What we store
Your email address. The age band and interests of each child, and an optional zip code. The questions and Deep Dives you make, and the scripts behind them. Which Library items you added, what you rated them, and anything you reported. Your Stripe customer and subscription ids, so we know what you are on. Which Yoto account you connected.
What we never store
A child's name. There is no field for one anywhere in the product. Transcripts of your recordings are compared to the script and thrown away; we keep the audio you approved, never a transcript of it.
Who else touches it
Anthropic writes and checks the answers, and receives the question, the age band and the interests. ElevenLabs turns an approved script into audio when you pick a generated voice. Stripe takes payment and holds the card, which we never see. Resend sends your email. Fly.io runs the service and Tigris stores the audio. No child's name reaches any of them, because we do not have one.
Your recordings
Kept under your account only, used only to make your tracks, and deleted with the item or the account. They never enter the Library; a Library copy of something you recorded uses a generated voice.
The Library
Items you share are anonymous. They carry no account details and nothing about your child. You can ask us to remove one at any time.
Yoto
Playlists publish through your own Yoto connection, which you authorise. We ask Yoto for four permissions: to see your content, to manage your content, to manage icons, and to stay connected while you are away. We use them to create and update the playlists you approve, and for nothing else. Disconnect at any time from Account.
Deleting
Delete my account, in Account, removes everything above and cancels the plan. Nothing is removed from your Yoto.