Privacy Policy

This Advent calendar is provided by [legal entity name, address and country]. Questions about privacy: hello@littleadventangel.com.

Your email address. Your child’s first name, how it sounds (so the angel says it right) and, if you choose, your child’s age. Your time zone, so doors open at midnight where you live. Your country, estimated from your internet address. If you ask for WhatsApp reminders, your WhatsApp number and the date you agreed; we use it only for Advent reminders, and you can reply STOP or turn it off at any time. Records of the choices and consents you gave us, with the date and the version of the text you saw.

Payments are processed by Stripe. We never see or store your card number.

No photos. No surnames. No home address. No free text from children: every answer in the calendar is a tap on a fixed option. Children don’t create accounts or logins; the calendar runs on the parent’s signed-in device.

The calendar is used by children, so we follow the U.S. Children’s Online Privacy Protection Act. Only a parent or guardian gives us a child’s first name, and they confirm they are the parent or guardian when they do.

[verifiable parental consent method. Today, the free blessing collects the child's first name from the parent before any payment (checkbox consent), and the purchase adds a payment transaction. Confirm the method for both moments and whether the 60-day retention for non-buyers is acceptable.]

We use a child’s first name only to personalize the calendar: the blessing, the prayers, the family videos and the screens your child sees. We don’t use it for advertising and we never send it to advertising platforms.

If you use the “Listen again later” link, anyone you send it to can play the blessing and see your child’s first name. The link has a random code (never the name) and stops working when the name is deleted.

If you turn this on, you can pick up to 3 intentions for your child’s prayers from a fixed list (for example, “someone who is traveling”). Intentions can reveal religious beliefs or health matters, so they are optional, chosen only from the list, and used only with your explicit consent. You can turn them off at any time.

If someone gives the calendar to your family, we receive their name, their email, an optional message of up to 200 characters, and your email. We use your email to send you the gift invite (the giver can resend it or correct the address a few times). If you don’t accept, we don’t send you anything else. When you accept, the giver gets a short note saying so, and, only if you tick the box when accepting, a copy of your family’s Christmas video. Gift records are kept with the order records. [confirm the email tool sends gift recipients nothing beyond the invite, and the retention for gifts that are never accepted.]

To run the calendar and unlock each day on time. To create the personalized audio (blessing and prayers) and the family videos. To send you emails about your child’s Advent, sign-in links and, if you didn’t buy yet, a few emails about the calendar (you can unsubscribe in any email). To measure our ads on the parents’ pages, using a hashed version of your email. To keep the service secure and prevent abuse.

Supabase (database and file storage), Vercel (website hosting), ElevenLabs (creates the angel’s voice; it receives only the fixed script with your child’s first name, never your email, and we delete each recording from its history right after it’s made), Bunny.net (video delivery), Stripe (payments), Loops (email), Meta (ad measurement, only on parents’ pages, never on children’s screens and never with child data) and PostHog (site analytics on parents’ pages, without session recording). We ask providers that offer it not to use our data to train their models.

These providers store and process data mainly in the United States. For visitors in the UK and the EU, those transfers are covered by each provider’s data processing agreement, which includes the EU Standard Contractual Clauses and the UK International Data Transfer Addendum.

Children’s names, progress, prayer audio and family videos: deleted when the season ends, as soon as January 31, 2027 is over in every time zone. Access to the calendar ends at the same time. Children’s first names (and WhatsApp numbers) from families who tried the free blessing but didn’t buy: deleted 60 days after they were given. Your IP address and browser type (used only to measure our ads): deleted after 60 days. Order and payment records: kept for 7 years, because tax and accounting laws require it.

You can see, correct or delete your family’s information at any time, and withdraw any consent. To delete everything now, write to hello@littleadventangel.com and we’ll confirm within 30 days (usually much sooner). If you are in the UK or the EU, you also have the rights given by the GDPR, including the right to complain to your data protection authority.

We keep a written information security program. Information is encrypted in transit. Files are stored privately and shared only through short-lived links. Administrative access requires two-factor authentication. Each family can only reach its own data. We review who can access what, and the program itself, at least once a year.

We use essential cookies to keep you signed in, remember which child is opening the calendar and connect the free Day 0 to your browser. On the parents’ marketing pages we also use measurement cookies for our ads; in the UK and the EU we ask first.