Privacy Policy

This is a family product. A parent or guardian creates the account, tells Santa about the children, and decides what the children see and do. This policy explains what we collect, why, who helps us run the magic, how long we keep things, and the controls you have. The Children's Privacy Notice below is the part you agree to when you create an account.

What we collect about parents

Your email address and sign-in method (email, Apple or Google); your name if you give it; a second parent's name and email if you add one; your home city or address for the Santa tracker; a payment method held by Stripe (we never see card numbers); the device push token if you install the app; and support messages you send us.

Children's Privacy Notice

Children do not create accounts and cannot sign up. Everything about a child comes from you, or from what the child does inside the experience you set up for them.

What we collect about a child: the first name, age, and details you enter (interests, pets, relatives, what they leave out for Santa); wish-list items and letters the child writes; the voice and video of live Santa calls (recorded only when you turn recording on, and the transcript and a short summary of every call); audio or video messages the child sends Santa; photos you upload to Magic Studio and the images and videos made from them; good-deed and spirit entries you record; and the child's language.

How we use it: so Santa knows the child on calls and in letters, to make the elf notes, tracker and Magic Studio personal, to keep a keepsake you asked for, and to keep the service safe. We never use children's information for advertising, never show ads to children, and never sell or rent it.

Who else touches it. We use service providers to run the experience, each under contract to use the data only for us: Supabase (database and storage, US), Vercel (hosting and AI gateway), HeyGen and Tavus (the live Santa video), ElevenLabs (Santa's voice and phone calls), Anthropic via Vercel's AI Gateway (Santa's words, letter replies, call summaries, and — on video calls — a brief description of what the camera shows so Santa can react), fal.ai and Segmind (Magic Studio images and videos), Stripe (payments), SMTP2GO (email), and Google Firebase (app notifications). Santa is AI, generated under a strict child-safety persona. No provider may use a child's data to train models or for its own purposes.

How long we keep it. Call recordings and shareable clips are deleted 90 days after the call unless you saved them to your keepsake library. The words Santa needs during a call are held only while the call is live and cleared within two hours. Everything else stays until you delete it or the account.

Your rights as the parent. At any time, in Settings → Data & privacy, you can review what we hold about each child, download all of your family's data, delete a single recording, delete a child's profile, or delete the whole family account — which removes every child, every recording and photo, and your login. You can also refuse further collection simply by not using a feature; nothing is collected in the background. Email privacy@santaclause.me for anything you cannot do yourself.

How you consent. When you create the account you confirm you are the parent or guardian and accept this notice; we email you a copy. A purchase confirms it again through your payment. If this notice changes in a way that matters, we ask you to accept it again before you continue.

Location

The Santa tracker uses the city or address you enter, or the phone's location only when you tap “Use my location” on the tracker. We never collect a child's device location in the background.

Security

Data is encrypted in transit and at rest with our providers. Recordings and photos are private to your family and served through short-lived signed links. Sign-in is protected with rate limits and lockouts; children's access codes are rate-limited too.

Cookies and analytics

We use only the cookies needed to keep you signed in and to remember your choices. There is no third-party advertising or tracking. Payments use Stripe's cookies on Stripe's pages.

Email and app notifications

We send the notifications you can see in Settings → Notifications: call confirmations and reminders, letters and replies, Magic Studio results, receipts, the Christmas Eve takeoff. Every email has a manage link and a one-click unsubscribe. Account, security and privacy notices are sent regardless.

Changes

When this policy changes in a way that matters, the date above changes and you are asked to accept it again in the dashboard.

Contact

SantaClause.me · privacy@santaclause.me