Skip to content

Privacy Policy

Privacy Policy, plainly.

This Privacy Policy explains what Spoken Letter collects, how we use it, and the privacy boundary we keep around children.

Last updated: August 17, 2026

01

Who uses Spoken Letter

Spoken Letter is for adults who create, manage, approve, and download family audio stories. Children do not create accounts, use the app, send messages, or interact with AI features.

Our product is designed so children receive audio outside the app, through an adult-managed Yoto setup. We do not intentionally collect child audio, child contact information, or child account credentials.

02

Information we collect

We collect account information such as name, email address, authentication identifiers, session records, and basic settings needed to operate your account.

We collect family-space information created by Owners and Co-Owners, including invite links, sender access records, story requests, and recipient profiles. Recipient profiles are limited to first names and may include an optional birthday month and day, never a birth year, so an Owner can personalize occasion reminders. Owners create, edit, and delete these profile details.

We collect story content you provide, including prompts, text, voice recordings, uploaded audio, transcriptions, generated scripts, final narrations, reactions, and download records.

We collect purchase and billing status from Stripe. Stripe processes payment card details; Spoken Letter does not store full card numbers.

We collect product analytics, device, log, and security data, including page visits, feature events, error logs, IP-derived diagnostics, browser details, and timestamps.

03

How we use information

We use information to create accounts, manage family spaces, grant and manage sender access, generate story drafts, process audio, export MP3 files, support purchases, prevent abuse, troubleshoot the service, and respond to support requests.

We use analytics to understand whether the product works, improve reliability, measure revenue and engagement, and prepare required evidence for the Build with Gemini XPRIZE submission.

We may use account and story activity to send service messages, transactional emails, safety notices, account deletion confirmations, and important product updates.

04

AI and service providers

Spoken Letter uses trusted service providers to run the product. These include Google Firebase for authentication, database, storage, and hosting-related infrastructure; Google Gemini and related Google Cloud services for AI-assisted story, transcription, safety, and audio workflows; Stripe for payments; Vercel for web hosting, anonymous web analytics, and consented performance data through Speed Insights; ElevenLabs for optional real-time voice conversations (the story interview and voice support) and for generating ambient sound effects; Google Analytics for product analytics; Microsoft Clarity for consented usage heatmaps on our public marketing pages and selected create, purchase, setup, and welcome pages; and Meta (Facebook) and Reddit for advertising measurement on our public marketing pages. The Meta and Reddit browser pixels run only after you accept optional cookies and are not enabled on create, purchase, account, family, dashboard, settings, story-library, or administrative pages. They report only privacy-minimized public page visits and calls to action; Reddit also receives a Lead event after the server confirms a public interest-form submission. Neither Meta nor Reddit receives an email address, a person's name, a Recipient identifier, a child's name, or any story content from this measurement. Clarity and Speed Insights run only after you accept optional analytics cookies. Clarity is not enabled on account, family, dashboard, settings, story-library, administrative, or other pages that display stored family content.

When you ask Spoken Letter to help with a story, relevant prompts, text, audio, transcriptions, and context may be sent to Google Gemini or Google Cloud services to provide the requested feature. If you choose a voice conversation, your microphone audio is streamed to ElevenLabs for real-time processing rather than kept as a recording; we delete the conversation transcript after your story idea or support question is handled, with a short retention backstop for abandoned sessions, and our provider account is opted out of model training.

We do not sell personal information. We share information with providers only as needed to operate, secure, analyze, and improve Spoken Letter, or when required by law.

05

Connecting your Yoto account

If you choose to connect your Yoto account, Spoken Letter links to it only to create and update a Make Your Own card with your family's story audio and a matching icon. We request the narrowest access needed for this: permission to create and read your own Make Your Own content and to keep the connection active. We do not access your Yoto card library, your players or devices, or your family members.

To keep the connection working we store an access token and a refresh token for your Yoto account; the refresh token is encrypted at rest. We never use information obtained through the Yoto API for advertising or tracking. Spoken Letter is not affiliated with, or endorsed by, Yoto, and your use of Yoto is also governed by Yoto's own terms and privacy policy.

You can disconnect Yoto at any time from Settings. When you disconnect, or when you delete your Spoken Letter account, we ask Yoto to revoke the token and we delete the stored connection.

06

Children's privacy

The app is adult-mediated by design. Owners control family spaces, senders, story creation, downloads, and delivery. A child does not upload recordings, type replies, chat with AI, or receive an app account.

Adults should not upload a child's voice recording or enter unnecessary child details. If you believe child personal information has been provided to Spoken Letter, contact us and we will review and delete it where appropriate.

07

Retention and deletion

We keep account, family-space, purchase, story, audio, and analytics records for as long as needed to provide the service, meet legal or accounting obligations, preserve security, resolve disputes, and support the product.

You can delete your account from settings. Account deletion is intended to remove the account and cascade deletion for family spaces and stories where you are the sole Owner, subject to backups, fraud-prevention records, payment records, and legal obligations.

If you need help deleting or accessing data, email hello@spokenletter.com from the address connected to your account.

08

Security

We use authentication, access controls, private storage rules, provider security features, and operational monitoring to protect information. No online service can guarantee perfect security.

You are responsible for keeping your account email, password, sign-in provider, and invite links secure. Send invite links only to people you trust.

09

Your choices

You can choose what to record, upload, write, approve, download, or delete. You can also decline optional analytics cookies, including optional performance analytics, or tracking where the product offers that control.

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of personal information. Email hello@spokenletter.com to make a request.

10

Voice restoration

Voice restoration is an optional accessibility feature for an adult account holder who has lost their own natural speech. If you request it, we collect voice recordings you choose to share and use ElevenLabs to build a synthetic recreation of your voice from them. Only your own voice can be restored, only with your own explicit consent, and never a child's voice.

For this feature we store your source recordings, a short preview sample, and a versioned record of your consent. The restored voice exists as a voice model held with ElevenLabs. A person reviews every request before anything is created, and you approve the result before it can narrate any story.

You can revoke consent at any time from Settings. Revoking, or deleting your account, deletes the voice model at ElevenLabs and deletes your source recordings and preview sample from our storage. Stories already narrated and delivered with the restored voice are kept, like any other story your family already received, and every one of them is labeled as a synthetic recreation.

11

Changes

We may update this Privacy Policy as the product, providers, or law changes. If changes are material, we will provide notice in the product, by email, or by updating this page.

Questions

Write to Spoken Letter.

For privacy requests, account questions, or policy concerns, email us from the address connected to your account.

hello@spokenletter.com

Cookie Settings

We use cookies for analytics and advertising — details in our Privacy Policy.