Privacy
Draft — pending legal review. This is the document that applies during the beta.
What we keep
The parent's email address, the family name as typed, book titles, the recordings, cover photos and the reader's photo if one was taken.
For the child we keep a nickname at most. No birthdate, no photo of the child, and no account in their name.
Who can see it
Only the family's members and the devices connected to it. File links are signed and short-lived.
No ads, no measurement of children, and nothing passed to advertisers.
Where
Data is stored in Europe (Frankfurt), with Supabase.
Outgoing email (sign-in links and family notices) is sent through Resend, from servers in Europe (Ireland).
The web app is hosted by Vercel, and app updates are delivered by Expo — both process data on our behalf, only as needed to run the service.
Deletion
Deleting a family deletes its recordings, images and rows.
A family that never purchased and that nobody has touched for ninety days is deleted by itself.
hello@geffen.app