1. Introduction
Silly Goose Tales ("we," "us," or "our") takes your privacy seriously — especially since our service involves information about your children. This Privacy Policy explains what we collect, why we collect it, and how we use and protect it.
By using Silly Goose Tales, you consent to the practices described in this policy. If you do not agree, please do not use the Service.
2. Information We Collect
INFORMATION YOU PROVIDE DIRECTLY:
- Your email address (used to deliver stories)
- Your child's first name and age (used to personalize stories)
- Mood selections after each story (used to shape future stories)
- Payment information (processed securely by Stripe — we never store full card details)
- Any messages you send us via support
INFORMATION COLLECTED AUTOMATICALLY:
- Device and browser type when you visit our website
- Pages visited and actions taken on our site
- IP address and access times
- Email engagement data (open rates, link clicks) via our email provider
WHAT WE DO NOT COLLECT:
- Your child's last name
- Photos or images of your child
- Location data
- Any data directly from children — all information flows through the parent/guardian account
3. How We Use Your Information
SERVICE DELIVERY:
- Generate personalized bedtime stories using your child's name, age, and mood data
- Deliver stories to your email inbox nightly
- Manage your subscription and process payments
- Adapt future stories based on mood feedback
COMMUNICATION:
- Send your nightly story
- Send account, billing, and service notifications
- Respond to your support requests
- Occasional product updates (you can unsubscribe anytime)
SERVICE IMPROVEMENT:
- Understand how the service is used to improve it
- Identify and fix bugs
- Improve our AI story generation quality
4. AI Processing and Third-Party Services
To generate personalized stories, we send a prompt to Anthropic (Claude AI) that includes your child's first name, age range, and current mood. We do not send full names, addresses, or other identifying information to AI providers.
Our third-party service providers and their roles:
- Anthropic: Story generation — processes first name, age range, and mood
- Supabase: Database and authentication — stores your account and subscription data
- Stripe: Payment processing — handles all billing securely
- Resend: Email delivery — sends your nightly stories
- Vercel: Web hosting
Each provider is subject to their own privacy policy and security standards. We select providers with strong privacy practices, but we cannot guarantee how they handle data beyond our API agreements.
5. Children's Privacy
Silly Goose Tales generates stories for children but is operated by adult subscribers (parents and guardians). We do not knowingly collect personal information directly from children under 13. All account creation, data submission, and subscription management is handled by the adult account holder.
The only child-related information we use is a first name, age range, and mood selection — the minimum necessary to personalize a story. We do not store detailed profiles about children and do not share child information with third parties for advertising or analytics purposes.
If you believe a child under 13 has created an account independently, contact us at hello@sillygoose.tales and we will promptly delete the account.
6. How We Share Your Information
We do not sell your personal information. We share data only in these circumstances:
- Service providers: As described in Section 4, to operate the service
- Legal requirements: To comply with applicable law or respond to lawful requests
- Business transfers: In connection with a merger or acquisition; you will be notified
- Aggregated/anonymized data: Non-identifiable usage patterns may be used for service improvement
7. Data Retention
- Account data: Retained while your account is active; deleted within 90 days of account deletion request
- Story history: We retain recent stories to power the mood-adaptive system; older stories may be purged periodically
- Payment records: Retained as required for tax and legal compliance (typically 7 years)
- Usage logs: Retained up to 2 years for analytics and security
8. Data Security
- All data is encrypted in transit (HTTPS/TLS)
- Passwords are hashed — we never store them in plain text
- Payment data is handled entirely by Stripe and never stored on our servers
- Access to personal data is limited to those who need it to operate the service
No system is 100% secure. In the event of a data breach affecting your personal information, we will notify you and relevant authorities as required by applicable law.
9. Your Rights and Choices
You have the right to:
- Access: Request a copy of the personal information we hold about you
- Correction: Update inaccurate or incomplete information
- Deletion: Request deletion of your account and personal data
- Opt-out: Unsubscribe from marketing emails at any time via the unsubscribe link in any email
- Cancellation: Cancel your subscription at any time
To exercise any of these rights, contact us at hello@sillygoose.tales. We will respond within 30 days.
10. Cookies
We use minimal cookies to operate the service:
- Essential cookies: Session management and authentication — required for the site to function
- Preference cookies: Remember your settings
We do not use third-party advertising cookies or sell data to advertisers.
11. California Privacy Rights
California residents have additional rights under the CCPA/CPRA, including the right to know, delete, and opt-out of the sale or sharing of personal information. We do not sell personal information. To exercise your California privacy rights, contact us at hello@sillygoose.tales.
12. International Users
Your information may be processed in the United States, where our servers are located. If you are in the EU or UK, we conduct international data transfers using Standard Contractual Clauses. EU/UK users have rights under GDPR including access, rectification, erasure, and the right to lodge a complaint with your local data protection authority.
13. Changes to This Policy
We may update this policy from time to time. For material changes, we will notify you via email. Your continued use after the effective date constitutes acceptance. We encourage you to review this policy periodically.
14. Contact Us
Questions, concerns, or requests regarding this Privacy Policy:
Email: hello@sillygoose.tales
We aim to respond to privacy inquiries within 30 days.