own privacy policy. Copies saved to Photos or another app remain there until you delete them there.

5. Web testing and online features

Android announcements and connection security. When online, the Android app requests public announcements from hushsu.com on launch and when you refresh the news. This HTTPS request does not send your name, saved appearance, progress, local player identifier, photos, advertising identifier or account details. The server and its hosting provider necessarily receive your IP address to deliver the response and protect the service. Our server keeps a hashed IP-based request counter in memory to limit abusive requests; it expires after one minute and is removed in the following cleanup cycle, which runs every minute. We do not use it to infer your location, track play or build an advertising profile. We do not enable routine HTTP access logs. Core play remains available offline. Android has no sign-in or cloud account in this release.

The web game stores its save in that browser’s site storage, separate from a mobile installation. Loading a hosted page or requesting an announcement exposes normal connection information, including your IP address and browser request, to the server and its hosting provider. Our service at hushsu.com uses short-lived connection information to limit abusive requests. We do not enable routine HTTP access logs. Hosting and security systems still process connection information to deliver and protect the service. It does not use advertising cookies or third-party analytics. The creator dashboard’s authentication is for administrators, not players.

Optional adult-managed cloud backup (iPhone and iPad). An adult can choose Settings → Cloud backup, complete the parent challenge, confirm that they manage backup for themselves or a child in their care, and sign in with Apple. Apple verifies the sign-in. We receive its app-specific account identifier and authentication tokens; we do not request your Apple email address or account name. The server stores a keyed version of that identifier, an internal account identifier, an encrypted Apple refresh token, protected session records, save versions and dates. We also receive your selected outfit, charm engraving, pacifier, nest, room and supported beta/earned unlocks, linked to that account. These are used only to save, combine and restore your collection. An engraving may contain a name you enter. The save and refresh token are encrypted at rest; HTTPS protects transmission. Authorized operators maintain the service, so this is not end-to-end encryption.

From build 20, an adult can manage a main collection and up to five additional Hushsu profiles under one Apple account. Each profile has a separate appearance and collection; its nickname, random profile identifier and any exclusive-item assignments are stored with the account. Profile nicknames are encrypted at rest. Use a made-up nickname rather than a child’s full name. Guest play does not create a cloud account. Photos, photo files, voice nicknames, local player identifiers and journey progress are not included in this backup. Payments, Google sign-in, online name generation and room-photo uploads are not enabled. This free release also hides custom engraving and photo-sticker editing. Legacy engravings in existing saves may still synchronize. Earlier test unlocks have no monetary charge or proof of a paid purchase. No local photo is sent to an AI service.

6. Why we use information and who receives it

We process optional cloud-account and save information to provide the backup and recovery service you request (performance of that service agreement). We process limited connection and authentication records to protect accounts (our legitimate interest in security). We use support and testing information to operate, secure and improve Hushsu and respond to your requests. Where applicable data-protection law requires a legal basis, these activities rely on our legitimate interests in supporting and maintaining the game, fulfilling your service requests, or complying with legal obligations. Where we rely on consent for an optional feature, you can withdraw it for future use.

Our website and content service run on Hetzner infrastructure in Helsinki, Finland. Email sent to hello@piruzlabs.com is received through Google’s mail service. Google provides Google Play distribution and testing. Apple provides TestFlight and Sign in with Apple. Apple processes sign-in activity under its own privacy terms; see Apple’s sign-in privacy notice. These providers and people assisting us with support and development may handle information as needed to deliver their services and respond to you. See the Hetzner privacy notice and Google privacy notice for their own practices. We may disclose information when legally required or necessary to protect rights and security. We do not sell personal information or share it for cross-context behavioural advertising.

Service providers may process information outside your country. Applicable provider terms and legally required transfer safeguards govern that processing. Our game-content server is in the European Union; email, Google Play and Apple services may involve processing in other countries. Contact us for information about safeguards applicable to your request.

7. How long information is kept

Cloud account and save information remains until you delete the cloud account. Session tokens expire after 30 days; sign-in can renew access. Signing out stops synchronization on that device but retains the online copy. Delete cloud account removes the active account, sessions and save and revokes the stored Apple authorization. If Apple or our service is unavailable, deletion reports failure so you can retry or contact us. Rotating database backups expire within 30 days. A deletion marker containing only the internal random account ID and deletion date is kept separately to prevent an older backup from bringing an account back. We retain these markers while older recovery copies may exist, and review them for removal.

Local saves remain until replaced or removed from the app’s storage. Removing an app completely or clearing a browser’s site data can erase your collection; offloading an app may keep it. Device backups and copies in other apps have separate lifetimes.

We keep support messages and any testing information we copy only for as long as needed to resolve the request, investigate the issue and meet applicable legal obligations. We review that need and delete or anonymise information when it is no longer needed. Apple controls retention inside TestFlight and Google controls retention in its platform services; their notices explain this separately. The website’s request-limit counters expire after one minute and are removed from memory during the following cleanup cycle. Server diagnostic logs are limited by size, and system-journal records are capped at 30 days; records needed to investigate a security incident may be retained separately until the investigation is resolved.

Hushsu help

How to play: tap Play Now, hold Hushsu’s tummy, move your finger to steer, and release in a safe nest. Use Calm Hushsu between journeys to pet, brush and wash her. Make your Hushsu opens her wardrobe.

Sound: open Settings and check the music, effects and voice controls, then check your device volume and audio output.

Restore a collection (iPhone and iPad only): an adult opens Settings → Cloud backup and signs in with the same Apple account on both devices. Choose the same Hushsu profile, then restore. Photos and journey progress are not part of cloud backup. Back up your current collection before changing devices.

Home Screen widget: on iPhone or iPad, touch and hold an empty Home Screen area, choose Edit → Add Widget and search Hushsu. On Android, touch and hold an empty Home Screen area, choose Widgets, find Hushsu and drag it onto a free space. Available controls depend on your launcher. Open Hushsu once after changing her look so the widget can update.

Need help? Email hello@piruzlabs.com with the app version, device model and what happened. Do not send passwords, Apple verification codes or a child’s personal details. There are no purchases in the free 1.0 release.

8. Your choices and requests

You can change your appearance, disable voice or sound, remove the widget, and decline optional recording, sharing or cloud backup. On iPhone and iPad, an adult can change cloud-profile nicknames in the backup panel. Removing the widget hides it; it does not erase your game save. We cannot retrieve a local-only save from your device. On iPhone and iPad, in Settings → Cloud backup, you can back up, restore, sign out or delete the cloud account and all its cloud profiles without removing your current local game save. Locally cached profiles and photos stay on the device until the app’s data is removed. Contact us to request an export or other assistance. Reconnecting after deletion creates a new backup only if you choose to sign in again.

Contact hello@piruzlabs.com to ask about information we hold about you. Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, and complain to your data-protection authority. We may need proportionate information to verify a request. Withdrawing consent does not undo processing already lawfully completed. You can manage information held by Apple through Apple’s Data and Privacy page.

9. Children and families

Hushsu’s core play works without giving us a child’s name, email or photo. Adults should use made-up profile nicknames and supervise sharing and feedback. Parents or guardians can contact us about information a child may have sent through support or feedback so we can review and delete it where appropriate.

Optional online backup on iPhone and iPad is for adults and parents/guardians using their own Apple account. Children should play without creating their own online account; a parent or guardian can manage supported saves for a child in their care. Do not put a child’s real name or other identifying details in profile nicknames or legacy engravings. Parent gates protect external links and, where supported on iPhone and iPad, backup, sharing and recording. These gates and the adult confirmation are not age verification or a verified parental-consent system. We do not offer children’s own online accounts, chat, advertising, paid purchases or photo uploads in this release. If you believe a child has created an account or sent personal information without appropriate permission, contact us so we can investigate and remove it where appropriate.

10. Changes to this notice

We will date revisions and explain material changes before adding a new use of personal information. Core play remains usable offline. The effective date above identifies the current published notice.