How we look after your family’s information

Goodnight Kiddo (“we”, “us”) makes personalised, illustrated and narrated bedtime story series. The service is run by [legal entity name and registered address], which is responsible for your information.

Goodnight Kiddo is for parents and guardians. Accounts are for adults aged 18 or over. Children never create accounts, sign in, chat or type anything. Any details about a child come from their parent or guardian, who chooses what to share.

About you

• Your name, email address and password (stored only as a secure hash).
• If you sign in with Apple or Google, the identifier they give us, and your name and email.
• Your time zone, so we can count the books made each day.
• Your plan, purchases and credit balance. Card details are handled by Stripe or Apple; we never see or store your full card number.

About your child, only if you add it

• A first name or nickname, age, whether they are a boy or a girl (if you say), interests, appearance notes and anything you add about them, like their personality or favorite toys.
• An optional photo, used only to help draw your child’s likeness (see section 4).

Family voices, only if you make one

• A voice recording of the person reading our short story, their first name, and a record of their consent (see section 7).

Your stories

• Your answers to the story questions: heroes, friends, powers, worlds, moods and things to avoid.
• What we make for you: story text, illustrations, character pictures, narration and theme music, plus short recaps that let later books remember earlier ones.

From your devices

• On iPhone and iPad, a notification token if you allow “your book is ready” notifications.
• Basic technical logs (such as IP address, device type and errors) to keep the service secure and working.

• To write, illustrate and narrate your books, and to keep characters consistent from book to book.
• To check that what goes in, and what comes out, is gentle and appropriate (see section 5).
• To run your subscription, monthly and extra credits, and the daily limit.
• To send account emails, such as password resets, and notifications you have turned on.
• To answer your questions, fix problems and protect the service from misuse.

We never show ads, never sell your information, and never use your family’s details for advertising. We do not use your stories or photos to train our own models. [Confirm the data-use terms of each provider in section 6 during legal review.]

Our legal bases, where the law asks for one, are: providing the service you signed up for (contract); your consent, for a child’s details and photo, which you can withdraw at any time by deleting them; and our legitimate interest in keeping the service safe and secure.

Adding a photo is always optional. Stories work beautifully without one. If you do add a photo:

• It is used only as a drawing reference when we paint your child’s character.
• It is kept in private storage and only ever shown back to you, through short-lived links that expire.
• It is never published, shared with other families, or used in marketing.
• You can delete it at any time from the child’s profile. Deleting your account deletes it too.
• When you delete it, the character pictures already drawn from it stay in your stories, but they are no longer used to draw new pictures. Deleting the series removes them too.

Please only add photos of children you are the parent or guardian of, and avoid anything that shows a school name, address or other identifying detail.

Every book is created with generative AI, guided by your answers and our story guidelines. Those guidelines rule out violence, peril beyond a mild thrill, real brands and characters that belong to someone else, and anything you have asked us to avoid.

Everything you type, and every story we write, passes an automated safety check before it reaches you. Generated content can still occasionally be odd or imperfect, so we suggest a grown-up glances at each book. If anything ever feels wrong, tell us at zzz@goodnightkiddo.com and we will look into it.

We share information only with the companies that help us run Goodnight Kiddo, and only what each one needs. They act on our instructions under contracts that protect your data.

We may also share information if the law requires it, or to protect someone’s safety. If Goodnight Kiddo is ever sold or merged, this notice would continue to protect your information, and we would tell you first.

A family can have stories read in a family member’s own voice. The person reads a short story aloud, and we use the recording to make a copy of their voice with our narration provider, ElevenLabs. A voice recording and the copy made from it are treated as biometric information, as some US state laws (such as those of Illinois, Texas and Washington) require, and we handle them that way everywhere:

• Explicit consent first. The person recording types their name, ticks a box agreeing to it, and says a consent sentence aloud at the start (“My name is …, and I agree to Goodnight Kiddo making a copy of my voice to read bedtime stories to the … family”). We keep a record of that consent: their name, the family, the date and the wording they agreed to. Recordings are made live in the app or browser; we don’t accept uploaded files.
• One use only. A family voice only reads bedtime stories made for that family, and a short sample so the family can hear it. It is never used to say anything else, never shared with other families, never sold, and never used for marketing or to train models.
• Private storage. The recording is kept in private storage and is never shown or played to anyone. The copy of the voice is kept by ElevenLabs only while it is in use: we remove it when it hasn’t been used for a while and make it again from the recording when it is next needed.
• Delete it at any time. The person who recorded gets a private link to delete their voice whenever they like, and the family can delete it from their account. Deleting it removes the recording and the copy of the voice for good. Stories it has already read keep their audio, so a child’s favorite book doesn’t go quiet; no new stories will use it. We keep the consent record (name, date and wording, no audio) as proof that consent was given, until the family’s account is deleted.
• How long we keep it. Until it is deleted by the person who recorded it or by the family, or the family’s account is deleted, and in any case we delete it automatically once it hasn’t read a story for three years. [Confirm this retention schedule during legal review.]

Please only invite someone who would like to take part, and never record someone without them knowing.

We use one essential cookie to keep you signed in, and a small amount of local storage for preferences such as night or paper mode. We do not use advertising or cross-site tracking cookies.

Your books are kept for as long as your account exists, so you can read them again whenever you like. You can delete a series, a child profile or a photo at any time.

You can delete your whole account from your account page. That immediately cancels any web subscription and deletes every series, book, picture, recording, child profile, photo and family voice (including its copy at ElevenLabs). Copies in our backups are removed within [30] days. Stripe and Apple keep payment records for as long as the law requires them to.

App Store subscriptions are managed by Apple, so please also cancel those in your iPhone or iPad’s Settings.

Depending on where you live (for example under the GDPR in the UK and EU, or US state laws such as the CCPA), you can ask to see, correct, download or delete your information, or object to how we use it. Many of these you can do yourself in the app. For anything else, write to zzz@goodnightkiddo.com and we will reply within [30] days. You can also complain to your local data protection authority.

In the US, the service is directed to parents, and we collect a child’s details only from their parent or guardian, who can review or delete them at any time, in line with COPPA. [Confirm the COPPA consent approach during legal review.]

Information is encrypted in transit, files are kept in private storage, and media is only shared through short-lived signed links. Access inside the company is limited to the people who need it. No system is perfect, but if something ever went wrong we would tell you promptly and as the law requires.

Our providers may process information in the United States and other countries. Where information leaves the UK or EU, we rely on recognised safeguards such as standard contractual clauses. [Confirm storage regions.]

If we make an important change, we will tell you by email or in the app before it takes effect. You can reach us at zzz@goodnightkiddo.com or [postal address].