Privacy Policy

Last updated: August 8, 2026

Children's Privacy (COPPA Compliance)

Sleepy Adventures is designed for use by parents and caregivers with children ages 1-8. We take children's privacy seriously and comply with the Children's Online Privacy Protection Act (COPPA).

  • Children do not create accounts. Only parents create and manage child profiles. Child profiles contain a first name, age, and story preferences -- no email, phone, or other identifying information.
  • No ads or tracking. We do not serve advertisements, use tracking pixels, or employ any third-party analytics that tracks individual users.
  • Your data is secure. Your data is securely stored in our database, protected by row-level security. We use encryption in transit and at rest. You can delete your account and all associated data at any time.
  • AI story generation.When you create a story, your child's first name and age are sent to our AI provider (OpenAI) to personalize the story. This data is used solely for story generation and is not stored by OpenAI per their data usage policy. No other personal information is transmitted.
  • One-click data deletion. You can delete all child profiles and stories at any time from the Profiles page. This permanently removes all data from your device.

What Data We Collect

  • Story generation requests:Child's first name, age, selected theme, and optional custom prompt are sent to our server-side API, which forwards them to OpenAI for story generation. These are not logged or stored.
  • Drawing uploads: If you use the drawing-to-story feature, the uploaded image is sent to OpenAI for analysis. It is not stored on our servers.
  • No cookies or fingerprinting. We do not use cookies, browser fingerprinting, or any cross-site tracking technologies.

Third-Party Services

We use the following third-party services for story generation:

  • OpenAI-- for generating story text and illustrations. Data sent: child's first name, age, story theme, and optional drawing. OpenAI's API data usage policy states that API data is not used for training.
  • Vercel-- for hosting. Standard server logs (IP addresses, request timestamps) are retained per Vercel's privacy policy.

Parental Consent

By creating a child profile and generating stories, you (the parent or guardian) consent to the transmission of your child's first name and age to our AI provider for the sole purpose of creating personalized bedtime stories.

Your Rights

  • You can view, edit, or delete all child profiles and stories at any time.
  • You can stop using the service and delete your account at any time. All associated data will be permanently removed.
  • For questions or data deletion requests, contact us at privacy@sleepyadventures.com.

Changes to This Policy

We may update this privacy policy from time to time. Changes will be posted on this page with an updated date.