Privacy for the Custom Santa Video app

01

Who we are

Custom Santa Video operates the Custom Santa Video app and is responsible for the personal information described here. The app is intended for adults creating a video for a child or another family member; it is not intended for children to create their own accounts.

02

Information we handle

Account information

When you use Sign in with Apple, we receive an Apple-specific account identifier and, if Apple supplies them, your name and email address. Your email may be an Apple private-relay address. Session tokens are stored securely in the iOS Keychain.

Details used to make a video

You may enter a child’s first name, age, town or general location, interests, achievements, Christmas wish, nice-list choice and the sender’s name. You also choose a Santa, voice, music, tone, length and video format. Please provide only details you are entitled to share and avoid sensitive information.

Videos and service records

We store the generated script, finished video, thumbnail, creation date, rendering status and technical error information. Finished videos necessarily contain the details Santa says aloud.

Purchases and notifications

Apple processes payment. We receive transaction and product identifiers so we can verify purchases and maintain your video-credit balance; we never receive your card details. If you allow notifications, we store an Apple Push Notification service device token so we can tell you when a video is ready.

Technical and support information

Our servers may process basic request information such as IP address, request time and error details to operate and secure the service. If you contact support, we receive the email address and message you provide.

03

How generative AI is used

Generative AI is used to make the script and performance. We send only the content needed for that stage; we do not upload a child’s photo, search for information about them or infer facts that you did not provide.

We do not use your details or finished video to train our own AI models. Our AI service providers may retain limited request or safety records under their commercial terms and legal obligations. For example, OpenAI states that standard API safety logs may be kept for up to 30 days and are not used to train its models unless the customer opts in. We require service providers handling personal information for us to protect it and use it only for the service they provide.

04

Why we use this information

We use it to authenticate your account, create and deliver the video you request, verify purchases, maintain your video library, send optional service notifications, answer support requests, prevent abuse and meet legal obligations. We do not sell personal information, show third-party advertising or track people across other companies’ apps and websites.

05

How long we keep information

Account and purchase records are kept while your account is open and, where necessary, afterwards for refunds, fraud prevention, accounting or legal obligations. Support correspondence is kept only as long as reasonably needed to resolve and document the request. Backups and provider safety logs may take a limited additional period to expire.

06

Sharing and international processing

We share information only with Apple and the service providers identified above, or when required by law. Some providers process information outside the United Kingdom. Where data-protection law requires it, we use recognised safeguards intended to preserve an equivalent level of protection.

07

Security

We use encrypted network connections, access controls and account-scoped video access. No internet service can promise absolute security, but we limit what we collect and automatically remove source data when it is no longer needed.

08

Your choices and rights

• Delete an individual video from My Videos.
• Delete your account, videos, device tokens and remaining credits from Settings.
• Turn notifications off in iOS Settings.
• Choose whether to save a finished video to Photos; the app requests add-only access and does not read your library.
• Ask us for access, correction, deletion, restriction, portability or to object where applicable under data-protection law.

You may also complain to your local data-protection authority. In the UK, this is the Information Commissioner’s Office.

09

Changes to this policy

We may update this policy when the app, providers or legal requirements change. The effective date at the top will show when the latest version took effect.