Privacy Policy for Sleepy Notes

1. Who We Are

Sleepy Notes is operated by Little Keeps. In this Privacy Policy, "Sleepy Notes," "we," "us," and "our" refer to Little Keeps and the Sleepy Notes app.

You can contact us at hello@littlekeeps.in.

2. Who the App Is For

Sleepy Notes is designed for use by parents and legal guardians. Children do not create accounts in the app and should not provide information directly to us. Child-related details are entered by the parent or legal guardian to personalise audio content and recommendations.

Users must be 18 or older and must be the parent or legal guardian of any child profile they create.

3. Information We Collect

Account and authentication data

We collect information needed to create and manage your account, such as your email address, authentication provider details, user ID, session information, and account creation date.

Child profile data entered by you — stored on your device, not on our servers

You may enter child profile details such as display name, pronunciation name, pronouns or gender selection, listening stage, and favourite theme. We use this information only to personalise the app experience and audio content.

These details are stored on your phone, not on our servers. For each child profile our servers hold an anonymous identifier, the date you confirmed you are the child's parent or guardian, and settings that carry no information about the child: whether name personalisation is switched on, and which narrator voice you have chosen for them. There is no name, no pronunciation spelling, no pronoun, no age range and no theme. If our servers were ever compromised, there would be no child names or ages in them to expose.

One necessary exception, and we would rather state it plainly than imply more than is true: when you generate a story, the finished story text — which contains your child's name if you have personalisation switched on — is sent to our speech provider so it can be spoken aloud. So the name is never stored on our servers, but it is processed by our speech provider at the moment a story is made. See section 7.

Because these details live on your device, they are removed if you delete the app, and they are not automatically carried to a new phone. The app can export a backup file you keep yourself, which restores your child profiles, stories and audio onto a new device.

Your Support ID

Settings, under Help & support, has a Copy support ID button that puts a short Support ID on your clipboard, so you can paste it to us when you ask for help. (The app deliberately does not display the value on screen — there is nothing you need to read or type.) It is a one-way scrambled form of your account identifier — it cannot be turned back into your email address, and it is the same identifier our analytics are recorded against. It exists because if you sign in with Apple and hide your email address, it is the only way we can find your account to help you.

Voice recordings and voice profile data

If you choose to record your own voice, your recording passes through our own service — which checks it and forwards it, keeping no copy — to our voice technology partner, Cartesia, to create a reusable voice profile. We do not store your raw voice recording — not on our servers, and not permanently on your device. It exists on your device only while it is being uploaded to Cartesia, and is deleted from your device once your voice profile has been created. On our side, all that is kept afterwards is a reference to the profile, not the recording. Cartesia is different: they retain the recording, or a voice model built from it, for as long as your profile exists — that is what lets future stories be narrated in your voice without you re-recording. Section 7 explains this and what we have done about it. We separately store voice profile metadata such as your chosen parent label (e.g. "Mum"), your consent record and its version, and related technical information needed to manage the profile. You must only record your own voice unless you have explicit written consent from the speaker.

Generated audio and user content

Generated story audio is created for you and saved only on your own device, included in your device's own backup — we do not store your generated audio files on our servers. (If you choose background music, the narration is sent to our audio mixing service to be combined with the music track and returned; nothing is kept there.) Custom stories, custom messages, favourites, playback preferences, and short name-pronunciation previews you create are also stored only on your device, and are likewise included in your device's own backup, not on our servers. We do process the story template and any custom text you provide at the moment audio is generated, in order to produce that narration, but we do not retain that text afterwards.

Generation records

Each time audio generation is attempted, we keep a short record on our servers so we can bill credits correctly, enforce limits, and investigate failures. It contains your account identifier, the story template identifier, the internal identifiers of the child profile and voice used, whether the attempt succeeded or failed and why, the number of characters narrated, and the time. It does not contain your child's name, the story text, or the audio itself. These records are deleted automatically when you delete your account.

Purchases

Sleepy Notes offers one-time in-app purchases — story credit packs — rather than a recurring subscription. The first pack you buy also unlocks premium features permanently; there is no separate unlock to purchase. When you make a purchase, we process purchase and transaction identifiers, your entitlement status (whether premium features are unlocked), and your story credit balance, through Apple and RevenueCat. We do not receive your full payment card details; payment is handled entirely by Apple.

Analytics, diagnostics, and support

We may collect app interaction data, feature usage, crash reports, performance data, device/app version details, support emails, and attachments you choose to send. We may also collect a simple thumbs up/down rating if you choose to leave feedback. We do not use this data for advertising profiles.

IP address and approximate region

Like any app that connects to the internet, Sleepy Notes reaches our providers over a network connection, and those providers see the IP address your device connects from. This is unavoidable — it is how a request reaches a server and how the answer gets back — and it is used to deliver the service, keep it secure, and prevent abuse.

We do not build a location profile from it. Our analytics provider has IP-based location lookup switched off, so events carry no country, region or city. We do not collect GPS or any precise location, and we never ask you which country you are in. Where your purchase happens, and in what currency, is determined by Apple from your App Store account — not by us.

We do not use IP address, inferred region, or anything else in this policy for advertising, ad targeting, or behavioural profiling — of you or of your child.

4. Information We Do Not Intentionally Collect

Sleepy Notes is built around data minimisation. We do not intentionally ask for or collect a child's date of birth, photos, precise location, school name, class, medical information, developmental information, or advertising identifiers linked to a child.

5. How We Use Information

• To create and secure your account.
• To save child profiles entered by a parent or legal guardian.
• To personalise notes, stories, recommendations, and generated audio.
• To create and manage voice profiles after explicit consent.
• To generate and play audio in the app.
• To process purchases and enforce entitlements, usage limits, and safety controls.
• To provide support and respond to privacy or deletion requests.
• To monitor reliability, prevent abuse, and improve the app.

6. Third-Party Service Providers

We use trusted service providers to operate Sleepy Notes. These providers process data only as needed to provide their services to us.

• Supabase for authentication, database, storage, and serverless functions.
• Cartesia for text-to-speech and custom voice processing.
• Google Cloud Run for backend audio processing and mixing services.
• PostHog for privacy-conscious product analytics and error diagnostics.
• Apple and RevenueCat for purchases and entitlements.
• Expo/EAS for app build and update infrastructure where applicable.
• Cloudflare for hosting this policy and our support pages.
• Google as a sign-in provider, if you choose to sign in with Google. This is separate from Google Cloud Run above.

7. Voice Data and Consent

Before creating a custom voice profile, Sleepy Notes shows an in-app consent notice. You must confirm that you are recording your own voice and that you have the legal right to do so. Misuse of the voice feature, including impersonation or recording someone else's voice without permission, is not allowed.

Your raw voice recording is not stored on our servers, and not in any cloud storage bucket of ours, private or otherwise. It is held only briefly on your device while it is uploaded to Cartesia to create your voice profile, is deleted from your device once that profile exists, and is not retained by us afterwards — nothing in the app keeps or re-reads a copy. On our side, all that remains is a reference to the voice profile.

Cartesia is different, and we want to be plain about it rather than let "we don't keep it" imply nobody does. Cartesia's own documentation states that voice cloning "require[s] retaining uploaded audio samples or derived voice artifacts to function". So your recording, or a voice model built from it, is held by Cartesia for as long as your voice profile exists. That is what makes future stories playable in your voice without you re-recording. Voices we create are marked private to our organisation.

Your voice profile reference is deleted, and Cartesia is asked to delete the underlying voice, when you delete the voice profile or your account.

Cartesia and AI model training

We want to be direct about this, because it concerns your voice and your child's name. Cartesia's standard terms allow them to use content sent to their service — including voice recordings, the text we send to generate a story, and the audio they produce — to train and improve their own AI models. Those terms also grant Cartesia a broad, long-lasting licence over that content. Cartesia's handling and retention of what it receives is governed by their own Terms of Service and Privacy Policy, which you agree to by proceeding.

We have switched model training off for our Cartesia organisation. Cartesia describes that setting as covering text-to-speech generations — the story text we send and the audio produced from it — and speech-to-text transcriptions.

We would rather tell you where that setting stops than let you assume more from it than it gives. Cartesia excludes voice cloning from it, and from their no-retention option, on the stated grounds that cloning needs the uploaded sample or a model derived from it in order to work at all. Their policy also says an opt-out does not apply to content sent before it took effect, and the broad licence in their terms remains in place as a contractual matter regardless of the setting.

In short: the story text and the generated audio are covered; the recording you make to create your voice is not. If you are not comfortable with that, please do not record your voice — Sleepy Notes works with preset voices, which involve no recording of you at all.

7a. How AI Is Used, in Plain Terms

Sleepy Notes uses AI to turn written stories into spoken audio. It does not use AI to write stories, and nothing is generated while your child is listening.

• Our preset narrators are AI voices. They have names and described personalities so you can tell them apart, but they are not recordings of real people and no person is being impersonated.
• Stories in your own voice are AI-generated speech. They are built from the sample you recorded and are designed to sound like you. They are not recordings of you reading those stories — you never read them.
• Story text is fixed. Every story ships with the app, written and reviewed before release. No AI writes or alters a story at the moment your child hears it, and nothing your child does changes what a story says.

We say this because a voice that sounds like a parent is exactly the kind of thing people should not have to guess about.

8. Children's Data

Children do not use Sleepy Notes — parents do. A child has no account, never signs in, and never types, taps, records or submits anything. There is no child mode, no child login, and no screen a child is meant to operate. A child listens; that is the whole of their involvement.

Everything we hold about a child was typed in by their parent or guardian: a first name, optionally how to pronounce it, a pronoun, an age range, and a favourite theme. That is the complete list. We do not collect a child's date of birth, photograph, location, school, contact details, or voice.

All of it is kept on the parent's own device. Our servers store an anonymous identifier for each child profile, the date the parent confirmed they are the child's parent or guardian, and the narrator-voice and personalisation settings chosen for that profile — nothing that describes or identifies a child. The only time a child's name leaves the device is inside the story text sent to our speech provider when you generate a story, so that it can be spoken in your voice.

We do not track children, monitor a child's behaviour, build a profile of a child, or direct any advertising at anyone. There is no advertising in Sleepy Notes at all. Analytics are recorded against the parent's account, never against an individual child.

Child-related data is used to personalise audio content and story recommendations. Parents and guardians can update or delete child profiles in the app at any time.

If you believe a child has provided information to us directly, contact us at hello@littlekeeps.in so we can review and delete it where appropriate.

9. Data Retention and Deletion

• Account data is kept until you delete your account or request deletion.
• Child profile details (name, pronunciation, pronoun, age range, theme) are stored on your device and are kept until you delete the child profile, delete your account, or remove the app. The anonymous profile identifier, guardian-confirmation date and profile settings on our servers are deleted when you delete the child profile or your account.
• Your raw voice recording is not retained by us at any point, and is deleted from your device once your voice profile is created. Cartesia does retain it, or a voice model built from it, for as long as the profile exists — see Section 7. Your voice profile and the reference we hold to it are both deleted when you delete the voice profile or your account.
• Generated audio, custom stories, and custom messages are stored on your device and are kept until you delete them, delete the related child profile, or delete your account — we do not hold copies of this content on our servers.
• Support emails are kept as part of our support records for as long as you have an account with us — this is what lets us recognise a problem you have reported before — and for a reasonable period afterwards, while a related billing, refund or legal question could still be raised. We do not use them for marketing, and you can ask us to delete them at any time.
• Analytics and diagnostics carry no child names, story text, voice identifiers, audio, or email addresses — they are recorded against a scrambled account identifier. We request deletion of your analytics record when you delete your account. Otherwise we keep this data only for as long as it remains useful for understanding how the app is used and fixing faults.
• Records of story generation, described in full under "Generation records" in Section 3, are used to bill credits correctly, enforce limits, detect abuse and investigate failures. They are kept for up to 12 months, and are deleted sooner if you delete your account.

Voice data: retention schedule and destruction

Because a voice profile is more sensitive than the rest, this is stated separately and precisely:

• The recording itself is never retained by us. It passes through our systems to reach Cartesia and is not written to any database or storage bucket. The copy on your device is deleted as soon as the voice profile has been created.
• The voice profile is retained for as long as you keep it, and for no longer. It has no separate expiry date, because it exists only to do the one thing you created it for.
• It is destroyed when you delete the voice profile, or when you delete your account — whichever happens first. Both are available in the app at any time and neither requires contacting us. Destruction means the profile reference is removed from our database and Cartesia is instructed to delete the voice and any model derived from your recording.
• If Cartesia cannot be reached at that moment, the deletion is queued and retried automatically. It is never silently dropped: if the automatic retries do not succeed, the request is kept and flagged for our team to complete by hand. Your account deletion is not delayed while we wait.

Account deletion is available in the app settings. When you delete your account, Sleepy Notes deletes account data, child profiles, voice profile references, and related database records, and any remaining generated audio, custom stories, and custom messages on your device, subject to technical completion and any legal obligations that require limited retention.

We also ask Cartesia to delete each of your voices. If Cartesia cannot be reached at that moment, the deletion is queued and retried rather than dropped, and your account is still deleted immediately — a provider being down does not delay your right to have your data erased. We separately request deletion of the customer record held for you by our analytics provider and by our payments provider; as with Cartesia, your account deletion completes immediately and is never held up by one of these providers being unavailable. Analytics events already recorded are not tied to your name or email and are not deleted; they are retained as described above.

10. Your Choices and Rights

These rights apply to everyone, wherever you live. Rather than giving different people different rights depending on their country, we apply the same set to every user. You may ask us to:

• tell you what data we hold about you and your child, and get a copy of it;
• correct anything that is wrong;
• delete your data, your child's profile, your voice profile, or your account;
• withdraw a consent you previously gave, including voice consent;
• explain how and why your data is processed, and who it is shared with.

Most of these you can do yourself, immediately, in the app — deleting a voice profile, a child profile, generated audio, or your whole account are all in Settings and none of them requires asking us.

To make a request that the app cannot do for you, contact hello@littlekeeps.in. We respond within 30 days. We may need to verify your identity first, and we will normally do that by asking you to write from the email address on the account.

If you are in India, these rights are also yours under the Digital Personal Data Protection Act, 2023. If another data protection law applies to you, the same rights above apply, and you may also have a right to complain to your local data protection authority.

We do not sell your personal information, and we never have. We do not share it for advertising or for any cross-context behavioural advertising, and we do not use it to profile you or your child.

11. Security

We use technical and organisational safeguards designed to protect your data, including authenticated access, private storage, server-side processing for sensitive operations, and access controls. Traffic between the app and our services is encrypted in transit using TLS. Keys for our voice and payment providers are held server-side and never shipped inside the app.

Our database, authentication, and file storage run on Supabase, which is hosted on Amazon Web Services. Supabase states that all customer data is encrypted at rest with AES-256 and in transit via TLS, and that it is SOC 2 Type 2 compliant. Those are their commitments about their platform rather than ours about our own code, which is why we attribute them.

No online service can guarantee absolute security, but we work to protect the data you trust us with.

12. International Processing

Sleepy Notes is operated from India, and our service providers process data in several countries — which will not be the country you live in. Rather than say that vaguely, here is where each part actually sits:

• Database, sign-in and file storage — Supabase, running on Amazon Web Services in Tokyo, Japan.
• Voice profile creation and narration — Cartesia, in the United States.
• Background music mixing — Google Cloud Run, in Mumbai, India.
• Analytics and error reporting — PostHog, in the European Union.
• Purchases and entitlements — Apple and RevenueCat, in the United States.
• These legal pages — Cloudflare, served from its global network.

Where a transfer of personal data between countries requires a specific legal safeguard, we put appropriate contractual and technical safeguards in place with the provider concerned, including data processing agreements.

Our analytics are configured to reduce what leaves the app: location lookup from IP address is switched off, and session recording is disabled. We do not send child names, story text, voice identifiers, audio, or email addresses to our analytics provider.

13. Changes to This Policy

We may update this Privacy Policy as Sleepy Notes changes or as legal requirements evolve. If changes are material, we will take reasonable steps to notify users, such as updating the app or this page.

14. Contact

For privacy questions, deletion requests, or support, contact Little Keeps at hello@littlekeeps.in.

Person responsible for data protection. Little Keeps has designated a Data Protection Officer, responsible for ensuring compliance with applicable data protection law. You can reach them at the same address: hello@littlekeeps.in. Please put "Privacy" in the subject line so it is routed correctly.