Privacy in the Snoezel app
This page covers the Snoezel app for parents and children. For this website and the earlier beta sign-ups, see Privacy on this website.
Who is responsible
Snoezel is provided by IamRoot BV (company number 0679.521.127), Sint-Gertrudisstraat 3, 3400 Landen, Belgium. Contact [email protected] for questions, access, correction, deletion or withdrawal of consent.
Data the app uses
For your parent account we use your email address, account ID, language, authentication information, the time and version of your consent, and when you answered the question about usage statistics and what you answered (yes or no), so that we only ask that question once. If your account has a password, Supabase manages it securely. Child profiles contain a first name, age band, chosen interests and sleep buddy, and optionally whether stories use he or she. We also store your configured evening routine and which personal stories are linked to a profile, including the period in which they were requested. This lets you replay a personal story and keeps it to one new personal story per child per month. The selected narration voice and language are also stored in the profile. We keep your app settings with your account, so they are the same on every device where you sign in with it. That covers whether the little voices and the sleep tune are on, whether the full schedule is shown, the Make it calmer settings, and whether the app may remember stories heard and whether that may also apply to your other devices. We also keep which version of the evening routine you last saw, so a change is announced only once. These settings apply to the whole account, not per child. For each child profile, we also keep with your account which library stories were started the last 50 times, whether they were played to the end and which got a heart (at most 50). For the stories started, we keep only the month, no day or time. For the hearts, we keep no date at all. This is on by default, so familiar stories come first, in the same order, on all your devices. You can switch it off in the parent settings with Also on my other devices; we then delete it from your account straight away. We do not keep personal stories or stories on sensitive themes. We do not ask for a diagnosis, date of birth, photo or recording of your child.
On your device
A few things are kept only on your own device: your sign-in, the app language, how long the night-light stays on, where you were in tonight’s routine, and after an account deletion a receipt so the app can show its status. The app also keeps a copy on the device of what is kept with your account, so everything works at bedtime even without internet. In the phone or tablet app, downloaded stories and images are also kept temporarily so they don’t have to load again at bedtime. If you allowed usage statistics, the app also remembers whether a first story has been played; we clear that when you withdraw consent or sign out. Per child profile, the app also remembers which library stories were started, whether they were played to the end and which ones got a heart. It keeps the last 50 times a story was started, without date or time. This lets familiar stories and stories with a heart come first. The app does not remember personal stories or stories on sensitive themes. By default this list is also kept with your account, as described above. If you switch off Also on my other devices, the list stays on the device and the app sends it nowhere. If you allow usage statistics, tapping a heart does count in them; the list itself never does. If you switch off Remember stories already heard, remembering stops entirely: we clear the list straight away on this device and from your account, and on your other devices as soon as they next connect. The list is also removed when you delete the profile or delete everything. We do not use any of it to track you. Signing out removes your sign-in and the list of stories heard and hearts from this device. What is kept with your account stays there, so it is back when you sign in again. The rest can stay on the device until you delete the app or clear the site data in your browser.
Why we use this data
We use it to sign you in, secure your account, save your settings and provide suitable stories and personalized audio. Your settings, and the stories heard and hearts for each child, are used only to keep them the same on your own devices. Never for advertising or emails, never for usage statistics and never to choose stories for other families. They are stored in our database at Supabase in Ireland. We send them to no other service, not to Umami and not to ElevenLabs. Nobody at Snoezel looks at them, unless you ask for a copy or we need to fix a technical problem. Technical data, such as IP addresses and access and error logs, may be processed by our hosting and authentication providers for operation and security. Snoezel has no advertisements and does not sell personal data. Personal audio may be prepared automatically from the profile, before you tap play.
App usage counts
To improve the app, we count the daily outcomes of existing requests, such as creating a profile, requesting a story, and requests concerning a personal story. The new counter holds only the day, outcome type, and total; no parent or child ID, name, precise time, or IP address. When the app requests a library story, we also count, per day, which story it was and which age group it was requested for. This shows us which stories deserve a follow-up. This story count holds only the day, the story, the age group the story was requested for and the total; no parent or child ID, name, device data, precise time or IP address. Personal stories are not counted here. Stories on sensitive themes are only counted as a group, without naming which story and without an age group. A requested story is not necessarily a story listened to: the app sometimes loads a story in advance, for example when it opens, so it starts faster at bedtime. Our overviews never show numbers below five. Per age group, we only show figures when the families we count together have at least five child profiles in that age group. This count never uses the stories heard and hearts kept with your account. The story count is removed from the active database after 35 days. These daily totals use no analytics cookie or device ID. Other daily totals are removed from the active database after 30 days; encrypted backups follow the retention period below. Existing account and profile data follow their own retention periods. The counts do not show whether audio actually started or was played to the end. We rely on our legitimate interest for this limited improvement of the service. You can object by emailing [email protected]. If your objection is upheld, new counts stop for your account. Earlier daily totals can no longer be linked to you and cannot be removed individually. On our own server we count, per day, how many families create an account, give consent, create a profile, have a story personalized or delete their account, and per week how many profiles there are per age group (only where an age group has at least five profiles). Totals only, without names, IP address or device data, sent via Cloudflare to our Umami server in the EU. In Umami we keep these totals for as long as Snoezel exists; the 30-day period above applies only to our own database. Rather not be counted? Let us know.
Feedback on a story
At the end of a library story you can tell us that something is not right. This is voluntary. We then keep your message, the kind of remark if you choose one, which story and which version it was, the language, the narration voice, the app version and the platform. We keep no parent or child ID, email address, IP address or device data with it, so the message is not linked to your account. Please do not include names or other personal details. If something personal is included anyway, we do not use it and delete it as soon as we see it. We read messages only to improve stories, pictures and voices, never for advertising or usage statistics. They are stored in our database at Supabase in Ireland. We delete them after 12 months. Because a message is not linked to your account, it is not deleted when you delete your account. To have a message deleted, email [email protected] saying which story it was about and when you sent it. We rely on our legitimate interest in improving the stories. We send the messages to no other service.
Usage statistics (only with your permission)
If you allow it, we keep track of how the app is used: for example opening the app, creating an account or profile, and which library stories or story templates were chosen, started, played to the end or failed, and which library stories got or lost a heart. For these usage statistics, we only send the type of action, the screen, the chosen library story or template, any error type, platform, app version, app language, a coarse screen class (phone, tablet, laptop or large screen, never your actual screen size) and, on a phone or tablet, the device type (phone or tablet) — never your child’s name, a parent or child ID, your email address or age group. Stories on sensitive themes are only counted as a group, without naming which story. We use Umami, which we manage ourselves on a DigitalOcean server in Amsterdam. Traffic passes through Cloudflare. Umami does not store your IP address; together with your device type, it is used to create a session code that changes every day, so you cannot be followed from one day to the next. At most, we derive your country from your IP address. Apart from these providers, we do not share these figures with anyone, and we do not use them for advertising. We keep them for no more than 25 months; after that we keep only daily totals that cannot be traced back to a person or device. You can withdraw your permission at any time in the parent settings, and we stop immediately. Earlier figures are not linked to your account and cannot be deleted separately.
Consent and control
A parent or guardian manages the account. Before creating a child profile, we ask for consent to process profile information and personal stories. You can withdraw that consent by deleting the profile or account. Account administration is necessary to provide the requested service; limited technical processing also helps secure it. By default, we keep the stories heard and hearts for each child with your account. We do not ask for separate consent for this. We rely on our legitimate interest: making the app work the same on all your devices. Rather not? Switch off Also on my other devices in the parent settings. One tap is enough. It applies to the whole account at once, and we delete what was kept with your account straight away. Each device then remembers only for itself. You can switch it back on at any time.
Service providers and transfers
Supabase provides the database and authentication; the database is in Ireland. You can also sign in without a password using a link or code sent by email. DigitalOcean hosts the app servers, and Cloudflare delivers and stores media. Resend processes sign-in emails and the occasional service email, for example when this notice changes. Never advertising. To produce personalized speech, ElevenLabs receives story text containing the submitted first name; we do not send the parent email or complete child profile for this purpose. Providers may process data outside the European Economic Area, including in the United States. These transfers are covered by the European Commission’s standard contractual clauses in each provider’s data processing agreement and, for providers certified under it, the EU-U.S. Data Privacy Framework. You can request a copy of these safeguards at [email protected]. We do not promise that all processing takes place exclusively in the EU. If you choose Google or Apple sign-in, that provider handles authentication under its own privacy terms; Snoezel receives the account identifier and email address.
Personalized audio and shared files
A personal recording may be reused for other profiles with the same first name and story settings. Some media, including personal audio, is currently delivered through public file links. Anyone with such a link can open it without signing in and may hear the first name. Deleting a profile does not remove copies that someone else has already downloaded or shared.
Retention and deletion
We keep account and profile data for your account until you delete it. Account deletion removes active account data, profiles, settings, story links, and the stories heard and hearts. Authentication and unused audio are cleaned up through a retryable background process; the app shows its status. A recording still used by another profile may remain, without its link to your deleted profile. If a story heard and kept with your account has not been started for 12 months, we delete it automatically. A heart kept with your account stays until it is removed or until you switch off Remember stories already heard or Also on my other devices. If we later mark a story as being about a sensitive theme, we also delete it from the stories heard and the hearts. Settings stay until you change them or delete your account. Deleting a child profile also deletes that profile’s stories heard and hearts. Signing out deletes nothing kept with your account.
Backups and technical records
Backups may temporarily contain deleted information. Our own encrypted database backups are normally removed after seven days; technical problems may delay this. Provider backups follow their own retention schedules. Limited technical deletion records are needed to prevent deleted data returning after a restore. We therefore do not promise that every copy disappears immediately or within seven days.
Your rights
You can always view and delete your data in the app, under Settings. You can see the stories heard and hearts in the app’s story lists, and your settings in the parent settings. If you ask for a copy of your data, it also includes your settings and the stories heard and hearts for each child. You can request access, correction, deletion or a copy of your data, and restriction or objection where applicable. Email us from your account address without including unnecessary child information. We may ask you to confirm your identity. You can also complain to the Belgian Data Protection Authority at gegevensbeschermingsautoriteit.be.