Privacy Policy

Who we are

Hollie's Bedtime Stories is the data controller for this service. Accounts are for adults, and a parent or legal guardian provides the limited child profile information used to personalise stories. Contact us at hollie@holliesbedtimestories.com.

Information we collect

We collect parent account and contact details, subscription status, child first name, age, birthday, favourite animal, favourite colour, interests, personality, delivery preferences, timezone, optional supportive story focus, story requests, generated stories and illustrations, and service events such as delivery, opening and favourites.

We do not need a child's surname, home address, school, photograph or health records. Please do not enter unnecessary identifying, medical or other sensitive information in profile notes or story requests.

How and why we use information

We use parent account, subscription and profile information to provide the service and manage payments under our contract with the account holder. We use limited service events to secure, troubleshoot and improve the service where this is necessary for our legitimate interests, while giving particular weight to children's privacy and best interests. We process billing and transaction records where required by law. Where consent is legally required, such as for optional marketing or non-essential cookies, we will ask separately.

We do not sell personal information, show behavioural advertising, or make decisions with legal or similarly significant effects about children.

Service providers

We use carefully selected providers to operate the service, including Supabase for accounts, database and storage; Stripe for payments; Resend for transactional email; Vercel for website hosting; and Google Gemini and Imagen for AI story and illustration generation. Providers receive only the information needed for their role and process it under their own security and data protection commitments.

Advertising measurement and cookies

If an adult visitor allows optional marketing cookies, we use the Meta Pixel and Meta Conversions API to measure whether Facebook and Instagram advertising leads to website visits, trial starts and paid subscriptions. This may include page and checkout activity, browser identifiers, IP address, user agent and hashed account identifiers. We do not send child profile details, story requests or generated stories to Meta. Visitors can decline this tracking or change their choice using Cookie choices in the website footer. More detail is available in our Cookie Policy.

International transfers

Some providers may process information outside the UK. Where required, we rely on UK adequacy regulations or approved contractual safeguards designed to protect personal information during those transfers.

US parents and children's privacy

The service is offered to parents and legal guardians; children must not create accounts or submit their own information. The adult account holder provides the child profile and confirms their authority and consent before it is created. For US families, we handle child profile information with protections designed to give parents control consistent with the Children's Online Privacy Protection Act (COPPA).

We use the child details listed above only to personalise, generate, store and deliver the requested stories, maintain recent-story history and support the account. We disclose the minimum necessary details to the operational providers identified above; we do not sell child information or use it for targeted advertising.

A parent or legal guardian may ask to review, correct or delete a child's information, or withdraw their permission for us to keep using it, by emailing hollie@holliesbedtimestories.com. We may verify the requester's account and authority. Withdrawing permission or deleting required profile data may mean we can no longer provide personalised stories for that child.

How long we keep information

Account, child profile and story information is normally kept while the account is active so the service can operate and avoid repeating recent stories. When an account is deleted, we delete or anonymise this information when it is no longer needed, subject to normal backup cycles and legal obligations. Billing, tax and dispute records may be retained for up to six years where required. We periodically review whether information is still necessary.

Your rights

Depending on the circumstances, you may ask for access to, correction of, deletion of, restriction of, or portability of personal information, or object to processing based on legitimate interests. You may also withdraw consent where processing relies on consent. Contact hollie@holliesbedtimestories.com to make a request. We may need to verify your identity and authority over the relevant child profile.

US visitors can also contact us about privacy choices at hollie@holliesbedtimestories.com. We do not sell child personal information, and we do not use child profile details for targeted advertising.

You can also complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint. We would appreciate the opportunity to address your concern first.

Security and changes

We use access controls, authenticated accounts, restricted administrative access and reputable service providers to protect information. No online service can guarantee absolute security. We may update this policy as the service or law changes and will update the date above when we do.