Privacy Policy

Information we collect

From you, the parent

• Account details: your name, email address, password, and phone number if you choose text delivery.
• Child profiles: details you choose to share so we can personalize stories, such as a first name or nickname, age, pets, family members and friends, interests, comfort objects, emotional needs, and topics to avoid.
• Preferences: delivery time, time zone, email or text choice, story style and length, and nights you pause.
• Billing: your plan and subscription status. Card details are collected and stored by our payment provider, Stripe, not by us. Stripe shares your billing address with us only as needed to calculate sales tax.
• Messages: anything you send us through our contact form, by email, or in our support chat.
• Free sample requests: your child's first name and age, and your email or phone number.
• An adult you invite: if you invite another grown-up (like a co-parent, grandparent or babysitter) to receive your stories, their first name and email address, the nights you choose for them, and, if they choose texts themselves, their phone number and consent.
• Gift cards: if you buy one, your name and email, the recipient's name and (if you have it emailed) their email address, your note and the send date. If you receive one, we record when and how its balance is used.

From an adult you invite

An invited adult confirms by email before anything is sent to them, and can choose texts and stop the stories at any time from their own link. We use their contact details only to deliver your family's stories and the messages about their invitation. We never add them to our news emails or use their details for marketing, and they never get access to your account.

Automatically

• Basic technical information needed to keep you logged in and the site working, such as your browser type and log records. We don't use advertising cookies; see our Cookie Policy.
• Google Analytics: to improve the web experience for our customers, and only if you accept it in our cookie notice, we use Google Analytics on our public pages (never in your account, the Story Library, story pages or the welcome steps) to understand how visitors use our site, for example the pages viewed, the device and browser, approximate location, and a simple count when someone finishes signing up (without their email or name). Google's advertising features are turned off, and no information about your children is ever sent to Google. You can change your choice anytime on our Cookie Policy page, or opt out everywhere with Google's browser add-on.
• The story links in our nightly texts and emails open that night's story without logging in, for two days, so please don't forward them. You can choose which emails you get on our email preferences page or with the unsubscribe link in any email.

How we use it

• To write, deliver and save your family's stories.
• To run your account, process payments and taxes, and send account messages (like receipts and trial reminders).
• To answer your questions and keep the Service safe and working.
• To send occasional Sova news, only if you've agreed. You can unsubscribe at any time.

We do not sell your information, share it for targeted advertising, or use your child's information for marketing.

Your child's information

Sova Stories is used by parents, not children. Children never create accounts or log in, and we only receive information about a child from their parent or guardian. If our support chat detects that a child is typing, it ends the chat and deletes the conversation. Our Children's Privacy Notice explains this in more detail.

Who we share it with

We share information only with trusted service providers who help us run Sova Stories, and only as needed for that job:

• Supabase: secure hosting for our database and accounts.
• Stripe: payments, subscriptions and sales tax.
• Our AI story provider (Anthropic): receives the child-profile details needed to write each story. It also powers our support chat assistant: when you chat, it receives your messages and, if you're logged in, a summary of your account (such as your plan, delivery settings and children's first names, but not notes about emotional needs or topics to avoid) so it can answer you. We use a provider that does not use the information we send to train its AI models.
• Email and text-message providers: deliver your stories and account messages.
• Website hosting providers: serve our website.
• Shopify and our print-on-demand makers: run the Shop. When you order, Shopify collects your name, shipping address, email and payment directly and shares the order with the maker who prints and ships it. We never receive your card details, and nothing about your children is sent to the Shop.

The adult you invite: if you invite another adult to receive your stories, they see what you'd see in a story email or text: your children's first names and the stories themselves. Please invite only adults you trust, and never a child.

Beta families: if you join our beta program, you can rate each story and leave comments. With your separate permission when you join, approved Sova Stories employees can see your children's first names and ages and the stories written for them, together with your name, your plan and your ratings and comments, so we can make the stories better. Only approved Sova employees have this access. It is never given to outside services, third-party partners, other parents or anyone else, and it ends when you leave the beta. We may also email or call you about your feedback. Ratings and comments are deleted along with the stories they're about.

We may also share information if required by law, to protect someone's safety, or as part of a sale or merger of our business (in which case this policy would continue to protect your information).

How long we keep it

We keep information only as long as we need it:

• Child profiles and stories: kept while your subscription or free trial is active. If you cancel, or your trial ends without subscribing, we automatically delete every child profile and story 90 days after your stories stop. You can delete them yourself any time before that.
• Your parent account (name, email, settings): kept so you can come back, until you ask us to delete it at privacy@sovastories.com.
• Waiting-list sign-ups and support chats: deleted after 12 months.
• Shop orders are kept by Shopify as its own policies and tax laws require.
• An invited adult's details: deleted right away when you remove them; 30 days after they stop the stories or leave an invitation unconfirmed; and otherwise together with your child profiles and stories.
• Gift cards: kept while the card has a balance (they never expire), and for as long as tax and accounting laws require after that. We use a recipient's email address only to deliver the gift card, never for marketing.
• Contact messages and delivery, email and text logs: deleted after 2 years.
• Billing records are kept by our payment provider for as long as tax and accounting laws require.

Your choices and rights

• Edit or delete child information: any time, from your child profiles.
• Update your details: from your account.
• Stop emails or texts: use the unsubscribe link in any email, or reply STOP to any text.
• Delete your whole account: email privacy@sovastories.com from the email address on your account. We'll confirm and delete your account and personal information, except records we must keep by law.
• Access or correct your information: email privacy@sovastories.com.

Depending on where you live, you may have additional privacy rights. We'll honor requests as required by applicable law.

Security

We protect your information with encryption in transit, access controls that let each parent see only their own family's information, and trusted providers. No system is perfectly secure, but we work hard to keep your family's information safe.

Changes to this policy

If we make important changes, we'll tell you by email or on the site before they take effect.