Privacy

The short version: we hold your email and mobile number, your child's first name and age range, and the lines Santa wrote. Nothing else.

What we never collect

No full names, no dates of birth, no exact ages, no school, no address. No photographs or files, in either direction — there is no upload path anywhere in this service, and no image column anywhere in our database. That is a deliberate design decision, not an oversight.

Your own words

When you text Santa, your message is processed in memory and then discarded. What persists is a structured tag for what happened and Santa's one-line ledger entry. We do not keep the sentence you wrote.

The AI that writes as Santa

Replies are generated by an AI model through a zero-retention endpoint: the provider does not store the content of the request and is contractually barred from using it to train models. Every reply then passes a safety filter written in code before it reaches your phone.

Safeguarding

Inbound messages are screened. Anything suggesting a child at risk is routed to a human reviewer and answered with a plain, out-of-character message carrying NSPCC 0808 800 5000, Childline 0800 1111, and 999 if a child is in immediate danger. These review records are kept separately, are not visible in your account, and cannot be deleted from it.

Keeping and deleting

Delete a child and their list and messages go with them, immediately. Delete your account and everything goes. If your subscription simply ends, we hard-delete everything sixty days later.

Marketing

We only send marketing if you ticked the box, and we record the exact wording and the moment you ticked it. Every marketing message carries a way to unsubscribe — every message, not just the first.