Privacy Policy, plainly.

Spoken Letter is for adults who create, manage, approve, and download family audio stories. Children do not create accounts, use the app, send messages, or interact with AI features.

Our product is designed so children receive audio outside the app, through an adult-managed Yoto setup. We do not intentionally collect child audio, child contact information, or child account credentials.

We collect account information such as name, email address, authentication identifiers, session records, and basic settings needed to operate your account.

We collect family-space information created by Owners and Co-Owners, including invite links, sender access records, story requests, and recipient profiles. Recipient profiles are limited to first names so adults can identify who a story is for.

We collect story content you provide, including prompts, text, voice recordings, uploaded audio, transcriptions, generated scripts, final narrations, reactions, and download records.

We collect purchase and billing status from Stripe. Stripe processes payment card details; Spoken Letter does not store full card numbers.

We collect product analytics, device, log, and security data, including page visits, feature events, error logs, IP-derived diagnostics, browser details, and timestamps.

We use information to create accounts, manage family spaces, grant and manage sender access, generate story drafts, process audio, export MP3 files, support purchases, prevent abuse, troubleshoot the service, and respond to support requests.

We use analytics to understand whether the product works, improve reliability, measure revenue and engagement, and prepare required evidence for the Build with Gemini XPRIZE submission.

We may use account and story activity to send service messages, transactional emails, safety notices, account deletion confirmations, and important product updates.

Spoken Letter uses trusted service providers to run the product. These include Google Firebase for authentication, database, storage, and hosting-related infrastructure; Google Gemini and related Google Cloud services for AI-assisted story, transcription, safety, and audio workflows; Stripe for payments; Vercel for web hosting; and Google Analytics for product analytics.

When you ask Spoken Letter to help with a story, relevant prompts, text, audio, transcriptions, and context may be sent to Google Gemini or Google Cloud services to provide the requested feature.

We do not sell personal information. We share information with providers only as needed to operate, secure, analyze, and improve Spoken Letter, or when required by law.

If you choose to connect your Yoto account, Spoken Letter links to it only to create and update a Make Your Own card with your family's story audio and a matching icon. We request the narrowest access needed for this: permission to create and read your own Make Your Own content and to keep the connection active. We do not access your Yoto card library, your players or devices, or your family members.

To keep the connection working we store an access token and a refresh token for your Yoto account; the refresh token is encrypted at rest. We never use information obtained through the Yoto API for advertising or tracking. Spoken Letter is not affiliated with, or endorsed by, Yoto, and your use of Yoto is also governed by Yoto's own terms and privacy policy.

You can disconnect Yoto at any time from Settings. When you disconnect, or when you delete your Spoken Letter account, we ask Yoto to revoke the token and we delete the stored connection.

The app is adult-mediated by design. Owners control family spaces, senders, story creation, downloads, and delivery. A child does not upload recordings, type replies, chat with AI, or receive an app account.

Adults should not upload a child's voice recording or enter unnecessary child details. If you believe child personal information has been provided to Spoken Letter, contact us and we will review and delete it where appropriate.

We keep account, family-space, purchase, story, audio, and analytics records for as long as needed to provide the service, meet legal or accounting obligations, preserve security, resolve disputes, and support the product.

You can delete your account from settings. Account deletion is intended to remove the account and cascade deletion for family spaces and stories where you are the sole Owner, subject to backups, fraud-prevention records, payment records, and legal obligations.

If you need help deleting or accessing data, email hello@spokenletter.com from the address connected to your account.

We use authentication, access controls, private storage rules, provider security features, and operational monitoring to protect information. No online service can guarantee perfect security.

You are responsible for keeping your account email, password, sign-in provider, and invite links secure. Send invite links only to people you trust.

You can choose what to record, upload, write, approve, download, or delete. You can also decline optional analytics cookies or tracking where the product offers that control.

Depending on where you live, you may have rights to access, correct, delete, export, or object to certain uses of personal information. Email hello@spokenletter.com to make a request.

We may update this Privacy Policy as the product, providers, or law changes. If changes are material, we will provide notice in the product, by email, or by updating this page.