Privacy Policy
This policy explains what information the Personalized Santa Claus Call app for iPhone ("the app", which appears on your home screen as "Santa Calls") and its servers collect, why, who we share it with, how long we keep it, and the choices you have. The app is published on Apple's App Store by Nael Aljamal ("we", "us"). Questions: support@santacustomcall.com.
This policy applies to the app you install from Apple's App Store, on an iPhone or on an iPad.
1. Who the app is for
The app is used by parents and guardians. A parent enters details about their child so we can create a personalised Santa voice or video call, and the child watches or listens to it with the parent.
There is no sign-in: no sign-up, no email and no password. The first time the app opens, it creates an anonymous account for your iPhone or iPad automatically.
Because the details you enter are about a child, please enter only what you are happy for us to use to make the call, and only if you are that child's parent or guardian.
2. Information we collect
Your iPhone or iPad and your anonymous account
- A random installation ID that the app creates on your device and keeps in its secure storage. It is not a hardware ID. We also keep it with the record of your welcome gift (the small free balance a new installation receives), so each installation receives the welcome gift only once.
- Your device's advertising identifier (called the IDFA), only if you allow tracking when iOS asks. The app lets our advertising partner, Google AdMob, read it on your device when it shows ads. It is not sent to our servers. See section 4.
- Your device's platform, the app version, your language, and when the app last connected.
- An anonymous account ID (you can see it in the app under Profile → Settings → About), and security keys (tokens) that connect the app to that account. They renew automatically in the background; you never sign in.
- The display name you can set in Profile, if you set one, and whether you have switched on "News from Santa" (see Notifications below).
Details you give us to make a call
- Your child's first name and age; their gender and birthday if you choose to give them; their interests; the reason for the call that you pick; how Santa should talk about their behaviour; any note you add, and a town or region or a gift they are wishing for if you give one; the call language; and whether you want a voice or a video call. These details are stored with the call.
- Child profiles you save in the app: name, age, gender, birthday, interests and an avatar emoji. The name, birthday and interests in a saved profile are stored encrypted.
- The Santa script written for your call. You can read it and change it before the call is made, and we keep the version that is used.
- The finished voice recording or video of Santa, and the list of your calls shown in "My calls".
To write the script and make the voice and video, these details are sent to the AI services named in section 5, and only after you have given the app your permission.
Santa's video library
If you search Santa's videos by name, the name you type (which may be your child's name) is sent to us to find matching videos; we do not store it. When you tap a name in the results, we add one to that name's search count for your country, with no link to you. To show the names most looked for in your country first, we use the country of your internet connection, as reported by our network provider (Cloudflare), when you open the list; it is not stored with your account. We also keep the films you mark as loved and the films you use for a call, to show them to you again and to rank the most popular films.
Photos for AI pictures
You choose a photo with the iOS photo picker, so the app cannot see your other photos. The app makes the photo smaller before sending it. On our server we re-create the image from its pixels, which removes hidden data such as location and camera details, and we delete the original upload after it has been checked. The cleaned photo and the picture made from it are stored. To make the picture, the photo is sent to the AI services named in section 5, and only after you have given the app your permission. If you pick a saved child, the child's first name can be used in the picture description.
Reaction recordings
The camera and microphone are used only if you switch on reaction recording for a call. The recording is saved inside the app on your device. If the app is already allowed to save to your photo library, a copy is saved there too. The recording is never uploaded to us; it leaves your device only if you send it yourself.
Chat with Santa
Where chat is available: the messages you type to Santa, and Santa's replies, which are written by an AI service (see section 5) after you have given the app your permission. We do not add your child's details to the chat; only what you type is used.
Reports you send us
You can report an ad ("Report an ad", in Profile → Settings and in About), one of Santa's chat replies, an AI picture or a call (see section 7). A report carries what it is about (an ad, a chat reply, an AI picture or a call), the reason you pick, any note you write (links are removed from it), and which reply, picture or call it is about. For an ad, the app also tells us where in the app and when the last ad it showed appeared and which ad network showed it, because the ad itself is shown by the ad network and the app does not know which ad it was. The report is stored with your anonymous account ID; if you delete your account, it is kept without a link to you (section 6). The report comes to us, and we use it to look into the problem and keep the app safe.
Nothing is published
The app has no public feed: nothing you make in it is published or shown to other people who use the app.
Purchases
You can buy calls, coins and diamonds as one-time purchases. You can also subscribe to "No Ads", a monthly plan that removes the full-screen ads while it is active (the optional rewarded ads stay available, and appear only if you choose to watch one) and renews every month until you cancel it. Apple's App Store handles the payment. We receive the product, the transaction ID and its status from Apple (for the subscription, also whether it is active, cancelled or expired, and until when) so we can add what you bought or turn the plan on, and we keep that record, the history of your credits (including ad rewards), and Apple's purchase notifications, such as refunds and renewals. Each time the app opens, it checks your past purchases with us so nothing you bought is lost. A "No Ads" subscription belongs to your Apple Account and works on every iPhone and iPad that uses that Apple Account at the same time. The purchase record stays with the app's anonymous account that bought it; when the app on another iPhone or iPad restores the subscription, we record that its anonymous account also has the plan, and when it last checked. Up to 10 other iPhones and iPads can have it this way; if an 11th restores it, the one that has not checked for the longest time makes way, and gets the plan back the next time it opens and checks. Calls, coins and diamonds are not shared between devices. We never receive your card or bank details.
Notifications
Each time the app opens, it sends us your device's notification (push) token and your language. We use them to tell you when Santa's script or your call is ready. These notifications can include your child's first name. Notifications appear only if you allow them on your device; the app asks after you book your first call. (If Profile → Settings shows no "Notifications" row, your copy of the app does not use notifications: it sends us no push token, and it has no "News from Santa" switch.)
News from Santa. Now and then we send the same notification to many parents at once, with news or an offer about the app. "News from Santa", in Profile → Settings, is off unless you switch it on; you can switch it off there at any time, and your choice is kept with your account. No news, offer or other message we send to many parents at once reaches the app unless that switch is on.
Security and network information
We use your IP address to protect the service, for example for rate limits and fraud prevention. We do not store it with your account. Rate-limit counters last up to one minute. A shortened form of the address (the network range, not your exact address) is kept for up to 24 hours to limit free credits per household. We also use the country of your connection as described under Santa's video library above.
Information that stays on your device
Some things are kept only on your device and are not sent to us: call forms you have not finished, script changes you have not sent, the call language chosen for each child, your answer about the AI services (section 5), your reaction recordings and their list (which includes your child's first name), films you saved, and your settings. Deleting the app deletes your recordings and saved films. iOS can keep what the app stores in its secure storage (such as unfinished call forms, call languages and your answer about the AI services) after the app is deleted, and a reinstalled app finds it again; deleting your account in the app clears it (section 7). Copies you saved to your photo library stay there.
What we do not collect
- No location from your device. The app does not ask for location permission. (Our advertising partner estimates a general location from your IP address; see section 4.)
- No contacts, and no photos or files other than the photo you choose.
- No analytics or crash-reporting tools. (Our advertising partner collects some information about ad views, taps and app performance to measure ads and prevent fraud; see section 4.)
3. How we use information
- To create, deliver and replay your calls, scripts, AI pictures, chat replies and Santa videos.
- To check content for safety (moderation) before it is used.
- To look into the reports you send us about ads, chat replies, AI pictures and calls.
- To rank popular films, and the names most looked for in each country.
- To process purchases and subscriptions, add credits and handle refunds.
- To tell you when a script or call is ready, and, only if you switched on "News from Santa", to send occasional news and offers.
- To show ads in the free version, which Google may personalise using your device's advertising identifier if you allow tracking, and to measure them and prevent ad fraud, through our advertising partner (see section 4).
- To keep the service secure, prevent abuse and protect children.
We do not sell personal information for money, and we do not use anything you enter in the app (your child's details, your calls, photos, chats or purchases) for advertising. Ads in the app may be personalised by Google using your device's advertising identifier, if you allow tracking, as section 4 explains. Under some US state privacy laws, letting an advertising partner use an advertising identifier in this way can count as "sharing" personal information for cross-context behavioural advertising, or as a "sale"; section 4 explains how to turn it off.
4. Advertising and the advertising identifier
The free version shows full-screen ads (between screens and when the app opens) and optional rewarded ads that you can choose to watch for a reward in the app. There are no banner ads. The "No Ads" subscription removes the full-screen ads while it is active; the rewarded ads stay available, and appear only if you choose to watch one. Ads come from Google AdMob.
We use the advertising identifier, only if you allow tracking. iOS asks whether you allow the app to track you. Only if you allow it can Google read your device's advertising identifier (IDFA). Google collects your IP address (which gives an approximate location), information about your device, how you interact with ads (for example ad views and taps), diagnostic information about the performance of the app and the ad software, and, if you allowed tracking, the advertising identifier. It uses them to show ads, to measure them (analytics) and to prevent fraud, and may also use them to personalise ads, as described below. Google handles this information under its own policies: how Google uses information from apps that use its services.
Ads from Google may be personalised. The app is used by parents, so Google may use your device's advertising identifier (if you allow tracking), together with the information above, to show you ads based on your interests (personalised ads). We can switch this off for everyone at any time, so that every ad request is again marked as directed at children and as non-personalised. Every ad request keeps the maximum content rating set to G, so ads are limited to content rated for general audiences, because a child may be watching with you.
Your consent. Where the law requires consent (for example in the European Economic Area, the United Kingdom and Switzerland), a Google consent message asks you when the app first opens, and the advertising identifier is read and used for advertising only with your consent. That consent is the legal basis for it. In the message you can also see the partners involved and what each of them uses information for. Without your consent, ads from Google are not personalised. iOS also asks whether you allow the app to track you; if you do not, the advertising identifier is not available to the app or to Google. Your answer to Google's message is kept on your device and passed to Google with ad requests; it is not sent to our servers.
What ad networks never receive. Nothing you enter about your child is sent to an ad network. We do not read the advertising identifier ourselves, it is not sent to our servers, and we never combine it with the details you enter about your child.
Changing your mind. You can withdraw your consent or change your ad choices at any time; this applies from then on and does not undo ads already shown. Where the law requires us to ask you, the app shows a "Privacy choices" row under Profile → Settings → About, which opens Google's consent message again. You can allow or stop tracking for the app at any time in Settings → Privacy & Security → Tracking on your iPhone or iPad; while tracking is off, the advertising identifier is not available to the app or to Google.
Reporting an ad. If you see an ad that is not right for your family, tap "Report an ad" in Profile → Settings or in About, choose what was wrong and, if you like, add a note. The report comes to us (see section 2, Reports you send us).
For rewarded ads from Google, we give Google our anonymous account ID so Google can confirm the reward to our server.
5. Service providers and partners we share information with
We use trusted providers to run the app. They receive only what they need for their task:
- OpenAI: writing the Santa script (the details you entered for the call) and Santa's chat replies (your chat messages and the recent conversation).
- OpenAI (moderation): safety checks on the details and notes you enter, scripts (including your changes), chat messages and replies, photos and AI pictures.
- ElevenLabs: turning the script into Santa's voice (the script text, which includes your child's name and details).
- HeyGen: making the Santa video (a link to the voice recording that works for 2 hours; no photos of you or your child).
- Runware and OpenAI: creating AI pictures (the picture description, which can include your child's first name, and the photo you chose).
- Cloudflare: storing and delivering media files (calls, pictures and videos) and running our internet domain.
- Hetzner Online: hosting our servers and database in the European Union.
- Google Firebase Cloud Messaging: sending notifications (the push token and the notification text, which can include your child's first name), which it passes to Apple for delivery.
- Apple Push Notification service: delivering notifications to your iPhone or iPad (the push token and the notification text).
- Apple's App Store: payments, subscriptions and purchase verification, and app ratings if you choose to rate the app.
- Google AdMob: advertising, including personalised ads from Google (the advertising identifier if you allow tracking, IP address, device information, ad interactions, ad-performance diagnostics and your ad consent choices), as described in section 4. It never receives the details you enter about your child.
AI services, and your permission. OpenAI, ElevenLabs, HeyGen and Runware are the third-party AI services that make Santa's scripts, voice, videos, pictures and chat replies, as listed above. Before the app sends them anything you enter or choose (the details of a call, a photo for an AI picture, or a message to Santa), it shows you who they are and what each one receives, and asks for your explicit permission. It asks the first time you continue a call form, choose a photo for an AI picture or send Santa a message. If you choose "Not now", nothing is sent. Personalised calls, AI pictures and chat replies are made with these services, so they need your permission; Santa's films in the Videos tab do not. You can read the list again and withdraw your permission at any time in Profile → Settings → AI services. After you withdraw it, nothing new is sent to these services, and the app asks you again before your next call, picture or message to Santa. Withdrawing does not delete what was already made; deleting your account does (section 7). Your answer is kept on your device.
The same protection. Every service provider and partner we share information with, including those listed above and our advertising partner, is bound by a contract or by data-processing terms to protect it with the same or equal protection as this policy gives it. Our advertising partner also handles what it collects under its own policies (section 4).
Some providers keep copies of what they produce for us under their own terms: ElevenLabs keeps the voice recordings it makes, and HeyGen the videos. When you delete your account, we ask them to delete the copies of your calls (section 7). Some of these providers process data outside your country, including in the United States. We may also disclose information if the law requires it or to protect the safety of users, including reporting suspected child sexual abuse material to the authorities.
6. How long we keep information
- Uploads that are not used are deleted automatically within about 40 minutes.
- The network range used to limit free credits is kept for up to 24 hours.
- The app's security keys expire: the short-lived key after 15 minutes, and the longer one after 30 days without use or 180 days at most. The app then gets new keys automatically. Expired keys are deleted 30 days later. Your anonymous account itself does not expire.
- Call details, scripts, finished calls, AI pictures and the photos they were made from, chat messages, saved child profiles, loved films, notification tokens, your "News from Santa" choice, and your credit history and purchase records are kept until you delete them in the app where that is possible, or until you delete your account (see section 7).
- When you delete an AI picture, the photo it was made from is deleted too.
- Reports you send us about an ad, a chat reply, an AI picture or a call are kept for our records. If you delete your account, they are kept without a link to you.
- The record that the app on another iPhone or iPad also has your "No Ads" plan is kept until that app's account is deleted or another device takes its place (see Purchases in section 2).
- Uploads flagged as possible child sexual abuse material, and the data of the account that uploaded them, are kept for review and reporting, even if deletion is requested. Safety records are kept, without a link to your account, after an account is deleted.
- We do not store the advertising identifier. Google keeps what it collects under its own policies (see section 4).
7. Your choices and deleting your data
In the app you can delete saved child profiles and AI pictures (together with the photo an AI picture was made from), and remove loved films. Calls and chats cannot be deleted one by one; deleting your account deletes them all. Reaction recordings stay on your device: delete copies from your photo library, and delete the app to delete the rest. You can turn notifications off in your device's Settings, switch "News from Santa" off in Profile → Settings, withdraw your permission for the AI services in Profile → Settings → AI services (see section 5), and change your ad choices, withdraw your consent to personalised ads, and stop tracking at any time (see section 4). You can cancel the "No Ads" subscription at any time in Settings → your name → Subscriptions on your iPhone or iPad.
Reporting. To report an ad, tap "Report an ad" in Profile → Settings or in About. To report one of Santa's chat replies, tap the report button beside it; to report an AI picture, tap "Report this picture" on the picture; to report a call, tap "Report a problem with this call" on the screen after the call. Reports come to us.
Delete your account in the app. In Profile → Settings, tap "Delete my account and data", read what will be deleted, and confirm. Your anonymous account and everything linked to it are deleted from our servers straight away: saved child profiles, calls with their details and scripts, the finished voice recordings and videos, chats with Santa, AI pictures and the photos they were made from, your balance of calls, Gold Coins and Diamonds and its history, loved films, notification tokens and your security keys. The stored files are then deleted from our storage, and we ask ElevenLabs and HeyGen to delete the copies they keep of your calls. This cannot be undone. The app then forgets the account on your device (its security keys, installation ID, unfinished call forms and your answer about the AI services) and starts again with a new, empty account.
Deleting your account does not delete:
- records of your purchases, which are kept without a link to you for our accounting and tax records (Apple also keeps sending us notices about them, such as refunds);
- reports you sent us about an ad, a chat reply, an AI picture or a call, which are kept without a link to you;
- safety records, as described in section 6. An account held for a safety review is not deleted; the app says that it cannot be deleted right now and that nothing was deleted;
- anything on your device: reaction recordings and films you saved stay in the app and in Photos. Delete them there; deleting the app also clears the copies it keeps;
- a "No Ads" subscription. Deleting your account does not cancel it: Apple keeps billing you until you cancel it, as described above. Please cancel it first. The plan also keeps working on your other iPhones and iPads that use the same Apple Account.
Delete my data by email. If you cannot use the app, you can also ask us to delete everything we hold for your app installation: email support@santacustomcall.com with the subject "Delete my data". Because there is no sign-in, please include your account ID, which you can copy in the app under Profile → Settings → About. If you cannot find it, include details that help us find your account: the display name you set (if any), the child's first name used, roughly when you made calls, and your App Store order ID if you bought something. We reply within 30 days, and we delete the same things the in-app deletion does and keep the same records.
8. Children
The app is designed for parents to use with their children. Children should use it with a parent. Information about a child is provided by the parent, the camera and microphone are used only when the parent switches recording on, and nothing made in the app is published. The permission for the AI services (section 5) and the questions about ads (Google's consent message and the iOS tracking question) are for the parent to answer. Because a child may be watching with you, ads are limited to content rated for general audiences, and nothing you enter about your child is sent to an ad network (see section 4). If you believe a child has given us information without a parent's permission, contact us and we will delete it.
9. Safety checks and suspended accounts
We check the text and photos used in the app for safety (see section 5). If an upload appears to contain child sexual abuse material, we keep it securely for review, may report it to the authorities, and may suspend the account. We may also suspend an account for serious or repeated misuse. A suspended account sees a notice in the app, and its data is kept.
10. Security
Information travels between the app and our servers over encrypted connections (HTTPS). The app keeps its security keys and installation ID in your device's secure storage. The name, birthday and interests in saved child profiles, and the keys we use with our providers, are encrypted in storage. Links to private media expire after 15 minutes. No system is perfectly secure, but we work to protect your information.
11. Your rights
Depending on where you live (for example in the EU, UK or California), you may have the right to access, correct or delete your information, to object to or restrict how it is used, to receive a copy, and to withdraw a consent you have given (for ads, see section 4; for the AI services, see section 5). If the law where you live lets you opt out of the "sale" or "sharing" of personal information or of targeted advertising, section 4 explains how to turn personalised ads off. You can delete your account in the app at any time (section 7). Email us to use the other rights; you may also complain to your local data protection authority.
12. Changes to this policy
If we change this policy we will update the effective date above, and tell you in the app if the change is significant.
13. Contact
Nael Aljamal
Email: support@santacustomcall.com