Privacy Policy
Last updated: draft, unpublished
Who this is for
Holiday is a service parents sign up for and manage on behalf of their kids. Kids don't create accounts, log in, or provide information directly — everything about a kid's profile is entered by the parent. A child's iPad is paired by the parent with a one-time code, so the child never enters an email address or sets a password.
What we collect
- Your email address, to create and secure your account
- For each kid you add: first name, an age range (not an exact birthdate), a phone number if you want Santa to text them, and anything you choose to tell us about them (interests, a wish list, an inside joke) — we deliberately don't ask for a last name, address, or school
- The full text of every message sent or received through the service
- If you pair an iPad: a random device token, stored only as a one-way hash, which identifies that iPad as belonging to one child. It carries no personal data and no information about the device itself
- Which storyline a child is on, which puzzles they have finished, and the stars and badges they have earned
Who we share it with
We use a small number of infrastructure providers to run the service, and don't sell or share your data beyond what's needed for them to do that:
- Twilio — delivers text messages, when you choose that channel for a child
- Anthropic — generates Santa's replies from the message content and the profile you provide
- Supabase — hosts our database and handles account authentication
- Vercel — hosts the application itself
How long we keep it
We keep your account and message history until you delete a kid's profile or close your account, at which point it's deleted from our active database. Email us to request deletion at any time.
Children's privacy
Holiday is directed at parents, not children — a kid never creates an account, provides their own information, or agrees to anything themselves. Before Santa can text a child, a parent verifies they control that phone number. The iPad app needs no phone number at all.
Your choices
You can pause, edit, or delete any kid's profile from your dashboard at any time, and unpair an iPad whenever you want. Replying STOP to any text opts that phone number out of receiving more.
Contact
Questions about this policy or your data: [email protected]