Privacy Policy

This policy explains what we collect when you use Tucknightly ("Tucknightly," "we," "us") at tucknightly.com, why we collect it, and how you control it. If anything here is unclear, email privacy@tucknightly.com.

1. Who this policy is for

Tucknightly is a parent-facing service. Only the parent or guardian creates an account. Children do not sign in, do not interact with the app directly, and do not receive emails or notifications from us. Whenever this policy says "you," we mean the adult account holder.

2. What we collect

We never ask for your child's last name, birthday, photo, location, school, or contact information. The more we don't have, the less we can ever mishandle.

3. Why we collect it

• To generate personalized bedtime stories on your schedule.
• To maintain a consistent, companion-led story world that grows with your child.
• To run your subscription and send you the handful of emails you asked for (magic link, story ready, receipts).
• To fix bugs and improve the product.

4. What we don't do

Your child's data is used only to generate their stories. We do not:

• Sell, rent, or trade your data.
• Use it for advertising or ad targeting (there are no ads in Tucknightly).
• Build profiles about your child to share with any third party.
• Use whispers, bubbles, story text, or your child's name to train machine-learning models — ours or anyone else's.

5. Children's privacy (COPPA)

Tucknightly is designed to comply with the U.S. Children's Online Privacy Protection Act (COPPA). Because the service is parent-facing, only the account-holding adult is a user of the service. We collect the minimum child information needed to personalize stories (first name and age) and treat it as sensitive.

As the parent or guardian, you can at any time:

• See every memory bubble the app holds about your child, in the Memory World.
• Edit or pin any bubble.
• Burst a single bubble — the row is hard-deleted from our database before the animation ends. Gone, no undo.
• Delete all data for any child with the "Delete all data for [child name]" button in Settings. The child's profile, stories, whispers, memory bubbles, narrative threads, and audio files are permanently removed.

If you believe we've collected information from a child without appropriate parental consent, please email privacy@tucknightly.com and we'll delete it within 7 days.

6. Who we share it with (sub-processors)

We use a small number of specialized vendors to run Tucknightly. Each of them processes data on our behalf under a data-processing agreement. We send each only what they need to do their job:

7. Your rights & choices

Regardless of where you live, you can:

• Access — see what we have about you and your child in the app itself (dashboard, library, Memory World).
• Export — email us and we'll send a JSON bundle of your data within 30 days.
• Delete — use "Delete all data for [child name]" in Settings, or email us to close the entire account.
• Cancel — through the Stripe customer portal any time, without contacting us.

If you are in the European Economic Area, United Kingdom, or Switzerland, the legal basis for our processing is (a) your consent, (b) performance of a contract (our Terms), and (c) our legitimate interest in running a safe, small service. You have the rights to access, rectification, erasure, restriction, portability, and objection under the GDPR. Our data controller is Tucknightly; contact privacy@tucknightly.com to exercise any right.

If you are a California resident, the CCPA/CPRA give you the rights to know, delete, correct, limit use of sensitive personal information, and opt out of "sale" or "sharing." We do not sell or share personal information as those terms are defined under the CCPA. To exercise any right, email privacy@tucknightly.com — we respond within 45 days.

8. Retention

• Stories, whispers, bubbles, threads, audio — kept for as long as the child profile exists, so the companion keeps growing with them. Deleted immediately when you burst a bubble or use "Delete all data for [child name]."
• Account (email, Stripe IDs) — kept while your account is active, plus up to 7 years for billing records as required by tax law.
• Server logs — request metadata is retained for up to 30 days for debugging and then deleted. Whisper, bubble, and story text are never written to logs.

9. Security

• All traffic to tucknightly.com is encrypted in transit (HTTPS).
• Data is encrypted at rest in Supabase.
• Access to the database is protected by row-level security — each parent can only read and write their own rows.
• Magic-link sign-in, no password to leak.
• Bursted memory bubbles are hard-deleted — no soft-delete, no shadow copy. The text is scrubbed from error-tracking events before they are sent.
• Whisper, bubble, story, and child-name text never appear in logs or analytics.

No service is perfectly secure. If we ever learn of a breach that affects you, we will notify you by email within 72 hours as required by law.

10. International transfers

We operate from the United States. If you use Tucknightly from outside the U.S., your information will be transferred to, stored, and processed in the U.S. We rely on Standard Contractual Clauses with our sub-processors where required.

11. Cookies

Tucknightly uses only one cookie: an HTTP-only authentication session cookie set by Supabase when you sign in. We do not use advertising cookies, tracking pixels, or third-party analytics cookies. If product analytics is enabled (PostHog), events are sent server-side and are anonymous.

12. Changes to this policy

If we materially change this policy, we'll email the account holder and post a notice in the app before the change takes effect.

13. Contact

privacy@tucknightly.com for any question about your data, or contact page for everything else.