Privacy Policy

GoodnightHabits is operated by MB Joga Bonito, a company registered in Lithuania.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit GoodnightHabits, purchase our Products, complete our personalization questionnaire, contact us, or otherwise interact with our services.

We take privacy seriously, particularly because our Products are designed for families and may involve information relating to children.

Please read this Privacy Policy carefully.

1.Who We Are

GoodnightHabits is operated by:

MB Joga Bonito
Legal entity code: [MB COMPANY CODE]
Lujos g. 18
Vilnius LT 06200
Lithuania

Email: hello@goodnighthabits.com

In this Privacy Policy, “GoodnightHabits,” “we,” “us,” or “our” refers to MB Joga Bonito.

For purposes of the EU General Data Protection Regulation (“GDPR”), where applicable, MB Joga Bonito acts as the data controller of the personal data described in this Privacy Policy.

2.Information We Collect

We collect information that is necessary to operate GoodnightHabits, process purchases, create personalized Products, communicate with Customers, and improve our services.

The information we collect may include the following.

2.1 Information you provide directly

When you use GoodnightHabits, you may provide:

• your name
• email address
• billing or transaction information
• information submitted during checkout
• information provided through our personalization questionnaire
• Customer support communications
• feedback or other information you voluntarily provide.

2.2 Personalization Information

To create your personalized Product, we may collect information such as:

• a child's first name
• selected habit
• preferred story world
• age range
• interests or preferences
• other creative preferences requested during the personalization process.

Please do not provide sensitive information about a child unless it is specifically requested and necessary for the Product.

Do not provide a child's full name, home address, school, phone number, photographs, medical information, or other sensitive information unless specifically requested by us.

We aim to collect only the information reasonably necessary to create the Product you requested.

2.3 Payment information

Payments may be processed by third-party payment providers.

We generally do not store complete payment-card numbers or security codes on our own systems.

Instead, payment information may be collected and processed directly by our payment provider.

We may receive information such as:

• payment status
• transaction identifier
• payment method
• card type
• last four digits of a payment card, where provided
• billing information; and
• information necessary to identify and manage the transaction.

The relevant payment provider may process your information under its own privacy policy.

2.4 Device and technical information

When you visit our Website, we may automatically collect certain technical information, such as:

• IP address
• browser type
• operating system
• device type
• language preferences
• approximate location derived from IP address
• referring website
• pages viewed
• time spent on pages
• Website navigation information
• date and time of visits
• error logs; and
• other technical information necessary for security and Website operation.

Some of this information may be collected through cookies and similar technologies.

2.5 Communications

If you contact us, we may collect:

• your name
• email address
• the content of your message
• attachments or information you voluntarily provide; and
• technical information associated with the communication.

We use this information to respond to you, provide customer support, investigate issues, and maintain appropriate business records.

3.How We Use Your Information

We use personal information only for legitimate business and service purposes.

Depending on the circumstances, we may use information to:

Provide and deliver Products

We use information to:

• process your Order
• create your personalized stories
• personalize the Product according to your selections
• deliver your Product
• provide access to purchased Digital Content
• provide customer support; and
• manage your account or Order where applicable.

The legal basis for this processing under the GDPR is generally the performance of a contract with you or taking steps at your request before entering into a contract.

Process payments

We use payment and transaction information to:

• process payments
• confirm transactions
• prevent fraudulent transactions
• manage refunds
• maintain financial records; and
• comply with legal obligations.

The legal basis may include performance of a contract and compliance with legal obligations.

Communicate with you

We may use your contact information to:

• send Order confirmations
• deliver Products
• provide important service information
• respond to questions
• provide customer support
• communicate regarding refunds or technical issues; and
• send other transactional communications.

The legal basis is generally performance of a contract or our legitimate interests in providing effective customer service.

Improve GoodnightHabits

We may use information to:

• understand how our Website is used
• identify technical problems
• improve Website functionality
• improve Product creation and delivery
• analyze aggregate usage patterns
• prevent fraud and abuse; and
• develop and improve our services.

Where appropriate, we use aggregated or de-identified information rather than information that directly identifies an individual.

The legal basis may be our legitimate interests or consent, depending on the activity.

Marketing

Where required, we will obtain consent before sending marketing communications.

We may send marketing emails about GoodnightHabits, new Products, promotions, or related services where permitted by applicable law.

You may unsubscribe from marketing communications at any time by using the unsubscribe mechanism included in the communication or by contacting us at:

hello@goodnighthabits.com

Unsubscribing from marketing communications will not stop necessary transactional or service communications.

Prevent fraud and abuse

We may process information to:

• detect suspicious transactions
• prevent fraudulent purchases
• investigate abusive refund or payment activity
• protect our Website and systems
• enforce our Terms and Conditions; and
• protect our legal rights.

The legal basis may be our legitimate interests and compliance with legal obligations.

Legal obligations

We may process personal information where necessary to:

• comply with applicable laws
• respond to lawful requests from authorities
• maintain accounting and tax records
• establish, exercise, or defend legal claims; or
• protect the rights, safety, and property of GoodnightHabits, our Customers, or others.

4.Children'S Information

GoodnightHabits is designed to be purchased and used by parents, guardians, caregivers, and other adults.

Children are not the intended purchasers or direct users of our Website's ordering process.

A parent, guardian, or other responsible adult provides the information used to personalize a Product.

Because the Product is intended for children, some of the Personalization Information you provide may relate to a child.

We ask that parents and caregivers provide only the information reasonably necessary to create the Product.

For example, a child's first name may be used to personalize a story.

We do not need a child's:

• full legal name
• home address
• telephone number
• school information
• precise location
• photographs
• medical records; or

other sensitive information

to create a standard GoodnightHabits Product.

Please do not submit such information through the Website unless we specifically request it for a clearly stated purpose.

We do not intentionally encourage children to submit personal information directly to us.

If we learn that we have collected personal information directly from a child in circumstances where applicable law requires parental consent and we did not obtain the required consent, we will take reasonable steps to delete the information, subject to applicable legal obligations.

For U.S. users, children's privacy laws may impose additional requirements depending on how a service is operated and what information is collected. We aim to structure GoodnightHabits so that parents or guardians control the submission of children's Personalization Information.

5.Use Of AI And Automated Technologies

GoodnightHabits may use artificial intelligence and other automated technologies to assist in creating personalized Products.

Depending on the Product and technology used, Personalization Information may be processed by an AI or content-generation service provider for the limited purpose of creating the requested Product.

We aim to use service providers that provide appropriate privacy and security protections.

We do not intentionally request sensitive information about children for AI-generated storytelling.

We do not use Personalization Information for unrelated advertising purposes.

Where appropriate, we may use aggregated, anonymized, or de-identified information to improve our systems and services.

We will not knowingly use a child's Personalization Information to train a publicly available general-purpose AI model unless this is separately disclosed and permitted under applicable law.

Because third-party technology providers may process information on our behalf, information may be processed on servers located outside Lithuania or the European Economic Area.

6.Legal Bases For Processing

If the GDPR applies to your personal data, we rely on one or more of the following legal bases:

Performance of a contract

We process information necessary to:

• process your Order
• create your personalized Product
• deliver your Product
• provide customer support; and
• otherwise perform our agreement with you.

Consent

We may rely on your consent for activities such as:

• certain marketing communications
• certain non-essential cookies
• other processing where consent is legally required.

You may withdraw consent at any time where consent is the legal basis for processing.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Legitimate interests

We may process information where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.

Examples include:

• operating and improving our Website
• preventing fraud
• securing our systems
• managing customer relationships
• analyzing Website performance
• defending legal claims; and
• protecting our business.

Legal obligations

We may process information where necessary to comply with laws or legally binding requirements.

7.When We Share Your Information

We do not sell your personal information as a business model.

We may share personal information with carefully selected service providers where reasonably necessary to operate GoodnightHabits.

These providers may include:

• payment processors
• hosting providers
• cloud storage providers
• email delivery providers
• customer support providers
• analytics providers
• security and fraud-prevention providers
• website technology providers
• AI or content-generation providers
• professional advisers
• accountants
• lawyers; and
• other providers necessary to operate our business.

These providers may process personal information on our behalf and may only receive information reasonably necessary for the services they provide.

Where required by applicable law, we enter into appropriate contractual arrangements with processors and service providers.

8.Business Transfers

If GoodnightHabits is involved in:

• a merger
• acquisition
• financing
• restructuring
• sale of assets
• sale of the business; or
• similar corporate transaction

personal information may be transferred as part of that transaction.

Any such transfer will remain subject to applicable privacy laws.

9.Legal Disclosures

We may disclose personal information where reasonably necessary to:

• comply with applicable law
• respond to valid legal process
• respond to governmental requests
• enforce our Terms and Conditions
• investigate fraud or security incidents
• protect the rights, property, or safety of GoodnightHabits or others; or
• establish, exercise, or defend legal claims.

10.International Data Transfers

GoodnightHabits is operated from Lithuania, but some of our service providers may operate in other countries, including the United States.

As a result, personal information may be transferred to or processed in countries outside the European Economic Area.

Where the GDPR applies and personal data is transferred outside the EEA, we will use an appropriate legal mechanism where required, such as:

• an adequacy decision
• Standard Contractual Clauses
• another legally recognized transfer mechanism; or
• another safeguard permitted by applicable law.

11.How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy.

Retention periods depend on the type of information and why we collected it.

Generally:

Order and transaction information may be retained for as long as necessary to provide customer service, maintain business and accounting records, comply with tax obligations, resolve disputes, and establish or defend legal claims.

Personalization Information may be retained for as long as reasonably necessary to create and deliver your Product, provide customer support, and comply with legal or operational requirements.

We aim to delete or anonymize Personalization Information when it is no longer reasonably necessary for these purposes.

Customer support communications may be retained for as long as reasonably necessary to resolve the relevant issue and maintain appropriate business records.

Marketing information may be retained until you withdraw your consent or otherwise opt out, subject to applicable legal requirements.

Technical and analytics information may be retained for periods appropriate to the purpose for which it was collected, including security, analytics, and Website operation.

We may retain information for longer where necessary to comply with legal obligations or establish, exercise, or defend legal claims.

12.Data Security

We use reasonable technical and organizational measures designed to protect personal information against:

• unauthorized access
• accidental loss
• misuse
• alteration
• unauthorized disclosure; and
• destruction.

Security measures may include access controls, authentication, encryption where appropriate, restricted employee access, secure service providers, and other reasonable safeguards.

However, no internet transmission or storage system can be guaranteed to be completely secure.

You should also take reasonable steps to protect your account, email address, and access credentials.

13.Cookies And Similar Technologies

We may use cookies and similar technologies on the Website.

Cookies are small files stored on your device that allow a Website to recognize a browser or remember certain information.

We may use cookies for purposes including:

Necessary cookies

These cookies are required for the Website to function properly.

They may support:

• security
• checkout
• authentication
• basic Website functionality; and
• other essential functions.

Functional cookies

These cookies help us remember preferences and improve the Website experience.

Analytics cookies

These cookies help us understand how visitors use the Website and identify areas for improvement.

Advertising or marketing cookies

Where used, these technologies may help us measure advertising performance or show more relevant advertising.

Where required by applicable law, we will request consent before using non-essential cookies.

You can review or change your choice at any time: Privacy choices.

14.Third-Party Analytics And Advertising

We may use third-party analytics, advertising, or attribution technologies to understand Website traffic and measure marketing campaigns.

Depending on the technologies actually implemented on the Website, these providers may receive information such as:

• IP address
• browser and device information
• Website interactions
• referral information
• approximate location
• advertising identifiers; and
• information about how you interact with our Website.

We do not intentionally provide these advertising providers with a child's Personalization Information for behavioral advertising.

Where applicable law gives you the right to opt out of certain forms of targeted advertising or sharing, we will provide the applicable mechanism required by law.

The specific third-party technologies used by GoodnightHabits may change over time.

15.Your Privacy Rights

Depending on your location and applicable law, you may have rights relating to your personal information.

These may include:

• the right to know what personal information we process
• the right to access your personal information
• the right to correct inaccurate information
• the right to request deletion
• the right to restrict certain processing
• the right to object to certain processing
• the right to data portability
• the right to withdraw consent
• the right to opt out of certain marketing
• the right to opt out of certain targeted advertising or sharing; and
• the right to lodge a complaint with a data protection authority.

These rights are subject to applicable legal exceptions.

16.GDPR Rights For EU/EEA Customers

If the GDPR applies to you, you may have the following rights.

Right of access

You may request confirmation as to whether we process your personal data and, where applicable, obtain a copy of that data.

Right to rectification

You may request correction of inaccurate or incomplete personal data.

Right to erasure

You may request deletion of your personal data in circumstances provided by law.

This right is not absolute. We may need to retain certain information to comply with legal obligations or establish, exercise, or defend legal claims.

Right to restriction

You may request that we restrict processing in circumstances provided by law.

Right to object

You may object to certain processing based on our legitimate interests.

You may also object to direct marketing at any time.

Right to data portability

Where legally applicable, you may request your personal data in a structured, commonly used, and machine-readable format.

Right to withdraw consent

Where we rely on consent, you may withdraw your consent at any time.

Withdrawal does not affect processing that occurred before withdrawal.

Right to complain

You may lodge a complaint with the supervisory authority responsible for data protection in your country of residence, workplace, or the place where you believe an infringement occurred.

For our Lithuanian operations, the relevant supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

Current contact information for the Inspectorate is available on its official website.

17.How To Exercise Your Rights

To exercise a privacy right or ask a privacy-related question, contact:

hello@goodnighthabits.com

Please provide enough information for us to understand and process your request.

For security reasons, we may need to verify your identity before fulfilling certain requests.

We will generally respond to valid GDPR requests within one month.

Where legally permitted, this period may be extended by up to two additional months where the request is complex or multiple requests are made.

We will inform you if an extension is necessary.

18.California Privacy Rights

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (“CCPA”), as amended.

Depending on whether and how the CCPA applies to GoodnightHabits, these rights may include:

• the right to know about personal information collected about you
• the right to request deletion of personal information
• the right to correct inaccurate personal information
• the right to opt out of the sale or sharing of personal information
• the right to limit certain uses or disclosures of sensitive personal information
• the right to non-discrimination for exercising your privacy rights.

California's privacy framework includes specific definitions, exceptions, and thresholds, and not every business or every type of processing is subject to every CCPA obligation.

19.California Categories Of Information

Depending on how you interact with GoodnightHabits, we may collect categories of information that can include:

We do not intentionally collect sensitive personal information about children as part of our standard Product.

20.California Sale And Sharing

We do not sell personal information for monetary consideration as a business model.

Where applicable, we may use advertising or analytics technologies that could constitute “sharing” under certain privacy laws because of how those laws define the term.

If GoodnightHabits becomes subject to an applicable legal requirement to provide an opt-out mechanism for sale or sharing, we will provide the legally required mechanism.

California residents will not be discriminated against for exercising privacy rights provided by applicable law.

21.Do Not Track

Some browsers provide “Do Not Track” signals.

There is no universally accepted technical standard for responding to all such signals.

Where applicable law requires us to recognize a browser-based privacy signal, we will process such signals in accordance with applicable law.

22.Third-Party Websites

Our Website may contain links to third-party websites, services, or platforms.

Those third parties have their own privacy practices.

We are not responsible for the privacy practices of websites or services that we do not operate.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

23.Email Marketing

If you subscribe to GoodnightHabits marketing communications, we may send you emails about:

• GoodnightHabits Products
• promotions
• new features
• new story collections
• offers; and
• other information about GoodnightHabits.

You may unsubscribe at any time using the unsubscribe link contained in our marketing emails.

We may continue to send transactional communications that are necessary to provide Products or services.

24.Automated Decision-Making

GoodnightHabits may use automated technologies to assist in creating personalized content.

These technologies are used primarily for creative and operational purposes.

We do not intend to make decisions about Customers that produce legal or similarly significant effects solely through automated processing.

Where applicable law gives you rights regarding automated decision-making or profiling, those rights will apply.

25.Data Minimization

We aim to follow the principle of data minimization.

This means that we seek to collect and process information that is:

• adequate
• relevant; and

limited to what is reasonably necessary

for the purposes described in this Privacy Policy.

In particular, because our Products are designed for children, we encourage parents and caregivers to provide only the information necessary for personalization.

26.Your Responsibility When Providing Information About Others

If you provide personal information about another person, including a child, you represent that you are authorized to provide that information for the purposes described in this Privacy Policy.

For example, a parent or legal guardian may provide a child's first name for the purpose of personalizing a Product.

You should not provide information about another person where you do not have the appropriate authority or legal basis to do so.

27.Changes To This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made because of:

• changes to our services
• changes to technology
• changes to applicable laws
• changes to our business practices; or
• improvements to our privacy practices.

The updated version will be published on the Website with a revised “Last updated” date.

If we make a material change that significantly affects how we use personal information, we may provide additional notice where required by law.

28.Contact Us

If you have questions about this Privacy Policy, our privacy practices, or your personal information, please contact us:

MB Joga Bonito
Lujos g. 18
Vilnius LT 06200
Lithuania

Email: hello@goodnighthabits.com

For privacy requests, please use:

hello@goodnighthabits.com

29.Effective Date

This Privacy Policy is effective as of:

September 2, 2026

Last updated: September 2, 2026