Privacy policy

Santa Calls is operated by Carmur Labs Ltd, a company registered in Scotland. We are responsible for the personal information used by the Santa Calls website and app. Some account and sign-in screens use the name Magic Wonderland.

Contact us at support@outpack.app. This is our shared Carmur Labs support inbox; put "Santa Calls" in the subject. Our postal address is Carmur Labs Ltd, 5 South Charlotte Street, Edinburgh, EH2 4AN, United Kingdom.

This first draft describes the current preview. We are confirming the parental-consent process, provider retention and international transfer arrangements before public app-store release. We will update this notice as that work is completed.

Accounts are for parents and legal guardians. Children take part in calls with an adult present. We intentionally process the child details you supply and the speech of people taking part in a call; a parent account does not make that information adult-only data.

Only add a profile for a child you are responsible for. Share the minimum needed for the conversation. Avoid full names, addresses, school names, contact details, health information or other sensitive details in profiles and calls.

Explain to your child, in words they understand, that the app uses their voice and details to make Santa's replies and saves a written conversation. You can end a call at any time. Microphone permission and the transcript notice do not, by themselves, verify parental consent.

• Parent account: your Google sign-in identity, email, profile information supplied at sign-in and the records needed to keep your account secure.
• Child profiles: a name and any pronunciation guide, age, interests, wishes or achievements you choose to add.
• Calls: microphone audio sent for voice processing, generated replies, text transcripts, participating profiles, call references, timing, status and credit usage.
• Pronunciation: the name and pronunciation details used to suggest or play a spoken preview.
• Support and operation: messages you send us, complaint references, account-deletion requests, and technical records such as IP addresses, request times and errors.

The website's example conversation is fictional. It does not access your microphone or start a call. Viewing this website does not create a child profile.

We use account information to provide the service you request, relying on our contract with you. We use call and profile information to personalise the conversation, provide pronunciation help, calculate credit use and let you review saved text.

Security, fault investigation and complaint handling support our legitimate interests in protecting accounts, resolving problems and operating the service. Legal obligations may require us to keep or disclose specific records. Where consent is required, including for children's data, it must be obtained before that processing; this draft notice is not a substitute for that consent.

We do not sell personal information. The marketing website currently has no advertising or analytics tracking. The account service uses cookies and the app uses device storage for sign-in, preferences and recovery after an interrupted call.

Santa's voice and replies are generated by AI. Depending on the call's configuration, Inworld or ElevenLabs processes audio, conversation text and the profile details included in Santa's instructions. These services can use other model and infrastructure providers. Inworld also provides pronunciation suggestions and previews.

Amazon Web Services hosts our application data and services. Google handles Google sign-in. Mapbox supplies the web tracker map, and ElevenLabs calls use LiveKit technology for the voice connection.

Provider processing and retention are separate from the transcript copy saved in Santa Calls. We cannot promise that providers retain no audio or text. Processing may take place outside the UK or EEA. Contact us for information about the provider used for a particular call and our progress on retention and transfer checks.

Our application does not train an AI model on your conversations. Provider settings and agreements require separate verification; this notice makes no blanket promise about their training or retention practices. See Inworld's security information and ElevenLabs' privacy information.

We keep app text transcripts for 90 days from call preparation, unless you request deletion sooner or a dated complaint hold applies. A saved transcript can be incomplete or inaccurate. It is not an audio recording.

Parents can read and request deletion of saved conversations in the app. Authorised support staff can review text for a complaint, with their access recorded. A complaint hold can preserve a transcript until a stated date and temporarily prevent individual transcript deletion. Account erasure overrides an ordinary complaint hold; a necessary legal-claim hold may retain limited information until its stated date.

Expired or deleted transcripts become unavailable through the app while background cleanup removes the stored copies. Provider outages can delay upstream deletion. Backup history can retain restricted copies for up to 35 days. Operational logs have a one-month retention setting. Transcript support audits use a two-year expiry; account erasure removes attributable account support records unless a legal exception applies.

Account profiles, call history and credit records normally remain until you delete them where supported or request account deletion. A completed account-deletion receipt and limited records preventing restoration expire after 90 days. Physical deletion can lag behind expiry.

Some development builds offer an optional test-call recording on the device. That control is labelled separately. Files are removed when the call is reset or you sign out; copies you export must be managed separately. Public audio replay and sharing are not currently available.

Deleting a child profile does not delete earlier calls or transcripts. Use the saved-conversation controls to request transcript deletion, or delete your account to request removal of associated account data.

Open Settings → Delete account, or use the preview account-deletion page without reinstalling the app. You will verify your identity, confirm the request and receive a private receipt for checking its status after sign-out.

Account access is blocked when the request is accepted. Cleanup starts after a safety window and remains pending until required provider checks and removal steps finish. A request is not complete just because you have signed out. Keep your receipt private, and contact support if you need help or cannot sign in.

You can edit child profiles, manage microphone permission in device settings, stop calls and request deletion. Depending on applicable law, you can ask to access, correct, erase or receive a copy of personal information, restrict or object to processing, or withdraw consent where it is used. Contact our support inbox to make a request. We may need to verify your identity and authority to act for a child.

You can raise a concern with the UK Information Commissioner's Office or your local data-protection authority. We will date material updates to this notice and make the current version available here.