Privacy Policy
DRAFT — pending legal/COPPA review before public launch.
Children's privacy comes first. Children do not have accounts. All information Santa "knows" about a child — name, age, interests, pets, achievements — is entered by the parent, under the parent's control. We collect the minimum necessary to create the experience.
What we collect. Parent account email; parent-entered family profile (children's first names, ages, interests, home city for the tracker); wish lists; Santa call transcripts and, with consent, recordings; purchase records (via Stripe — we never see card numbers).
What we do NOT do. We do not sell family data. We do not use children's data for advertising. We do not show ads to children. Elf reports and parent notes are never shown to children.
Santa is AI. Conversations with Santa are generated by AI under a strict child-safety persona, with real-time content constraints. Transcripts and summaries are available to the parent in the dashboard.
Where data lives. Data is stored encrypted with our infrastructure providers (Supabase, Vercel, Stripe) in the United States. Call video flows through our conversation providers during live calls only.
Location. The Santa tracker uses a coarse, parent-entered location (a city). We never collect precise device location from children.
Deletion & retention. Parents may delete recordings individually, and may delete the entire family account and its data by request. Recordings and transcripts are retained only while the account is active.
Contact. Privacy questions: privacy@santaclause.me.