Data controller: Snowball Interactive Ltd
Company number: 16751259
Registered office: Flat 287, Hamond Court, Queenshurst Square, Kingston upon Thames, KT2 5FT, United Kingdom
Email: support@trysnowball.app

Snowball is a parent-directed app. Children do not create their own accounts. Parents and guardians enter information about children to personalise bedtime stories.

This policy applies to:

• The Snowball iOS app
• Our websites (including trysnowball.app)
• Cloud services that power story generation, audio, avatars, and family profiles

It does not apply to third-party services you access through links (for example, Apple’s App Store or subscription management).

We collect only what we need to run and improve the Service.

​

A. Parent / account holder information

• Apple Sign-In identifiers (to authenticate you; we may receive your name and email if Apple shares them)
• Account and subscription status (managed via Apple In-App Purchases; we do not receive your full payment card details)
• Device information (device model, operating system, app version, language/locale settings)
• App usage and analytics (screens viewed, buttons tapped, onboarding steps, feature usage, crashes and performance — see Section 8)
• Push notification tokens (if you opt in to notifications)
• Support communications (emails or messages you send us)
• Preferred story language (if you change it in Settings)
• Reading progress (e.g. how far you have read or listened in a chapter)

B. Family and child information (entered by you)

• Family name
• Child’s first name, age, gender
• Personality traits, interests, themes, activities
• Morals / life lessons / “how to” preferences
• Religion (optional — only if you choose to provide it)
• Avatar attributes (skin tone, hair, eyes, accessories, etc.)
• Generated and stored content: story chapters, titles, tags, illustrations, audiobook audio files, and related metadata
• Parent story briefs you type when creating a chapter
• Family calendar entries you add (title, date, description, and AI-generated event briefs used for story context)
• Optional adult family member details (e.g. parent/carer name, occupation)
• Personalisation memory (if enabled): short guidance derived from your inputs to keep stories consistent over time

This information is provided voluntarily by the parent/guardian.

​

C. Optional features — photos and voice (only if you use them)

Avatar from selfie (optional)

• If you choose “photo avatar,” you submit a camera photo of a face.
• The photo is sent to our servers and to OpenAI for safety checks and to generate a stylised cartoon avatar.
• We do not keep the original selfie on our systems after processing. We do store the generated avatar image linked to the relevant profile until you change or delete it, or delete your account.

Parent voice clone (optional)

• If you record your voice to narrate stories, you submit a short audio recording.
• The recording is processed on our servers (including OpenAI Whisper for verification that you read the on-screen script) and sent to Cartesia to create a voice model used for text-to-speech narration.
• We do not keep the raw audio recording on our systems after processing is complete. We do store a voice identifier linked to your profile and a voice model held by Cartesia until you replace it or delete your account.

Because voice data can be biometric data under UK GDPR, we only process it when you actively choose this feature and agree to this policy.

​

D. Guest / pre-account onboarding

Before you create an account, you may preview onboarding (including a temporary avatar). We may store:

• A device identifier and session token
• Limited onboarding choices (e.g. age, traits) needed for preview
• A temporary avatar image (subject to daily limits)

This data is linked to your device until you sign in and complete onboarding, or until it is deleted automatically or on request.

​

E. Information we do not collect

• We do not collect precise GPS location
• We do not sell your personal information
• We do not use your data for third-party advertising

We use personal information to:

Automated decision-making: Stories, images, audio, calendar briefs, and recommendations are produced using artificial intelligence. A human does not review each story before you see it. You are responsible for reviewing content before sharing it with your child (see our Terms).

We rely on different legal bases depending on the processing:

• Contract — to provide the Service you signed up for (account, stories, audio, library).
• Consent — for optional processing: religion, push notifications, voice cloning, selfie avatars, and (where required) analytics. You may withdraw consent at any time (see Section 12).
• Legitimate interests — to secure, maintain, and improve the Service, prevent abuse, and understand aggregated usage, balanced against your rights.
• Legal obligation — where we must comply with law.

For children’s information, the parent/guardian provides it and is responsible for having the right to do so.

To deliver the Service, we send relevant data to trusted processors, including:

Processors act on our instructions under data processing terms. Snowball Interactive Ltd remains the data controller.

Important: Some providers may process data in the United States or other countries outside the UK. Where required, we use appropriate safeguards (such as the UK International Data Transfer Agreement and/or EU Standard Contractual Clauses). You may contact us for more information about transfers.

We configure our systems not to send unnecessary personal data to analytics tools (for example, we do not log children’s names or story briefs in analytics).

Storage: Data is hosted on Supabase, with primary infrastructure in AWS eu-west-2 (London). Generated media (avatars, chapter images, audio) are stored in secured cloud storage.

Security: Encryption in transit, access controls, authenticated APIs, and least-privilege access for operations.

Retention:

• We keep account and family data while your account is active.
• Guest preview data is kept only as long as needed for onboarding or until deleted.
• Account deletion: You may delete your account in Settings → Delete account or by emailing support@trysnowball.app. We process deletion requests promptly (typically within 2 working days to disable access). Personal data, family profiles, stories, and stored media are removed from active systems; residual copies in backups are purged within 30 days, except where we must retain information for legal, tax, or fraud-prevention purposes.
• When you delete your account, we remove voice identifiers from our database and instruct our voice-processing partner to delete associated voice models in line with our agreement.

Analytics (Amplitude): We collect pseudonymous events (e.g. “chapter generation started”, onboarding step completed) to improve the app. We do not intentionally log children's names, story text, or calendar details in analytics.

Push notifications (OneSignal): Only if you grant permission on your device. You can turn notifications off in iOS Settings at any time.

We retain personal data only as long as necessary to provide the Service.

​

When you request account deletion:

• Your request is processed within two (2) working days.

• During this time, your account and data remain securely stored but inaccessible.

• After deletion, all personal data (including child profiles and story data) is permanently removed from active systems and backups within 30 days.

• Snowball is intended for parents and guardians aged 18+.
• Children do not register or sign in directly.
• Information about children is supplied by the parent/guardian for story personalisation only.
• We do not knowingly collect personal information directly from children under 13 (or under the minimum age in your country). If you believe we have, contact us and we will delete it.
• Parents/guardians may review, correct, or delete child-related information by updating the profile or deleting the account.

If you are in the United States, Snowball is a parent-directed service under COPPA: the parent provides child information and controls the account.

Under UK GDPR (and similar laws where applicable), you may have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict or object to certain processing
• Data portability (where applicable)
• Withdraw consent at any time (without affecting prior lawful processing)
• To exercise your rights: support@trysnowball.app. We may need to verify your identity.

You may also complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk. We encourage you to contact us first so we can try to resolve your concern.

California residents: We do not sell personal information. You may have additional rights under the CCPA/CPRA (access, deletion, correction). Contact support@trysnowball.app with “California Privacy Request” in the subject line.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via the app, email, or a prominent notice. The “Last updated” date will change. Continued use after the effective date means you accept the updated policy.

For questions, concerns, or data requests, please contact us at:

📩 support@trysnowball.app