Privacy Policy
Last updated: June 2026
1. Introduction
Once Tonight is committed to protecting the privacy of your family. This Privacy Policy explains what information we collect, how we use it, and how we protect it. We take children’s privacy especially seriously and design every part of our service with families in mind.
2. Information We Collect
Information you provide directly
- ●Parent or guardian first name and email address
- ●Account password (stored encrypted — never readable by Once Tonight staff)
- ●Child name or nickname, age, favorite colors, favorite animals, and interests
- ●Optional appearance details: pronouns, hair description, eye color, and skin tone
- ●Optional family member names and nicknames: mom, dad, grandparents, aunts, uncles, and pets
- ●Optional birthday month and day (year not collected)
- ●Holiday preferences and custom special days
- ●Story delivery preferences including delivery time and timezone
- ●Additional recipient email addresses
- ●Payment information processed securely by Stripe (Once Tonight does not store card numbers)
Information collected automatically
- ●Browser timezone for story delivery timing
- ●Login session data for authentication
- ●Story generation and delivery logs
All personal information collected by Once Tonight is provided voluntarily by the parent or legal guardian account holder. Once Tonight does not independently verify the accuracy of any information provided. Parents and guardians are solely responsible for ensuring the information they provide is accurate and appropriate. Once Tonight processes and uses submitted information in good faith based on the representations made by the account holder at the time of submission.
3. How We Use Your Information
- ●To generate personalized bedtime stories for your child
- ●To deliver stories by email at your chosen time
- ●To send the monthly story book PDF
- ●To manage your subscription and process payments
- ●To send service-related emails including welcome emails, trial reminders, and payment notifications
- ●To maintain your story archive
- ●To improve our story generation quality
We do not use your information for advertising. We do not sell your data. Ever.
4. How We Use AI to Generate Stories
- ●Once Tonight uses Anthropic’s Claude AI model to generate stories.
- ●When generating a story we send the child’s profile details to the AI — including name or nickname, age, favorite things, appearance details if provided, family member names, and any relevant holiday or special day context.
- ●This information is used solely to generate that individual story and is not used to train AI models.
- ●We do not send payment information, parent email addresses, or account credentials to the AI.
- ●Story generation is handled in accordance with Anthropic’s data processing and privacy policies.
5. Children’s Privacy and COPPA Compliance
Once Tonight is designed for parents and guardians to use on behalf of their children. We comply with the Children’s Online Privacy Protection Act (COPPA) and take children’s privacy extremely seriously.
- ●Once Tonight accounts are created and operated exclusively by parents and legal guardians aged 18 and over. Children do not create accounts or interact with our service directly.
- ●We do not knowingly collect personal information directly from children under the age of 13.
- ●All child profile information — including names, nicknames, ages, appearance details, and preferences — is provided by a parent or guardian on behalf of their child.
- ●The optional appearance details we collect — including pronouns, hair description, eye color, and skin tone — are used exclusively to make stories feel more personal and are never shared with third parties, never used for advertising, and never used for any purpose other than story generation.
- ●Parents and guardians have the right to review all information we hold about their child, request corrections, or request complete deletion at any time by contacting support@oncetonight.com.
- ●If we discover we have inadvertently collected personal information directly from a child under 13 without verified parental consent, we will delete that information immediately.
- ●Parents may delete their child’s profile and all associated data at any time from their account settings. Deletion removes all profile information, story history, and personal details associated with that child profile.
- ●For questions about our COPPA compliance or to exercise parental rights, contact support@oncetonight.com. We will respond within 30 days.
6. Data Storage and Security
- ●Your data is stored on US-based servers provided by Supabase.
- ●All data is encrypted in transit using TLS/SSL and encrypted at rest.
- ●Row Level Security ensures each subscriber can only access their own data.
- ●Payment processing is handled by Stripe, which is PCI DSS compliant.
- ●Access to subscriber data is strictly limited to authorized Once Tonight personnel.
- ●We conduct regular security reviews of our data handling practices.
7. Data Sharing
We do not sell your data. We do not share your data for advertising. We share limited information only with the following service providers who are contractually required to protect it:
- ●Supabase — database storage
- ●Anthropic — AI story generation
- ●Stripe — payment processing
- ●Resend — email delivery
- ●Inngest — job scheduling
- ●Vercel — application hosting
8. Email Communications
- ●Story delivery emails are sent nightly to your designated recipients.
- ●Service emails — including welcome, trial reminder, payment, and system notifications — are sent to your account email address.
- ●You may add or remove story recipients at any time from your account settings.
- ●To stop receiving service emails you must cancel your account, as these emails are necessary to deliver the service.
9. Cookies
- ●Essential cookies are used for authentication and session management.
- ●We do not use advertising cookies or tracking pixels.
- ●We may use privacy-friendly analytics to understand how our service is used.
- ●You can manage cookie preferences through your browser settings.
10. Data Retention
- ●Active account data is retained while your subscription is active.
- ●After account cancellation or deletion, data is retained for 90 days in case you choose to return.
- ●After 90 days, all personal data is permanently deleted.
- ●Generated stories are retained for the same period as the account.
- ●Payment records may be retained longer as required by applicable law.
- ●Anonymized, aggregated data may be retained indefinitely for service improvement purposes.
11. Your Rights
You have the right to:
- ●Access all personal information we hold about you and your child
- ●Request correction of inaccurate information
- ●Request complete deletion of your account and all associated data
- ●Withdraw consent for optional data we collect
- ●Export your story archive
To exercise any of these rights, contact support@oncetonight.com. We will respond within 30 days.
12. California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act:
- ●The right to know what personal information we collect about you
- ●The right to delete your personal information
- ●The right to opt out of the sale of your personal information
- ●The right to non-discrimination for exercising your privacy rights
Once Tonight does not sell your personal information.
To exercise your California privacy rights, contact support@oncetonight.com. We will respond within 45 days.
13. Changes to This Policy
We will notify you of material changes to this Privacy Policy by email at least 14 days before they take effect. We encourage you to review this page periodically for the latest information.
14. Contact
For privacy questions or to exercise your rights, contact us at support@oncetonight.com.