Skip to main content

Privacy Policy

Last updated: August 2, 2026

Introduction

Welcome! At Bedtime Stories, we keep things simple when it comes to your family's privacy. This policy explains exactly what we need to create magical, personalized bedtime stories for your child.

The simple truth: To personalize a story we use the details you enter for each child profile — a first name or nickname (with an optional phonetic spelling so the narrator says it correctly), the child's gender, and an age range (3-4, 5-6, 7-8, or 9-12 years) for age-appropriate content. You decide what to enter, you can use a nickname instead of a real name, and you can edit or delete a profile at any time.

Who We Are (Data Controller)

Bedtime Stories is a sole proprietorship registered with the Dutch Chamber of Commerce. For the purposes of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR"), we are the data controller for personal data processed through the Service.

You can reach us about any data-protection matter — including access, correction, deletion, portability, restriction, or objection requests — at hello@bedtime-stories.fun. We respond to verified requests within 30 days. We are below the GDPR threshold for appointing a Data Protection Officer; the business owner handles all privacy queries directly.

Information We Collect

What We Actually Need

For Your Account:

  • Your email address (for login and account updates)
  • Payment information (securely handled by Stripe, we never see your card details)

For Your Child Profiles & Stories:

  • Each child's first name or nickname (real or made-up), and an optional phonetic spelling so narration pronounces it correctly
  • Each child's gender, used to personalize pronouns and characters
  • An age range you select (3-4, 5-6, 7-8, or 9-12 years) for age-appropriate content
  • Story preferences and settings you customize (optionally saved with names and voices)

The Technical Stuff

Like any website, we automatically collect some technical information to keep things running smoothly:

  • Generated story content (text, audio, images) based on your preferences
  • Basic device info (to make sure the site works on your phone/computer)
  • Usage data (to fix bugs and improve the experience)
  • Cookies (to remember you're logged in)

How We Use Your Information

Here's exactly what we do with your information:

Story Creation

  • Create personalized stories with the character names you choose
  • Generate age-appropriate magical adventures based on your selected range
  • Save your favorite stories and access them anytime

Account Management

  • Manage your account and credits
  • Process payments securely
  • Send important account updates

AI Processing Note: Story text is generated using Anthropic Claude for creating personalized narratives. To personalize a story, the story details you enter in the creation wizard — including your child's first name, age range, and any custom instructions — are sent to Anthropic (story text) and Google (illustrations) solely to generate that story; we never send your email address, account details, or voice recordings to these providers. Story images are created through Google's Gemini image model using only story-related prompts. Text-to-speech conversion is handled by ElevenLabs for catalog voices and by Fish Audio (Hanabi AI Inc., United States) for custom voice cloning. We log AI requests through Helicone for observability and validate the inputs you provide before a story is generated. Our backend services running on Hetzner European servers coordinate these AI services and store the final content in Supabase. Every AI processor we use is named in this policy, along with the country it operates from.

Bot Protection: We use Cloudflare for DNS and Turnstile captcha protection to protect against automated abuse and ensure platform security. Turnstile processes technical information (IP address, browser signals, TLS fingerprint) to distinguish humans from bots. This data is processed by Cloudflare Inc. (US) under their privacy policy. Turnstile does not use traditional cookies and collects minimal data solely for security purposes.

Analytics & Cookies: We use PostHog (European data region) for analytics and product improvement. PostHog uses cookies and local storage to track user sessions, feature usage, and platform performance. You can manage your cookie preferences and opt out of analytics tracking at any time. PostHog data is processed under their privacy policy with GDPR-compliant safeguards. For more details, see our Cookie Policy.

Error Monitoring: We use Sentry to detect and fix technical issues. Sentry does not use cookies and we have disabled personal data collection.

Email Communications: Transactional emails (account confirmations, password resets, story-ready notifications) and the welcome series for new accounts are sent via Resend. Every marketing message includes a one-click unsubscribe link, and you can also turn marketing emails off in your account settings at any time.

Lawful Basis for Processing

Under GDPR Article 6 (and Article 9 for special-category data) we rely on the following lawful bases:

  • Performance of a contract (Art. 6(1)(b)): account creation, authentication, story generation and delivery, payment processing, customer support, and story-ready notifications.
  • Legal obligation (Art. 6(1)(c)): retention of invoice and payment records for 7 years under Dutch tax law.
  • Legitimate interests (Art. 6(1)(f)): bot protection (Cloudflare Turnstile), error monitoring (Sentry), prompt-safety logging (to detect abuse and prevent generation of illegal content), and securing our infrastructure. You have a right to object to processing carried out on this basis (see "Your Privacy Rights" below).
  • Consent (Art. 6(1)(a)): optional analytics via PostHog and marketing emails (the welcome series for new accounts). You can withdraw consent at any time using the Cookie Settings link in the footer or the unsubscribe link in any marketing email.
  • Explicit consent for biometric data (Art. 9(2)(a)): processing your voice recording to generate a custom AI voice. Consent is captured before recording and can be withdrawn at any time by deleting the voice from your dashboard.

Children's Privacy & Parental Consent

Important - Parents & Guardians Only

Our service is designed exclusively for parents and guardians. Children under 13 should not create accounts or provide personal information directly. Only parents or legal guardians should sign up and use this service on behalf of their children.

No Direct Collection from Children: We do not knowingly collect personal information directly from children under 13. All child-related information (names, gender, age ranges) is provided by parents through their adult accounts.

Parental Consent & Control: By creating an account and providing your child's information, you (as the parent/guardian) are giving consent for us to use that information to create personalized stories. You maintain complete control and can review, modify, or delete your child's data at any time.

How We Protect Children's Privacy

How we handle children's data across the regions we serve:

  • Children's data (US): We do not knowingly collect personal information directly from children; accounts belong to a parent or guardian, and only a child's first name is used for personalization
  • GDPR Article 8 (EU): Special protection for children's data
  • International Standards: Age-appropriate data protection globally

If we discover we have received personal information directly from a child without proper parental consent, we will delete it immediately.

Story Personalization

Here's the simple truth: We use the names, gender, and age ranges from your child profiles, plus the choices you make in the story wizard, to create personalized stories. That's it!

  • Only you decide what names to use for story characters
  • You choose the age range for appropriate content
  • You control everything and can delete data anytime
  • No advertising, no profiling, no selling of personal data — optional analytics only with your consent, and a one-click unsubscribe on every marketing email

Custom Voice Recording

You can optionally record your own voice to narrate bedtime stories. The voice clone is created by Fish Audio (Hanabi AI Inc.), a company based in the United States. Fish Audio's terms allow it to use the audio you submit to train its own AI models. Here is exactly how your voice data is handled:

How It Works

  • You record a short voice sample (5-15 seconds) through your browser's microphone
  • Your recording is temporarily uploaded to our secure servers for processing
  • We send the processed audio to Fish Audio, which creates a voice clone that can generate speech in your voice
  • We delete your original recording from our servers promptly after processing completes - we do not keep raw voice audio beyond what is needed to create your voice, and any remaining upload is removed during routine cleanup and when you delete the voice or your account
  • The voice clone, hosted by Fish Audio, is what we use from then on to generate story narration

Data Controller & Processor

We (Bedtime Stories) are the Data Controller for your voice data. Fish Audio is our processor: we send it your recording, it creates and hosts the voice clone, and we call it to narrate your stories. We do not hold a signed Data Processing Agreement with Fish Audio, and its terms let it use submitted content to train its models. That is why we ask for your explicit consent before you record, and why this section spells out what Fish Audio may do.

Lawful Basis & Consent

Voice data is biometric data under GDPR Article 9. We process it based on your explicit consent (GDPR Article 9(2)(a)), which you provide before recording by checking the consent box. Sending the recording to Fish Audio also takes it outside the EEA, and we rely on your explicit consent for that transfer too (Article 49(1)(a)). Fish Audio's own privacy policy states that it relies on standard data protection clauses adopted by the European Commission. You can withdraw consent at any time by deleting your voice from your dashboard or deleting your account.

Model Training

Fish Audio's terms state that content submitted to its service may be used to develop, train, or enhance the AI models behind its products. The terms draw no distinction between free and paid accounts, and Fish Audio offers no opt-out. We tell you this before you record so the choice is yours. If you would rather your voice was not used this way, do not create a custom voice. The catalog voices need no recording from you and are not affected.

Voice Data Retention & Deletion

  • Raw recordings, on our servers: Deleted promptly after processing completes (typically within seconds); if a recording fails to process, it is removed during routine cleanup and when you delete the voice or your account
  • Raw recordings, at Fish Audio: Fish Audio does not publish how long it keeps the audio we send, and we have not been able to establish it. Its terms also warn that deleted content may not be possible to remove completely from its records. We make no retention promise on its behalf.
  • Voice clone: Hosted by Fish Audio for as long as you keep the voice active in your account
  • On voice deletion: We instruct Fish Audio to delete the voice clone immediately. We cannot confirm how long their systems take to purge it.
  • On account deletion: All voice clones are automatically queued for deletion from Fish Audio as part of our account cleanup process

Your Voice Data Rights

  • Delete any custom voice at any time from your dashboard
  • You can have a maximum of 6 custom voices at a time
  • Re-recording is quick (5-15 seconds) if you ever need to create a new voice
  • Custom voice stories are currently not shareable publicly

Data Storage & Protection

Where Your Data Is Stored

Your account, child profiles, stories, and media files are stored on European servers through Supabase's European data region, which covers our database, object storage, and authentication. Custom voice cloning is the one exception. Those recordings go to Fish Audio in the United States; everything else stays in the EEA.

Security & Compliance

We implement enterprise-grade security measures including encryption, access controls, and regular security audits. For detailed technical security information, please see our comprehensive Security Policy.

Service Providers

We work with trusted partners who maintain strict data protection standards:

European Services:
  • Supabase (database, storage)
  • PostHog (analytics)
  • Hetzner (backend hosting)
Global Services:
  • Vercel (frontend hosting)
  • Anthropic Claude (story generation)
  • Google Gemini (story illustrations)
  • ElevenLabs (catalog voice generation)
  • Fish Audio (custom voice cloning, United States)
  • Google/Apple (optional login)

Where a partner processes personal data outside the EEA, the safeguard we rely on is set out in the next section.

International Data Transfers

Most of your personal data stays in the European Economic Area (Supabase Frankfurt, Hetzner Germany, PostHog EU). Some processors are based outside the EEA, primarily in the United States:

  • Fish Audio (Hanabi AI Inc., custom voice cloning) — United States. Your voice recording is the one piece of personal data that leaves the EEA for this reason, and it goes only if you create a custom voice.
  • Anthropic (story text generation) — United States
  • Google (story illustrations) — United States
  • ElevenLabs (catalog voice synthesis) — United States
  • Vercel (frontend edge hosting) — United States, with global edge caching
  • Cloudflare (DNS, DDoS, Turnstile) — United States, with global edge presence
  • Stripe (payment processing) — Stripe Payments Europe (Ireland) with onward transfers to Stripe Inc. (United States)

Where personal data leaves the EEA, we rely on one or more of the following safeguards under Chapter V of the GDPR:

  • The EU-US Data Privacy Framework for certified US recipients (Article 45 adequacy decision).
  • Standard Contractual Clauses (2021/914/EU) with supplementary technical and organisational measures (Article 46(2)(c)).
  • Your explicit consent for specific transfers where we cannot rely on the safeguards above (Article 49(1)(a)).

For custom voice cloning we rely on your explicit consent (Article 49(1)(a)), given through the consent box before you record. We have no separate agreement with Fish Audio; its own privacy policy states that it relies on standard data protection clauses adopted by the European Commission.

Ask us which safeguard applies to a specific processor and we will tell you, and send a copy of any transfer document we hold, at hello@bedtime-stories.fun.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share limited data only in these circumstances:

  • Service Providers: Trusted partners who help operate our service (hosting, payment processing, AI services) under strict data protection agreements
  • Legal Requirements: When required by law, court order, or to protect rights and safety
  • Business Transfers: In the event of a merger or acquisition, with equivalent privacy protection guarantees
  • Parental Consent: When explicitly authorized by parents and guardians

Your Privacy Rights & Data Control

You're in Complete Control

You can delete your stories or entire account anytime directly from your account settings. When you delete data, it's removed from our systems within 30 days. No need to contact us - you're in complete control!

Your Rights Under GDPR

  • Access (Art. 15): request a copy of the personal data we hold about you.
  • Rectification (Art. 16): correct inaccurate or incomplete data.
  • Erasure / "Right to be forgotten" (Art. 17): delete your account and the personal data tied to it. Available directly from your dashboard.
  • Restriction of processing (Art. 18): ask us to pause processing while we resolve a dispute about accuracy or lawful basis.
  • Data portability (Art. 20): export your stories and account data in a machine-readable format.
  • Objection (Art. 21): object to any processing we carry out on the basis of legitimate interests, including bot-protection and prompt-safety logging.
  • Withdraw consent (Art. 7(3)): turn off optional analytics, unsubscribe from marketing emails, or delete your custom voice — without affecting the lawfulness of processing carried out before you withdrew.
  • Lodge a complaint (Art. 77): if you believe we are mishandling your data, you have the right to complain to a supervisory authority. Our lead authority is the Dutch Autoriteit Persoonsgegevens.

To exercise any of these rights, email hello@bedtime-stories.fun. We may ask for proof of identity to prevent unauthorised disclosure. We respond within 30 days.

Data Retention

  • Account profile and stories: until you delete them. Account deletion removes them within 30 days, excluding encrypted backups which roll off within a further 30 days.
  • Custom voice clones: until you delete the voice or your account. We instruct Fish Audio to delete their copy immediately; they do not publish how long that takes.
  • Payment and invoice records: 7 years (Dutch tax law).
  • Analytics events: aggregated and anonymised after 2 years.
  • Prompt-safety and abuse logs: 90 days, longer if linked to an active investigation.
  • Security and audit logs: 365 days.

Policy Changes

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or service features. When we make material changes:

  • We'll notify you via email at least 30 days before changes take effect
  • We'll update the "Last updated" date at the top of this policy
  • For changes affecting story content or personalization, we'll provide clear notification
  • You can review the current version at bedtime-stories.fun/privacy

Get in Touch

Have privacy questions or concerns? I'm here to help!

Email Me

hello@bedtime-stories.fun

Related: Security Policy | Cookie Policy

This policy is effective as of the date listed above and applies to all users of Bedtime Stories.

Privacy Policy for Bedtime Stories, the leading AI-powered personalized children's story platform. Key privacy highlights: GDPR compliant and designed with child safety in mind, accounts and stories stored in the EU (Frankfurt, Germany) with custom voice cloning at a US processor, only child's first name collected for personalization (optional), no tracking of children. Parents maintain complete control over all data and can delete anytime. Payment handled securely by Stripe (we never see card details). AI processing: Anthropic Claude for stories, ElevenLabs for catalog voices, Fish Audio (US) for custom voice cloning, OpenAI for images. All AI partners maintain strict data protection standards. No selling of personal information. Analytics opt-in only (PostHog EU).