Privacy Policy

Sleepy Stories is an AI-powered personalised bedtime story service. We are operated as a sole trader / small business. If you have any questions about this policy or about your data, contact us at hello@sleepystories.co.

When you create an account and set up a child profile, we collect: • Your email address and password (for account access) • Your child's first name and age • Your child's interests, favourite themes, and any characters or friends you choose to add • Optional details such as pet names and special notes you provide • Your billing information (processed and stored by Stripe — we never see or store your card number) • Your bedtime delivery preference and timezone • Basic usage data (stories delivered, subscription status) We do not collect your child's surname, photograph, location, school name, or any other identifying information beyond what you explicitly provide.

We use the information you provide solely to: • Generate personalised bedtime stories for your child • Deliver those stories to your inbox at the time you set • Manage your account and subscription • Send occasional service emails (receipts, important account notices) We do not use your child's information for advertising, profiling, or any purpose other than generating their stories. We do not sell, rent, or share personal data with third parties for marketing purposes.

Sleepy Stories collects limited information about children as part of providing the service. This includes a child's first name, age, and interests — provided by the parent or guardian who creates the account. We do not knowingly allow children to create accounts directly. Accounts are created by parents or guardians aged 18 or over. If you believe a child has registered without parental consent, contact us at hello@sleepystories.co and we will delete the account promptly. All child profile data is stored securely in our database, accessible only via your authenticated account. It is used exclusively for story generation and is not shared with any third party except our AI generation provider (Anthropic), which processes it to write the story and does not retain it. Under GDPR, you have the right to access, correct, or delete any data we hold about you or your child. To exercise these rights, email hello@sleepystories.co.

We use the following third-party services to operate Sleepy Stories: • Supabase — database and authentication. Your account data and child profiles are stored on Supabase infrastructure (EU region). • Anthropic — AI model used to generate story content. Your child's profile details are sent to Anthropic's API to generate each story. Anthropic does not store this data beyond the API request. • Stripe — payment processing. Stripe handles all billing data. We do not store card details. Stripe's privacy policy applies to payment data. • Resend — email delivery. Stories and transactional emails are sent via Resend's infrastructure. Each of these providers is contractually bound to handle your data securely and in accordance with applicable data protection law.

We retain your account and child profile data for as long as your account is active. If you delete your account, we will delete your personal data and child profile data within 30 days, except where we are required to retain certain records for legal or financial compliance (e.g. billing records, which Stripe retains per their own policy). You can request deletion of your account and all associated data at any time by emailing hello@sleepystories.co.

We use a single session cookie to keep you logged in. We do not use tracking cookies, advertising cookies, or any third-party analytics cookies. We do not use Google Analytics or similar services.

Under GDPR (if you are in the UK or EU), you have the right to: • Access the personal data we hold about you • Correct inaccurate data • Request deletion of your data ("right to be forgotten") • Restrict or object to processing • Data portability (receive your data in a machine-readable format) To exercise any of these rights, email hello@sleepystories.co. We will respond within 30 days.

If we make material changes to this policy, we will notify you by email before they take effect. Continued use of the service after that date constitutes acceptance of the updated policy.

Questions about this policy or about your data: hello@sleepystories.co