Dial Santa ("we," "us") is a parent-directed entertainment app: a grown-up sets everything up and buys minutes, and a child uses it together with their parent or guardian. This policy covers the Dial Santa iOS app and this website.
The website waitlist is for adults. If you join, we save your email address, signup date, and the consent you gave so we can send you one email when Dial Santa launches. Joining does not create an app account or purchase anything. We do not add app account emails to the waitlist automatically or use the list for unrelated marketing.
Waitlist addresses are stored in our Railway database until we send the launch announcement or you ask us to remove yours. To leave the waitlist before launch, email hohoho@dialsanta.app. Deleting an app account also removes the matching waitlist address. We briefly store a keyed, unreadable version of the signup IP address to limit spam; it expires after one hour.
You can choose your website language using the language selector. Your selection is saved locally in your browser and included in links so you can keep the same language as you browse. We do not request your location.
This section replaces the earlier website-analytics description. It applies to public marketing pages in every website language. App analytics and advertising measurement have separate controls below.
Basic Vercel Web Analytics starts automatically on eligible public pages. It measures page views, approximate visitors, referring sites, country/region/city estimates, browser and device information, and App Store button clicks. Vercel derives a visitor hash from network information and discards it within 24 hours; it is not a permanent identity. We remove URL queries and fragments from events. This measurement sets no cookies and does not record website sessions. Selecting Reject optional, saving Analytics off in Cookie preferences, or selecting Turn all analytics off, or sending Global Privacy Control or Do Not Track, stops future website analytics. Counts are estimates and may exclude blocked visits.
PostHog (US hosting) starts only after you select Allow cookies, save Analytics on in Cookie preferences, or select Allow detailed analytics. It measures page views and exits, referring domains, device/browser/operating-system information, approximate location derived from network information, navigation and App Store clicks, scroll depth, active time, video engagement, and performance. A random browser identifier and session identifier connect activity across pages and repeat visits using browser local storage. They are not linked to your Dial Santa app account. The PostHog project is configured to discard raw IP addresses.
Detailed analytics also includes click and scroll heatmaps and masked session replay of the public website. Replay reconstructs page layout and interactions; it does not record your camera, microphone or calls. Inputs and editable or designated sensitive text are masked; public marketing copy remains visible. Forms, editable areas, embedded frames, canvas, video/audio content and designated sensitive elements are blocked. Network request bodies, headers and console logs are not recorded. New replays are retained for 30 days. Checkout, confirmation and private routes are excluded. We strip query strings and fragments and do not send names, email addresses, child profiles, form entries or call content.
Earlier permission for basic counts does not authorize detailed analytics or replay: we ask again. You can change your choice using Cookie preferences in the website footer. Turning analytics off stops future collection and clears PostHog's local tracking persistence; it does not erase data already received. Browser privacy signals take priority. Anonymous website measurements are separate from app analytics, purchases and advertising. For questions or deletion requests, contact hohoho@dialsanta.app. Vercel privacy details · PostHog privacy details.
In app versions offering “Help improve Dial Santa”, this separate choice is off by default. If a parent enables it, our API sends PostHog (US hosting) selected app steps, verification and onboarding outcomes, language, selected character, referral category, call connection outcomes, optional feedback choices, and verified purchase or refund amounts, products and currencies. Random app and parent-account identifiers connect these events across sessions and signed-in devices. These identifiers are pseudonymous, not anonymous: our service can associate the parent ID with the account. Website measurement is not linked to it. We do not send names, email addresses, child profiles, form entries, call audio, transcripts, video, recordings or advertising identifiers to PostHog. There is no session replay or automatic interaction capture. Location enrichment is disabled; events reach PostHog through our server.
Turn off Help improve Dial Santa in Parents to stop future app events from that device. The account preference reaches our server when the device reconnects; already received events are not erased by turning it off. Signing out clears the local analytics queue and rotates the device’s random ID. Account deletion queues removal of the linked PostHog person and events and reports cleanup as pending until verified. Events never linked to an account may remain; contact support for data requests. Analytics records are kept for product reporting until deletion or the applicable retention period. This choice does not affect calling, purchases or access to Activities.
With your permission, this website uses the Meta Pixel to measure whether our Facebook and Instagram ads bring parents to dialsanta.app and show Dial Santa ads to people who have visited. Meta receives pages viewed, App Store button taps, browser and device information, your IP address and Meta cookies (such as _fbp and _fbc) that can last up to 90 days; Meta may link this with your Meta account under its privacy policy. We do not send names, email addresses, child profiles, app accounts, form entries or call content. Automatic advanced matching, automatic event collection and automatic configuration are off; Limited Data Use is on where it applies.
Advertising cookies stay off everywhere until you choose Allow cookies or enable Advertising cookies and save your preferences. Existing explicit permission remains valid. Reject optional turns off advertising and website analytics. Reopen Cookie preferences in the footer to change your choice; the separate Advertising measurement control also works. Global Privacy Control and Do Not Track take priority. Turning advertising off stops future sharing and clears the website's _fbp and _fbc cookies, but cannot delete cookies on Meta's domains or data already received by Meta. The Pixel does not run on checkout or confirmation pages or inside the app. Essential browser storage remembers your language and privacy choices.
The account-acceptance flow described here applies to version 1.0.2 (build 40) and later. TestFlight build 39 had AI-specific permission controls and a Parents withdrawal control; those controls are not present in build 40.
Calls are live conversations with an AI character. The parent email screen displays a linked footer: “By continuing, you confirm you have read and agree to our privacy policy, terms & conditions, and EULA.” Choosing Continue stages that acceptance; it is recorded after the same email address is verified. Existing signed-in users without a current acceptance receive Continue and Not now with the same linked footer before a call; email reverification is not required solely for that acceptance. AI data sharing and provider names are explained in this policy, without a separate AI-sharing panel in the app. iOS microphone permission is separate. Your child’s voice is processed in real time so the character can hear and respond. The camera self-view stays on your device; it is not sent to the AI providers or our servers. An optional local recording includes that self-view.
On supported calls, Record captures the call screen, including the camera self-view, and both sides of the conversation. A visible recording control lets you stop recording. Muting your microphone also mutes your voice in the recording. Recording stops when the call ends or the app goes into the background.
Recordings are temporary files on your device. Dial Santa does not upload them to our servers or use them for advertising. After the call, you can preview, delete, or choose Save to Photos. Saving requests permission only to add a video to your library, not to read your existing photos. If saving fails or permission is denied, the recording remains available on the call's end screen so you can try again.
Save a recording to Photos if you want to keep it. Unsaved recordings are removed when you discard them, leave the call's review screen after confirming deletion, or restart the app. Videos saved to Photos are controlled by your Photos and iCloud settings. Deleting your Dial Santa account does not delete videos you saved to Photos; delete those in Photos yourself.
These companies support the app. The call providers receive the following data for the stated purposes:
Provider protections include encrypted transmission and the security, access and rights commitments in their applicable terms. The data-processing terms of HeyGen, ElevenLabs, LiveKit and Daily address processing instructions, confidentiality, security and subprocessors. Their scope and retention rules differ. We never sell personal information.
We have turned off ElevenLabs’ workspace model-training preference for new submissions; this does not erase historical data. Provider permitted uses also differ. HeyGen's policy allows some non-enterprise data to be used for model training unless an applicable opt-out applies. LemonSlice's terms permit product improvement and model training; its privacy policy describes its safeguards and retention. These are not universal no-training or zero-retention commitments. Contact us for help with provider data access or deletion requests.
Dial Santa is built for parents to run. Accounts, purchases, and setup are done by an adult; a parental gate protects anything involving money, privacy controls, or leaving the app. We collect from children only what a parent enters on their behalf (like a first name), plus the real-time voice processing described above — after the parent accepts the linked account terms and privacy policy as described above. Dial Santa does not show third-party ads. Advertising measurement is accepted by the parent at sign-up, happens once after the parent's email is verified, can be turned off under Parents, and never receives child profile or call data. We follow the principles of COPPA: minimal collection, parental consent, no behavioral advertising to children, and parental control over deletion.
All traffic is encrypted in transit (HTTPS/TLS). Sign-in codes are stored only as one-way hashes and expire in 10 minutes. We keep account and purchase records while your account exists and as required for tax and accounting; call-metering records are kept only as long as needed for billing accuracy. After account deletion, we retain keyed account digests and payment references to prevent old credentials or duplicate payment notifications from restoring an erased account. Payment processors may retain transaction records. Temporary provider-erasure jobs retain the references needed to complete downstream deletion; they are removed after completion. Provider cleanup follows the limits explained above; separate technical, security or legal records may remain under provider terms.
October 7, 2026: described optional PostHog app analytics for app versions that offer the Help improve Dial Santa control.
October 7, 2026: added the Meta Pixel on this website, with a consent banner in Europe and an Advertising measurement control in the footer.
October 1, 2026: clarified AI data sharing, recipients, provider terms and retention limits; updated the account-acceptance and call-control descriptions for build 40.
September 30, 2026: added RevenueCat verification and reporting of Apple in-app purchases and customer-record deletion.
September 23, 2026: added website language preferences and clarified Apple and Stripe payment processing.
If we change this policy in a way that matters, we'll update the date above and note it on this page before the change takes effect.
September 18, 2026: added the optional website launch waitlist and how to leave it.
September 17, 2026: added one-time install measurement with Meta at sign-up and the Parents control to turn it off, and clarified that our call provider can keep call transcripts until you delete your account.
Questions, data requests, anything at all: hohoho@dialsanta.app