Privacy Policy

1. Responsible Entity and Legal Basis

The entity responsible for data processing under the revised Swiss Data Protection Act (nDSG) is Guetnachtschatz.ch. This privacy policy transparently informs you about the collection, processing, and use of your personal data, especially your children's data.

2. Personal Data Collected

We collect and process the following personal data:

• Parent Account Information: Email address, name, encrypted password
• Children's Data: First name, age, gender, character traits, favorite color
• Avatar Descriptions: Features you define such as hair color, eye color, skin tone, hair length for avatar creation (no photographs)
• Content: Story prompts you create and generated stories including AI-generated illustrations
• Payment Information: Processed exclusively by our PCI-DSS-certified partner Stripe. We do not store credit card information.
• Usage Data: Technical data such as IP address (anonymized), device information, access times

3. Purpose and Legal Basis of Data Processing

Your data is processed exclusively for the following purposes:

• Contract Fulfillment: Generation of personalized children's stories based on your specifications
• Avatar Creation: Processing of your text descriptions for AI-assisted generation of an individual avatar image of your child
• Payment Processing: Processing of premium subscriptions through our partner Stripe
• Service Communication: Important updates, security notices, and support requests
• Legal Obligations: Fulfillment of statutory retention and disclosure obligations

4. Use of Artificial Intelligence and Third Parties

We use external AI services to generate personalized stories, images, and audio recordings. We place great value on transparency:

5. Data Security and Technical Measures

We implement comprehensive technical and organizational measures to protect your data:

• Encryption: All passwords are hashed with bcrypt. Data transmission occurs exclusively via TLS/HTTPS.
• Access Control: Row Level Security (RLS) in the database ensures that users can only access their own data.
• Data Storage: All avatar descriptions and stories you create are stored encrypted in your private account.
• Deletion: You can permanently delete all your data at any time, including avatar descriptions, stories, and generated images.
• Backup: Regular encrypted backups with geographic redundancy.

6. Child Safety and Parental Responsibility

Guetnachtschatz is exclusively intended for legal guardians. We do not knowingly collect data directly from children. Use of our platform by children is only permitted under supervision and with express consent of legal guardians.

• All generated content goes through automatic content filters to ensure age-appropriate material.
• Parents can report inappropriate content at any time.
• You can delete or export all of your child's data at any time.

7. Disclosure and Sale of Data

We never sell your personal data or your children's data. Disclosure occurs only in the following clearly defined cases:

• Service Providers (Processors): AI providers for story generation, hosting provider (Supabase), payment service provider (Stripe). All service providers are contractually obligated to process your data only according to our instructions.
• Legal Obligations: Only when legally required (e.g., official order).
• With Your Consent: If you explicitly agree to the disclosure (e.g., when sharing a story with third parties).

8. Your Rights under nDSG

You have comprehensive rights under the revised Swiss Data Protection Act:

• Right to Information (Art. 25 nDSG): You can request information at any time about what data we have stored about you and your children.
• Right to Correction: You can have incorrect or incomplete data corrected at any time.
• Right to Deletion: You can permanently delete your account and all associated data (including children's profiles, stories, photos) at any time.
• Right to Data Portability: Export your stories as PDF or structured data exports upon request.
• Right to Object: You can object to the processing of your data at any time or withdraw your consent.
• Right to Complain: You have the right to file a complaint with the Federal Data Protection and Information Commissioner (FDPIC).

To exercise your rights, contact us at privacy@guetnachtschatz.ch

9. Data Retention and Deletion

Your data is only stored as long as necessary for the purpose:

• Avatar Data: The avatar descriptions you create remain stored in your account and can be deleted by you at any time.
• Stories and Children's Profiles: Remain stored as long as your account is active.
• After Account Deletion: All personal data will be completely and permanently deleted within 30 days.
• Legal Retention Periods: Payment data is retained for tax purposes for 10 years (anonymized).

10. Cookies and Tracking

We use only technically necessary cookies to maintain your login session and platform security. We do not use tracking cookies, analytics tools, or third-party advertising cookies. Your usage is not evaluated for marketing or profiling purposes.

11. Changes to this Privacy Policy

This privacy policy may be updated when our service or legal framework changes. For significant changes, we will notify you by email at least 30 days in advance. The current version is always available on our website.

12. Contact and Data Protection Officer

Responsible for data processing:

For questions, concerns, or to exercise your data protection rights, you can contact us at any time. We will respond to your request within 30 days.

13. Supervisory Authority

For complaints, you can contact the Federal Data Protection and Information Commissioner: