1. The short version

• Hey Santa is for parents and guardians. You create the account and the child profiles; your child takes part in calls with you nearby.
• Child profiles stay on your phone; we do not save them on our servers. Only the details used in a call are kept with that call's record.
• We do not keep recordings of calls. Your child's voice is used only to understand and answer them during the call, and the AI service providers that help us do so work under zero data retention: they do not store it or use it to train their models. We keep a written record of the conversation for up to 90 days, for safety, support and to make calls better, and then delete it.
• Payments go through Apple. We never see your card details.
• We do not sell your personal information, do not share it for targeted advertising, and the app shows no ads.
• You can change or delete child profiles at any time, and delete your account in the app, which deletes the information we hold about it.

2. Information you give us

• Account information: your name, email address and password (kept in a protected form, never readable by us), and which version of the Terms and this Privacy Policy you accepted, and when.
• Child profiles: what you choose to tell Santa about each child, such as a first name or nickname, age, interests, proud moments, gift ideas, a surprise and a profile picture you pick from ours. Child profiles stay on your phone: we do not save them on our servers. When your child is on a call, their profile is used to make that call personal, and a copy of the details used is kept with that call's record for up to 90 days, then deleted.
• Messages to us: when you use the contact form, your name if you give it, your email address, the topic and your message.

3. Information collected when you use Hey Santa

• Calls: during a call, what is said is processed in real time so Santa can hear and answer. We do not keep the sound. We keep a written record of the conversation, together with the profile used and details about the call, such as when it took place, how long it lasted and how it ended, for up to 90 days. Then it is deleted automatically.
• Purchases: information about your App Store purchases from Apple, so we can confirm them and give you what you bought. Apple handles the payment; we never receive your payment card details.
• Notifications: if you allow notifications, a notification identifier for your device, so we can send you our messages, such as news of a new video.
• Device and usage information: information such as your device type, operating system and app version, your IP address, and how the app is used (for example, that a call was started, a video was played or a purchase was made). We use it to run, secure, measure and improve the Service. We do not use your device's advertising identifier, and we do not track you across other companies' apps or websites.

4. Children's privacy

Hey Santa is intended for parents and guardians, and is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA).

• Children cannot create accounts. A parent or guardian creates the account, agrees to these terms, adds the child's profile and starts each call. By doing so, the parent or guardian gives consent to the collection and use of the child's information described in this policy.
• We collect only the information reasonably needed for the calls: the profile the parent provides, and what the child says during a call. The child's voice is used only to understand and answer them, and the sound is not kept.
• Zero data retention: our AI service providers process children's information, including their voice, their words and their profile, under zero data retention terms. They use it only to produce Santa's replies during the call, do not store it after the call, and do not use it to train or improve their models.
• We use children's information only to provide and improve the calls and keep them safe. We never use it for advertising, never sell it, and never share it except with service providers who help us run the Service under confidentiality obligations, or where the law requires it.
• A parent or guardian can review, change or delete the child's profile at any time in Kids' profiles, ask us to delete the child's call records sooner than 90 days, or refuse further collection by deleting the profile or the account. To make a request, use the Support page.

If you believe a child has given us information without a parent's consent, please tell us through the Support page and we will delete it.

5. How we use information

• to create and run your account and confirm your email address;
• to provide calls with Santa and make them personal to your child;
• to confirm purchases and give you what you bought;
• to send you notifications you allowed;
• to keep the Service and its users safe, prevent abuse and protect children;
• to answer your messages and help you;
• to understand how the Service is used and improve it, including the calls;
• to comply with the law and enforce our Terms.

6. Who we share information with

We share personal information only:

• with service providers that help us run the Service, such as hosting, communications, customer support, app measurement and AI service providers, which may use it only to provide their services to us and must protect it. Our AI service providers work under zero data retention: they do not store what they process for a call or use it to train their models;
• with Apple, for App Store purchases and notifications;
• when the law requires it, or to protect the rights, safety or property of a child, our users, us or others;
• in a business transfer, such as a merger or sale of the Service, in which case this policy continues to apply to the information transferred.

We do not sell personal information and do not share it for cross-context behavioral (targeted) advertising, including information about children.

7. How long we keep information

• Account information: until you delete your account.
• Call records: up to 90 days after the call, then deleted automatically, or sooner if you delete your account or ask us to.
• Purchase records: while your account exists, and longer only where the law requires it.
• Notification identifiers: until you log out, turn notifications off in the app, or delete the app or your account.
• Child profiles: on your phone, until you delete them, log out, or delete your account or the app.
• Contact form messages: as long as needed to help you, and no longer than two years.
• Device and usage information: only as long as needed for the purposes above.

When you delete your account in the app (Settings, Delete account), we delete your account and the information connected with it, including its call records, and the app removes the child profiles from your phone. Apple keeps its own record of your purchases under Apple's privacy policy.

8. Your choices

• See and change: your account details and child profiles are in the app.
• Delete: delete a child profile in Kids' profiles, or your whole account in Settings.
• Notifications: turn them off in the app's Settings or in iOS Settings.
• Microphone: it is used only during a call; you can turn access off in iOS Settings, but calls need it.

9. Your state privacy rights

Depending on the state where you live, including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and others, you may have the right to:

• know what personal information we collect, use and disclose, and get a copy of it;
• correct inaccurate personal information;
• delete personal information;
• opt out of the sale of personal information or its sharing for targeted advertising (we do neither);
• not be treated differently for using these rights.

California residents: in the last 12 months we collected the categories described in sections 2 and 3: identifiers (such as name, email address, IP address and device identifiers), customer records, commercial information (purchases), internet or other electronic network activity (app usage), audio information (processed during calls and not kept), and personal information about children provided by their parents. We collect them for the purposes in section 5, disclose them only as described in section 6, and keep them as described in section 7. We have not sold or shared personal information, and we do not knowingly sell or share the personal information of anyone under 16.

To make a request, use the Support page and choose "Privacy and my data". We will verify your request using the email address of your account, and answer within the time the law sets (in California, 45 days). You may use an authorized agent, who must show us your written permission. If we deny your request, you may appeal by replying to our answer.

10. Security

We use reasonable administrative, technical and physical safeguards to protect personal information. No service is completely secure, so please keep your password safe and tell us if you think your account has been misused.

11. Do Not Track

We do not track you across other websites or apps, so we do not respond differently to browser Do Not Track signals.

12. Changes to this policy

We may update this policy when the Service changes. When we make an important change, the app will ask you to read the new version. The date at the top of this page shows when it last changed.

13. Contact

The HeySanta team, United States. For any privacy question or request, please use the form on our Support page.