Privacy Policy

Your family's privacy is sacred to us. We build Gentle Journeys so you stay in control — of what you create and what you share.

Who We Are

Gentle Journeys creates personalized therapeutic content for children with autism, including social stories, visual schedules, and token boards. The service is operated by Sean in the United States.

Who Uses This Service

Parents, caregivers, and therapists sign up and manage accounts. They create personalized content on behalf of children. Children do not create accounts or interact with the service directly.

What We Collect

  • Account details you provide (name, email)
  • Child profile details (first name, age, and descriptions you provide)
  • Content you create (stories, schedules, token boards)
  • Optional: photos you upload and voice recordings
  • Payment data is handled by Stripe (we do not store card numbers)
  • Anonymized browsing patterns via Google Analytics, configured for child privacy compliance

How We Use Your Data

We only use your information to deliver and improve the service. We do not sell your data. We do not share it with advertisers. Specifically, we use your data for:

  • Account management and authentication
  • Generating personalized stories, schedules, and token boards
  • Processing payments
  • Sending transactional emails (password resets, confirmations)
  • Sending marketing emails (only with your consent)
  • Monitoring for errors and improving reliability
  • Understanding usage patterns through anonymized analytics

Third-Party Service Providers

We work with trusted providers to deliver the service. Here is what each provider receives and why:

OpenAI: Child first name, age, and descriptions you provide are sent to generate personalized stories, schedules, and illustrations. OpenAI does not use API data for model training. Data is retained by OpenAI for up to 30 days for safety monitoring, then deleted.

ElevenLabs: If you use GentleVoice, your voice recording is sent to create a voice clone. The clone is stored on ElevenLabs' servers and identified by a profile ID. Original recordings are deleted from our servers after cloning.

Stripe: Processes payments. Card details go directly to Stripe and never touch our servers.

Resend: Sends password reset and subscription confirmation emails. Receives your email address only.

Mailchimp: Sends welcome and marketing emails. Receives your email, name, and general usage metadata (not child information). You can unsubscribe from marketing emails at any time via the link in each email.

Supabase: Hosts our database and file storage. All data is encrypted at rest and in transit.

Sentry: Error monitoring to help us fix bugs. Captures anonymized error data with text masked and media blocked. No child names or photos are sent.

Google Analytics: Configured for child privacy compliance with advertising features disabled and restricted data processing enabled. Collects anonymized browsing patterns. No personal information is shared with Google for advertising.

Vercel: Hosts the application. Standard server logs only.

Photos

Photos help our AI understand appearance so illustrations look like your child.

  • Photos are processed in your browser to generate a text description
  • After that description is created, the original photo is discarded
  • Photos are never stored on our servers

GentleVoice (voice cloning)

  • You can record approximately 30 to 60 seconds of audio to create a private voice profile
  • Original recordings are deleted from our servers after your voice profile is created
  • Your cloned voice profile is stored securely and only usable within your account
  • You can delete your voice profile at any time from your account settings, or by emailing sean@gentlejourneys.ai

Payments

We use Stripe to process payments. Your card information never touches our servers.

Children's Privacy

We collect minimal child information: a first name and age, provided by you (the parent, caregiver, or therapist). We do not collect information directly from children. We do not require children to provide any personal information.

  • Child photos, if uploaded, are processed in your browser to generate a text description and are never stored on our servers
  • We do not use child data for advertising or marketing
  • We follow COPPA (Children's Online Privacy Protection Act) best practices

Your Rights

  • Access: You can view all data associated with your account directly in the app
  • Deletion: Email sean@gentlejourneys.ai to delete your account and all associated data. Requests are processed within 30 days.
  • Marketing opt-out: Every marketing email includes an unsubscribe link
  • California residents (CCPA/CPRA): You have the right to know what data we collect, request deletion, and opt out of the sale of personal information. We do not sell personal data.

Cookies and Tracking

We use essential cookies for authentication and session management. We use Google Analytics configured for child privacy compliance. We do not use advertising cookies or tracking pixels. We do not build advertising profiles.

International Users

Gentle Journeys is operated in the United States. If you access the service from outside the US, your information is transferred to and processed in the United States.

Data Retention

  • Your content (stories, schedules, token boards) is retained as long as your account is active
  • AI-generated narration audio is cached to reduce processing costs
  • Voice clone input recordings are deleted after processing
  • Account deletion removes all associated data within 30 days

Security

  • Encryption in transit and at rest
  • Row-level security on all database tables
  • Signed URLs for file access
  • HTTP-only secure cookies
  • Least-privilege access and strict logging

Changes to This Policy

We may update this policy from time to time. If we make significant changes, we will notify you by email.

Contact

Questions? Email sean@gentlejourneys.ai.

Last updated: February 15, 2026

Privacy Policy | Gentle Journeys