Privacy Policy

01Who this policy is for

Kroonverse operates Santa Calls and is responsible for the processing described here. Contact us at jacobdegrootnl@gmail.com about privacy or your rights.

This policy covers this informational website and the intended iPhone service. The app is coming soon: its descriptions below explain the planned public experience, not permission to use a private build with a child. Current testing is restricted to adults using fictional profiles.

A parent or legal guardian sets up and manages the experience. Children do not create accounts, make purchases or publish information to other users. Browsing this website does not give consent for processing a child’s information.

02The information involved

Details you choose to share

A child’s first name and age; optional gender; and optional interests, achievements, encouragement goals and upcoming occasions. These details come from the parent. Please use a first name or nickname and avoid surnames, school names, addresses, contact details, health information or other sensitive information in personalisation.

During a call

The selected personalisation and live microphone audio are processed to understand the speaker and generate Santa’s responses. Audio can contain information volunteered during the conversation. The microphone is used only with permission and during the call; it is not used for background listening. We do not use voice to identify a child or create a voiceprint.

Service and purchase records

An installation identifier, Apple App Attest verification data, consent status and policy version, timestamps, call authorisations, Apple transaction identifiers, call-credit balances and refund or revocation information. An installation identifier is pseudonymous, not necessarily anonymous. Kroonverse does not receive your card details.

Reliability and product measurement

Limited events help us understand whether setup, purchases and calls work. These include onboarding completion, offer views, purchase results and call outcomes, with app version, broad iOS version, call duration or error categories. The application is designed to keep daily aggregate counts, rather than a retained event history for each family. Event payloads exclude names, personalisation, audio and transcripts. Requests still pass through an authenticated installation connection.

Website visits and support

Hosting and security services may process IP addresses, requested pages, timestamps, browser information and error metadata. This website sets no advertising or analytics cookies and loads no third-party analytics scripts or remote fonts. If you email us, our email provider processes your address, message and any attachments you send. Please do not email recordings or unnecessary child information.

03Why we use it

• Prepare the conversation you request and respond during the live call.
• Apply parental choices and prevent calls when required consent is absent or withdrawn.
• Validate the app, protect access and prevent fraud, abuse and duplicate credit use.
• Provide purchased calls, reconcile Apple transactions and handle support.
• Understand reliability and improve the parent experience without logging conversation content.
• Meet applicable legal, accounting and safety obligations.

We do not sell personal information, run advertising, share information for cross-context behavioural advertising or build advertising profiles about children. We do not make automated decisions with legal or similarly significant effects on a child.

04What stays on your phone

Profiles, reusable personalisation and saved call drafts are kept on the iPhone until you edit or delete them. There is no account-based cloud profile library. Apple device backups may separately include app data, depending on your device and backup settings.

When a call starts, the relevant details and live audio travel over encrypted connections from the iPhone through our hosted backend to the conversation provider. Generated audio returns through that connection.

Kroonverse does not save recordings or transcripts of Santa calls. Live content passes through working memory for the session. This is different from a promise that every provider has no retention: the provider requirements are explained below.

Server-side records cover installation security, consent, call authorisation, purchases and credit accounting. They are not a saved library of children’s profiles or conversations.

05Who helps provide the service

Apple

iPhone permissions, App Attest, App Store distribution, payments and applicable device backups. Apple also processes information under its own terms.

Render

Backend hosting and database infrastructure. Live call traffic passes through the backend; minimal service records and infrastructure logs support its operation.

OpenAI

Live speech and generated responses, including delegated response processing. The chosen profile details and live conversation content are sent for this purpose.

Cloudflare

Hosting, delivery and protection of this website. Cloudflare Web Analytics is not enabled.

Google

Email delivery and storage when you contact our Gmail support address.

We may disclose information when necessary to comply with law, respond to valid legal process or protect people and the service. We seek to limit disclosures to what is necessary. A business transfer would remain subject to applicable privacy duties and required notice or consent.

06OpenAI & Zero Data Retention

Zero Data Retention is a provider data-control arrangement; it is not achieved simply by deciding not to save recordings in our own app. Model eligibility, application-state storage and other provider exceptions must also be checked. We will not describe the provider as retaining nothing without evidence covering the actual configuration.

See OpenAI’s API data controls and under-18 guidance. The public privacy notice will be updated before real-child calls are enabled.

07Children & parental permission

Before public child use, parents must receive a direct notice about the information involved and provide the parental permission required by applicable law. Where required, that includes verifiable parental consent. Adult supervision or a checkbox alone is not treated as proof that all legal requirements have been met.

The intended parent controls let you review your choices, withdraw consent and delete child information. Withdrawal blocks further calls requiring that information until valid consent is given again. It does not make earlier lawful processing unlawful.

Participation must not depend on providing more information than is reasonably needed. Personalisation beyond the basic setup is optional. If you believe a child’s information has been submitted without permission, contact us so we can investigate and address it.

Santa Calls is entertainment using generated conversation technology, not a call to a human performer. Parents should explain this in a way appropriate to their child’s age, remain nearby and end any conversation that feels unsuitable.

08How long information is kept

• Local profiles and drafts: until you edit or delete them from the app. Separately managed device backups follow your Apple settings.
• Call content: Kroonverse does not retain recordings or transcripts after the live session. Provider processing remains subject to the launch requirement above.
• Installation, consent and security records: only for the relevant service, consent-evidence or security purpose, with no longer retention than necessary.
• Purchase and credit records: while needed to deliver unspent value, reconcile transactions and satisfy applicable accounting or dispute obligations. Purchased credits do not expire.
• Support correspondence: for handling the request and any related legal obligations.

The production retention schedule, including deletion periods for technical records, infrastructure logs and backups, must be established and verified before public child use. This pre-launch notice does not claim that unverified automatic deletion periods are already operating.

Child-data deletion and purchase-record deletion are different. Minimal credit, fraud-prevention and deletion-receipt records may need to remain to preserve purchases, honour withdrawals and prevent a deleted or consumed entitlement being recreated. This does not justify keeping conversation content.

09Your choices & rights

The parent area is designed to let you edit or delete profiles, review or withdraw consent, and request child-data deletion. Deleting child data removes saved personalisation without intentionally removing valid purchased credits, which remain linked to that installation. Removing the app or changing phones is different; see the credit and device limitations.

You can email us to request access to, correction of or deletion of information, or to object to or restrict processing where the law provides those rights. You may also have a right to portability. We may need proportionate information to verify that a request comes from the appropriate parent. Please do not send identity documents unless we first explain why they are necessary and how to submit them safely.

We respond within the applicable legal deadline; under the GDPR this is generally one month, with a permitted extension for complex requests and notice explaining it. Where we must retain limited records, we explain the applicable reason.

You may complain to your local data-protection authority, including the Netherlands’ Autoriteit Persoonsgegevens. Contacting us first does not remove your right to seek a regulator’s help.

10Legal grounds & international processing

Where the GDPR applies, the intended legal grounds are parental consent for a child’s call content and personalisation; performance of our agreement with the adult for purchases and requested service administration; legitimate interests in proportionate security, fraud prevention, website delivery and support; and legal obligations for required records. Consent-dependent measurement must respect the parent’s choice. These grounds do not replace child-specific notice or consent requirements.

Service providers may process information in the United States and other countries, where protections may differ. Before public child use, we must verify the relevant processor agreements and lawful transfer safeguards, such as applicable adequacy decisions or standard contractual clauses. You can ask us for information about the safeguards relevant to your data.

11Security & policy changes

The app is designed to use encrypted transport, installation verification, short-lived call authorisations and restricted content-free operational logging. No system is completely secure. We will address incidents and provide legally required notices.

We update this page when the experience or data practices change. Material changes require appropriate notice and, where necessary, fresh parental consent before the new processing starts. The date and version below identify this notice.

Privacy contact: Kroonverse — jacobdegrootnl@gmail.com.