Safety & Privacy First
We built SleighTalk with the same safety standards we'd want for our own children. Every feature, every conversation, every line of code prioritizes child safety and parental peace of mind.
COPPA Compliance
Parental Consent First
Parents create the account themselves with Google or Apple sign-in, and give explicit consent during setup before any child can use the app.
Minimal Data Collection
We only collect what's necessary: child's first name, age, and conversation transcripts for parent dashboard access.
Automatic Data Deletion
Conversation transcripts are deleted automatically after 30 days by default. Parents can change this to anything from "never save" to 90 days, or request deletion anytime.
No Third-Party Sharing
We never share, sell, or rent children's information to third parties. Period.
Full Transparency
Parents have complete access to every conversation transcript and all collected data via the dashboard.
Parent Access & Control
Parents can review, export, or delete all child data at any time through the parent dashboard.
Age Restriction: SleighTalk is designed for children ages 3-12 only. The app verifies child age during profile setup and will not allow conversations with children outside this age range.
Multi-Layer Safety Moderation
Every Turn Is Screened
Every turn of the conversation is screened by OpenAI's content moderation API. If problems keep appearing, the call is ended and the event is recorded for you.
Custom Safety Rules
Santa's responses follow strict guidelines: no personal information requests, no outside contact suggestions, age-appropriate topics only.
Conversation Limits
Calls are capped at 10 minutes each, with up to 2 or 5 calls a day depending on your plan, to encourage healthy usage patterns.
Safety Event Tracking
Any safety events flagged during a conversation are recorded and shown on your parent dashboard for review, alongside the full transcript.
Comprehensive Parental Controls
Parents have complete control and visibility over their children's experience.
Real-Time Dashboard
View every conversation and wishlist item as they happen.
Time Limits
Set daily conversation limits and maximum session lengths per child.
Full Transcripts
Read complete transcripts of every conversation your child has with Santa.
Safety Events
Any safety events are recorded and visible on your dashboard alongside the conversation they came from.
Age Settings
Age-appropriate responses automatically adjust based on each child's age.
Usage Analytics
Track conversation frequency, duration, and engagement patterns over time.
Data Privacy Commitment
What We Collect
- Parent email address (for account verification)
- Child's first name and age (for personalized conversations)
- Conversation transcripts (for parent dashboard access)
- Wishlist items mentioned (extracted automatically from conversations)
- Usage statistics (conversation count, duration)
What We Don't Collect
- Child's last name or full legal name
- Physical address or precise location
- Social security numbers or other government IDs
- Photos or videos — except Advent activity photos or drawings a parent explicitly chooses to upload
- Biometric data — optional biometric unlock runs entirely on your device; SleighTalk never receives it
- Any information not directly related to the Santa conversation experience
Data Retention & Deletion
Conversation transcripts are deleted automatically after 30 days by default. In the app's Privacy settings a parent can move that anywhere between “never save” (0 days) and 90 days; the setting is applied when the conversation is written, not just in the interface. Parents can also request immediate deletion of all data at any time through the dashboard or by contacting support.
When you delete your account, all associated data is permanently removed within 30 days, including conversation transcripts, wishlist items, and child profiles.
Security Measures
Encrypted In Transit & At Rest
Traffic uses TLS, and stored data is encrypted at rest by Google Cloud. We are not end-to-end encrypted: we can read transcripts in order to build your wish list.
Google Cloud Infrastructure
Hosted on Google Cloud Platform and Firebase, inside Google's physical and network security perimeter.
Secure Authentication
Google Sign-In and Apple Sign-In with industry-standard OAuth 2.0 authentication.
Server-Side Rules
Firestore security rules enforce that a parent can only ever read their own family's data.
Moderated Every Turn
Every message is monitored by OpenAI's moderation service as the conversation happens, and repeated issues end the call.
Device Security
Optional biometric unlock for the parent area uses your phone's own Face ID or fingerprint check — the biometric never leaves your device and is never sent to SleighTalk.
Questions About Safety or Privacy?
We're here to help. Our safety and privacy teams respond to all inquiries within 24 hours.