Privacy Policy

Last updated: 11 June 2026 · Hush Hollow (hushhollow.ca)

1. Who we are 2. What we collect 3. Children's information & COPPA 4. Your voice recording (biometric data) 5. How we use it 6. Who we share it with 6a. Cookies & analytics 6b. Processors & transfers 7. How long we keep it & deletion 8. Your choices & rights 9. Contact us

1. Who we are

Hush Hollow ("we," "us") provides a subscription that emails a personalised bedtime story for your child each evening — as text and as audio narrated in a voice you choose: our warm house voice, or, on the In Your Voice tier, the cloned voice of a parent or family member created from a recording made with explicit consent (see §4). We are an email-native service: there is no app and no login account. Your email address is your account identifier.

2. What we collect

Your account email — to deliver stories and to identify your account.
Billing details — handled by our payment processor (Stripe). We do not store your full card number; we keep a customer/subscription reference and status.
Your child's first name — and, optionally, one companion name (a sibling, a best friend, a pet, or a favourite stuffy) to write into the stories. We may also keep a broad age band so the story fits their age. We deliberately do not collect a child's surname, photograph, address, precise location, or contact details.
Your voice recording — the sample you record, and the synthetic voice profile derived from it (see §4).
Delivery & reply data — the stories sent to you and the content of replies you send (you change your settings by replying to story emails).
Basic technical data — limited logs needed to operate and secure the service.

3. Children's information & COPPA

Hush Hollow is purchased and operated by a parent or legal guardian, who is our customer and account holder. The small amount of information about a child is provided by that adult, who consents to its collection and use as described here.

We rely on a verifiable-parental-consent approach: the adult provides the child's details and consents during sign-up, and the paid card transaction supports verification of adult identity.
We data-minimise for children — only what a gentle bedtime story needs (a first name and a few preferences), never a photo or contact details for the child.
We do not show a child behavioural advertising and do not knowingly sell children's personal information.
A parent may review, change, or delete their child's information at any time by replying to any story email or contacting us (§9).

4. Your voice recording (biometric data)

If you choose a voice tier, you may record a sample of your own voice. Where a voice provider permits it, a consenting family member may provide their own voice through the provider-approved process. From the recording we create a synthetic narration voice profile used to read your account's stories aloud.

A voiceprint/voice profile may be treated as biometric information under laws such as the Illinois Biometric Information Privacy Act (BIPA). You provide separate, explicit consent for voice capture and synthesis at recording time.
Your voice recording and derived profile are used only to narrate stories for your own account. We do not use them to train Hush Hollow general-purpose models, sell them, publish them, or add them to any public voice library.
If we use a specialist voice provider such as ElevenLabs to process or render a voice, we send only what is needed for that voice service, collect explicit consent at recording time, and link to that provider's terms and privacy policy before upload.
You may delete your voice at any time. On request, we delete the original recording and the derived voice profile; we may retain minimal records needed for legal or billing purposes.

5. How we use information

To write and personalise your child's nightly story.
To render audio in the voice you selected and email it to you.
To process your subscription and handle replies (changes, cancel).
To keep the service working, safe, and to comply with law.

We share only with service providers who help us operate, under contract and only as needed — for example a payment processor (billing), an email delivery provider, and, if you choose a voice tier, a voice technology provider. Where any sharing of a child's personal information or voice recording with a third party would occur, we obtain separate parental consent first. We do not sell personal information. We may disclose information if required by law.

6a. Cookies, analytics & advertising

Our website uses a small number of cookies and similar technologies, in two groups:

Essential — needed for the site and checkout to work: Stripe's payment pages, your currency choice, and your cookie choice itself. These are always on.
Optional — analytics & marketing — Google Analytics 4 (Google LLC) helps us understand how visitors use the site, and the Meta Pixel (Meta Platforms, Inc.) measures whether our advertising works. These are off by default: they set no cookies and collect nothing unless you choose Accept in the cookie banner, and you can accept or reject each group separately under Manage choices.

You can change your mind at any time via the Cookie preferences link (also in the footer of every page). Withdrawing consent stops the trackers and removes their cookies from this site. Rejecting optional cookies does not limit the website or the service in any way.

We do not use analytics or advertising trackers on the pages where you set up your child's profile, record a voice, or listen to your stories, and no analytics or advertising data is linked to your account or your child's information.

6b. Our service providers & international transfers

Hush Hollow is operated from Canada. The service providers (processors) we rely on, and where they may process data, are:

Stripe — payments and subscription billing (United States).
Resend — email delivery (United States).
Cloudflare — website hosting and content delivery (global network, headquartered in the United States).
Google LLC (Google Analytics 4) and Meta Platforms, Inc. (Meta Pixel) — website analytics and advertising measurement (United States), only if you consent (§6a).
A specialist voice technology provider — only if you choose a voice tier and give the separate voice consent described in §4 (United States).

This means some personal information may be stored or processed outside Canada (in particular in the United States), where it is subject to the laws of that jurisdiction. We use providers under contractual safeguards and share only what each one needs to do its job. Questions about our processors or transfers: contact us (§9).

7. How long we keep it & deletion

We keep information only as long as needed to provide the service and meet legal obligations. When you cancel, you may ask us to delete your child's profile and your voice data; we will do so, retaining only minimal billing/legal records. Voice data deletion is described in §4.

Story audio is kept briefly, on purpose. Each night's personalised audio is hosted for about 10 days so you can listen and download it to keep, then we delete our copy and the link stops working. Hush Hollow is not a permanent archive of your child's stories — anything you'd like to keep, please save it from the email while the link is live. (Our reusable, non-personalised "house" recordings are retained as part of the library.)

8. Your choices & rights

Access / correct / delete — reply to any story email or contact us.
Withdraw consent — including deleting your voice, at any time.
Cookie choices — accept, reject, or change analytics/marketing cookies any time via Cookie preferences (§6a).
Cancel — reply "cancel"; renewal is cancelled at the period's end, and your purchase stays valid until then.
Depending on where you live, you may have additional rights under PIPEDA, GDPR, or U.S. state privacy laws. Contact us to exercise them.

9. Contact us

Questions, requests, or deletions: [email protected]. We aim to respond within a few days.