Privacy policy

Who this policy is for

Bedtime Saga is a paid service used by adults to play personalized audio stories for the children in their household. The account-holder is always a parent or legal guardian, who sets up and manages everything. Children do not create accounts, log in, enter information, or interact with the app’s purchase, link, or account controls — those are behind a parental gate (see Parental controls).

Information you give us (the parent)

• Your name and email address (provided at sign-up).
• Your subscription plan and payment status. Payments are processed by Apple (in-app purchases) or Stripe (on the web). We never see or store your card number.
• Audit logs of account actions, kept for security and support.

Information you give us about your child

You — the parent — provide this on your child’s behalf:

• Their first name.
• Their age range (3–5, 6–8, or 9–12).
• A short note about things they love (e.g. “loves dinosaurs and her dog Pepper”), used to personalize stories.
• Optional story preferences you set (genre, gentle themes, a custom note), the stories you generate, and any ratings or notes you add.

What we do not collect

We do not collect a child’s surname, full date of birth, photographs, voice recordings, precise location, home or school address, contact information, or any persistent identifier used to track them — and nothing about your child beyond the short list above. We practice data minimization: if we don’t need it to make a story, we don’t ask for it.

How we use this information

We use the information for one purpose: creating and delivering your child’s personalized stories, and operating your account (billing, sign-in, support). To produce a story, your child’s first name and personalization details are processed by our text- and audio-generation providers solely to generate that story for your household (see Service providers below). We do notuse your child’s information to build advertising profiles, to train third-party advertising models, or for any purpose unrelated to the stories.

Children’s privacy & COPPA

• We do not knowingly collect personal information directly from children. All information about a child is entered by the parent who holds the account.
• By entering your child’s information, you provide verifiable parental consent for us to use it as described here.
• As a parent you may at any time review, correct, or deleteyour child’s information, and refuse further collection— by editing your child’s profile or deleting your account in the app.
• We collect only what is reasonably necessary to provide the stories, and retain it only while your account is active.

If you believe we have inadvertently collected information from a child without a parent’s involvement, contact us and we will delete it promptly.

Parental controls

Actions that leave the child-safe area of the app — making a purchase, opening external links, and deleting the account — are protected by a parental gate(a short question a young child can’t answer), so children can’t make purchases or change account settings on their own.

No advertising, no tracking, no selling

• We display no advertising of any kind.
• We use no third-party analytics, advertising SDKs, or tracking technologies. The app ships with none.
• We do not sell, rent, or share your or your child’s personal information, and we do not disclose it for any third party’s own marketing.

Service providers

We share information only with the vendors that help us run the service, each limited to what they need:

• Apple / Stripe— process payments; they see your payment details, we don’t.
• Google Cloud — hosts our database and audio files (encrypted).
• Google Vertex AI— generates the spoken story audio; it receives the story text, including your child’s first name.
• OpenRouter — generates story text from non-identifying prompts.
• Resend — sends sign-in and account emails.

These providers may not use your family’s information for their own purposes.

Data retention & deletion

We keep your information only while your account is active. You can delete your account and everything in it at any time — from Settings → Delete account in the app, or from your account preferences on the web. When you do, your account and all data about you and your child are permanently deleted from our live systems within 24 hours (including generated stories and audio); encrypted backups age out within 30 days. We retain no information about your child after deletion, except where law requires limited billing records.

Security

We protect your information with industry-standard safeguards: encryption in transit (HTTPS/TLS) and at rest, access controls limiting who can reach the data, and audit logging. No method is perfectly secure, but we work to protect your family’s information and to limit what we collect in the first place.

Your rights

You may access, correct, delete, or export your information, and withdraw consent for its use, at any time through the app or by contacting us. We honor rights provided under COPPA, the GDPR/UK GDPR, and U.S. state privacy laws (including the CCPA/CPRA), including the right not to receive discriminatory treatment for exercising them. We do not “sell” or “share” personal information as those terms are defined under these laws. Bedtime Saga is operated from the United States; if you use it from elsewhere, you consent to processing there.

Changes to this policy

If we make a material change — especially to what we collect about your child or how we use it — we will update the date above and notify account-holders by email before the change takes effect.

Contact

hello@bedtimesaga.com for any privacy question or data-access request. We respond to verified parental requests to review or delete a child’s information promptly, and within the timeframes required by law.