Privacy Policy

The short version: we collect only what we need to write and deliver your family's stories, we sell nothing to anyone, and you can see or delete everything by emailing [email protected]. The longer version follows.

1. What we collect

From you (the parent): your email address, your subscription details, and payments (handled by Stripe — we never see or store your card number). If you subscribe to Your Voice, we also store the voice recording you provide.

About your child, from you: first name, age, favourite things (animals, colours, interests), an optional pet's name and type, preferred story time zone, and a chosen narrator. That's all — no surname, no birth date, no photos, no location beyond a time zone.

Automatically: basic technical logs needed to run the service (delivery records, errors), and privacy-friendly, cookie-less visit statistics on our website. We do not use advertising trackers.

2. What we use it for

One thing: running Bedtime Atelier. Child details personalize the stories. Your email receives them. Your recording narrates them — for your family only. Delivery logs help us fix problems. We also keep a record of the story elements already used for your child (character names, worlds) so stories never repeat.

We don't sell personal information, don't share it for advertising, and don't use your child's information or your voice recording to train AI models.

3. Children

Bedtime Atelier is a service for adults. All information about a child is provided by their parent or guardian, used solely to personalize that child's stories, and deletable by the parent at any time. We never communicate with children or knowingly collect anything from them directly.

4. Voice recordings

Your Voice recordings are stored in a private, access-controlled bucket, readable only by our service. They're used to generate one private synthetic voice that narrates stories for your account, and for nothing else — never public, never shared, never used for other families, never used for training. Ask us to delete your recording and we delete both it and the generated voice.

5. Who processes data for us

We use a small set of service providers, each receiving only what their job requires: Supabase (database and secure storage), Stripe (payments), Resend (sending story emails), Anthropic (story writing and safety review — receives first name, age, and favourites, not your email), Fish Audio (audio narration — receives the story text and, for Your Voice, your recording), and Cloudflare/GitHub (website hosting). Some providers process data in the United States; we choose providers with strong contractual privacy commitments.

6. How long we keep things

As long as your account is active. Delivered stories stay in your dashboard so your family keeps its library. When you delete a child profile or close your account, the associated personal details are deleted; when you request voice deletion, the recording and voice model are deleted. Payment records are kept as long as tax law requires.

7. Your rights

Email us and we will show you everything we hold about your family, correct it, export it, or delete it — usually within a few days, always within 30. Canadian privacy law (PIPEDA) applies to us; if you're in the EU/UK or a US state with privacy laws, we honour those access and deletion rights too. If you're unsatisfied with our answer, you may contact the Office of the Privacy Commissioner of Canada.

8. Security

Data is encrypted in transit, stored with per-account access rules, and secret keys are kept out of our code. No system is perfect; if a breach ever affects your data, we will tell you promptly and plainly.

9. Changes and contact

If this policy changes materially, we'll email you before the change takes effect. Anything unclear? [email protected] — a human reads it.