⚠️ DRAFT — Pending legal review. Not yet in effect. Do not rely on this document.
Little Moments Club (“we,” “us,” “our”) operates the website at littlemomentsclub.com and provides personalized AI-generated bedtime stories delivered by email to subscribing families. [BUSINESS LEGAL NAME AND MAILING ADDRESS TO BE INSERTED]
For questions about this policy or your personal information, contact us at support@littlemomentsclub.com.
Account information: Your name, email address, and password (stored as a one-way hash) when you create an account.
Children’s profile information: For each child in your account, we collect: their first name, age or date of birth, interests and hobbies, favourite characters, animals, colours, and foods, stuffed animals or toys, pronouns, and family context you choose to provide (names of parents, siblings, and pets). This information is used exclusively to personalize each night’s bedtime story.
Family context: Information about parents, siblings, and pets that you voluntarily enter to enrich your children’s stories.
Lead and marketing data: If you use the free story feature (/try), we collect your email address and the child details you provide in order to generate and deliver a sample story, and to send follow-up emails about our service.
Payment information: We do not store your credit card number. Payment is processed by Stripe; we receive only a subscription status and Stripe customer/subscription identifier.
Email engagement data: We receive delivery and bounce signals from our email provider (Resend) to manage deliverability.
Technical data: IP addresses (used only for rate-limiting the free story feature), browser type, and standard server logs retained for a short period for security and debugging purposes.
Story generation: Children’s profile information is sent to OpenAI’s API to generate personalized bedtime stories. We do not permit OpenAI to use your data to train its models; see Section 5 for details.
Email delivery: We email generated stories to the parent account’s email address each evening. We also send account and billing notifications, and (for leads) a nurture email sequence about our service.
Billing: We use Stripe to process payments, manage subscriptions, and handle refunds.
Service improvement: Aggregated, non-identifying feedback (story ratings) may inform changes to our story generation system.
Legal and safety: We may process data to comply with applicable law or to detect and prevent fraud or abuse.
Our service is designed for parents and caregivers, who are the account holders. Children do not create accounts or interact with the service directly. Children’s personal information — names, ages, interests, and family context — is provided by parents and used solely to personalize bedtime stories for that child within the parent’s account.
We do not share children’s personal information for advertising purposes, sell it to third parties, or use it for any purpose other than generating and delivering the stories you have requested.
[PLACEHOLDER: COPPA / PIPEDA children’s data provisions to be reviewed by legal counsel. Insert applicable age threshold, parental consent mechanism, and deletion rights here.]
OpenAI: We send children’s profile information (name, age, interests, family context) to OpenAI’s API to generate story content. OpenAI processes this data under its API data usage policy, which prohibits training on API inputs by default. See openai.com/policies/api-data-usage-policies.
Stripe: We use Stripe for payment processing. Your payment data is collected and stored by Stripe under Stripe’s privacy policy. See stripe.com/privacy.
Resend: We use Resend to deliver email. Resend processes email addresses and email content on our behalf. See resend.com/legal/privacy-policy.
Neon / Replit: Our database and hosting infrastructure. Your data is stored in PostgreSQL hosted via Neon on servers in [REGION TO BE CONFIRMED].
Active accounts: We retain your account and all associated data (child profiles, stories, feedback) for as long as your account is active.
Cancelled accounts: [PLACEHOLDER: retention period after cancellation to be confirmed by legal counsel, e.g., 90 days or 1 year].
Stories: Generated stories are retained in your story library for your access. Upon account deletion, stories are deleted.
Lead data: Email addresses and child details collected via the free story feature are retained for [PLACEHOLDER: period] following the last interaction, then deleted.
Depending on where you live, you may have rights including: access to your personal data, correction of inaccurate data, deletion of your data, portability of your data, and the right to withdraw consent.
To exercise any of these rights, email support@littlemomentsclub.com with the subject line “Data Request.” We will respond within [PLACEHOLDER: 30] days.
Account deletion: You may request deletion of your account and all associated data at any time by emailing support. We will complete deletion within [PLACEHOLDER: 30 business days] and confirm by email.
[PLACEHOLDER: Specific GDPR / PIPEDA / CCPA rights language to be reviewed by legal counsel.]
When you provide your email address — either at signup or via the free story feature — you consent to receive emails from Little Moments Club, including personalized bedtime stories, account notifications, and (for leads) information about our service.
Every marketing and nurture email contains an unsubscribe link. Clicking it will remove you from our email list within one business day. You may also unsubscribe by emailing support@littlemomentsclub.com.
Subscribers who cancel their subscription will no longer receive nightly stories but may continue to receive important account or billing notifications.
Passwords are stored as bcrypt hashes and never in plaintext. Sessions use signed, short-lived JWT cookies. Stripe webhook events are verified using Stripe’s signed-payload mechanism. We use HTTPS for all data in transit.
No system is perfectly secure. In the event of a breach that affects your personal data, we will notify affected users as required by applicable law.
We may update this policy from time to time. If we make material changes, we will notify you by email or by posting a notice on the site. Continued use of the service after notice constitutes acceptance of the updated policy.
Little Moments Club
[MAILING ADDRESS]
support@littlemomentsclub.com