Privacy policy
In short: we keep nothing about your child. What you tell us is only used for the call, stays on your device (phone, tablet or computer) before the call, and is neither recorded nor kept by us afterwards. We never record the call, and only the microphone is used: Saint Nicholas never sees your child. If you tick « Keep a souvenir video of the call », this video is made on your device during the call and is never sent to us: you decide whether to save it or send it to your family. If you also tick « Film my child too », your device's camera films your child for this video, and takes four photos during the call that you can put on their diploma: their image stays on your device (and disappears when you close the page, except what you save), is sent neither to Saint Nicholas nor to us, and the camera turns off at the end of the call. At the end of the call, Saint Nicholas (or Santa) gives you his little notebook: two to four sentences about what your child told him, for a next call. The AI writes it from the conversation; it is sent only to your screen, kept on your device, and never stored by us. The notebook's link holds the notebook itself, after the « # » sign, a part that is never sent to our server. You can send it to yourself, change it or erase it. A call with an alert gets no notebook.
Video message: what you write for the message (first name, age, little details) stays on your device until the recording, is only used for Saint Nicholas to say his message, and is not kept by us. The video is made on your device and never sent to us.
Which data, why, for how long
| Data | Why | Who processes it | How long |
|---|---|---|---|
| The child's first name and age, what you write in the form | So that Saint Nicholas talks to your child personally | Kept on your device (browser) until the call; sent during the call to our call server and to the AI that runs the conversation | Deleted from your device when you close the tab; we do not keep it. At Anthropic: deleted after 30 days at most, never used to train an AI. |
| The child's voice during the call | Turning what they say into text, live, so that Saint Nicholas can answer | Deepgram (speech recognition), with the « no model improvement » option turned on; Microsoft Azure (speech recognition) takes over when Deepgram is unavailable or full. Both also receive the child's first name, to recognise it better when it is spoken | Not recorded by us. Deepgram does not keep it after transcription; Microsoft does not keep the sound of live speech recognition. |
| Text of the conversation | Choosing Saint Nicholas's answers, checking they are suitable for a child, showing you the conversation on screen | Anthropic (Claude, Saint Nicholas's AI); shown on your screen | Not kept by us. Anthropic deletes it after 30 days at most (a message flagged as abusive may be kept longer, for safety) and does not use it to train its models. |
| Saint Nicholas's voice and face | Making the character speak and move | ElevenLabs or Inworld (voice), LemonSlice or, as a backup, HeyGen's LiveAvatar (face). They only receive Saint Nicholas's sentences, never the child's voice or image | Saint Nicholas's sentences may contain the child's first name. ElevenLabs: we delete them after each call. Inworld (backup voice, only when ElevenLabs does not answer) never keeps the sound, but keeps the text until we ask for it to be deleted, which we do every month. LemonSlice (face) keeps them as long as our account is open; its terms rule out training its models on minors' data, and we have asked it to confirm in writing that this covers our calls. LiveAvatar (backup face): we have asked in writing how long it keeps them. |
| Your e-mail, the payment, the IP address at payment | Taking the payment, sending you the call link and the receipt, handling a refund | Stripe (payment); Mollie (backup payment, Netherlands, only if Stripe is unavailable), Resend (sending the e-mail, servers in Ireland) | As accounting law requires: 7 years for accounting records |
| Purchase in the iPhone app: Apple purchase number and number of calls started (no name, no e-mail) | Checking that the call is paid and counting the calls (2 new tries if the line drops) | Apple (payment: we receive neither your name nor your card), Supabase (database, Ireland) | The call's validity (60 days), then deleted after 1 year at most |
| « Let me know » for Santa: your e-mail and the site's language, if you ask for it | Sending you a single e-mail when Santa starts calling (basis: your consent, which you can withdraw at any time by writing to us) | Supabase (database, Ireland), Resend (sending the e-mail, servers in Ireland) | Deleted as soon as this e-mail is sent, and at the latest on 26 December if it has not gone |
| « Let me know when the line is free »: your e-mail and the site's language, if you ask for it when the line is full | Sending you a single e-mail when the line has room again (basis: your consent, which you can withdraw at any time by writing to us) | Supabase (database, Ireland), Resend (sending the e-mail, servers in Ireland) | Deleted as soon as this e-mail is sent (only a one-way hash stays for 48 hours, so we never write to you twice), and at the latest 48 hours after your request |
| News list: your e-mail, the site's language, and either the date, place and exact wording of the « send me your news » box you ticked, or the date of your last purchase | If you ticked the box: sending you our news, two e-mails a month at most (basis: your consent). If you bought a call without ticking that box or « I do not want to receive anything »: writing to you only about our next similar calls (basis: our legitimate interest, the « existing customer » rule). Unsubscribe in one click in every e-mail. If the business is ever sold or taken over, this list may be passed to the buyer, who must keep the same commitments; you will be told and can unsubscribe. | Supabase (database, Ireland), Resend (sending the e-mails, servers in Ireland) | Until you unsubscribe, and at most 3 years after your last purchase or sign-up. After you unsubscribe, only a one-way hash of the address stays, so we never write to you again. |
| « Kleeschen in Luxembourgish? » (.lu sites): your e-mail, if you ask for it | Counting interested families and sending you a single e-mail if the Luxembourgish call opens this season (basis: your consent, which you can withdraw at any time by writing to us) | Supabase (database, Ireland), Resend (sending the e-mail, servers in Ireland) | Deleted as soon as this e-mail is sent, and at the latest on 26 December |
| Technical call receipt: the Saint chosen and shown, the services used, the connection time, the number of times the child spoke (a plain number), the number of Saint's sentences checked by the safety check and the number of sentences blocked (numbers, never the sentences themselves) and the reason the call ended | Proving that the call really took place if a refund is requested or the payment is disputed | Stripe, with the payment. Never the child's first name, voice, words or image, nor the Saint's words. A copy of the same numbers, without your e-mail (the payment is only identified there by a one-way hash), is used for our statistics (Supabase, Ireland) and deleted after 13 months | Like the payment: 7 years for accounting records |
| Call number (for example 4F7K-2Q9M), shown during the call, on the souvenir video and on the diploma, with only the day of the call and how it was paid (card, gift code or app) | Being able to check that a screenshot, a video or a testimony really comes from one of our calls, and to spot a fake (basis: our legitimate interest in protecting families and the character) | Supabase (Ireland) and, for a call paid by card, Stripe with the payment. The number says nothing about the child or about you, and cannot be used to find the call link | 13 months in our list; at Stripe, like the payment (7 years) |
| Fingerprints of the Saint's sentences: each sentence the Saint says becomes an unreadable code (the child's first name is removed first). Never the sentence itself, never anything the child says | Being able to check whether a sentence put in the Saint's mouth (fake video, false testimony) was really said in a call: we can only test a sentence, not read what he said (basis: our legitimate interest in protecting families and the character) | Supabase (Ireland), filed under the call number | 30 days |
| “Did your child enjoy it?” after the call, if you answer: the face chosen (loved it, nice or not really), the page's language and, if you write it, a few words of up to 200 characters (no first names; addresses, numbers and links are masked), with your agreement or not to publish them on the site without your name. Never anything about the child or about you | Knowing whether the calls are enjoyed, and improving them (basis: our legitimate interest; answering is optional). Publishing your words on the site only if you ticked the box (basis: your consent, which you can withdraw at any time by writing to us) | Supabase (Ireland), with a one-way hash of the call link, so that only one answer per call counts. Your words also appear in our daily report, sent to our own address (Resend, Ireland) | Deleted after 13 months |
| « Withdraw from contract here »: your name, e-mail, what you bought, the reference and the details you write | Record your withdrawal, send you its acknowledgement and refund you (basis: legal obligation, right of withdrawal) | Resend (sending the e-mails, servers in Ireland), then our mailbox (OVH). Nothing is kept on the site | Kept for 3 years at most, as proof of the withdrawal and the refund |
| « Become a partner » (content creators): your name or handle, e-mail, account, platform, number of followers, audience country and your message | Answering you and, if we work together, managing the partnership (basis: your request, then the partnership contract) | Resend (sending the e-mail to our mailbox, servers in Ireland), then our mailbox (OVH) | Deleted within 3 months if we do not work together; otherwise for the partnership, then 7 years for accounting records (commissions) |
| Visit statistics: page visited (without anything after the "?" in the address), referring site, country, device and browser type. Never the call pages or the video message pages | Knowing how many families visit the site and where they come from (basis: our legitimate interest). No cookies, nothing is stored on your device | Vercel Web Analytics: the IP address is only used to count a visit once a day and is not kept | Overall figures that cannot identify you; no personal data is kept |
| IP address, technical data | Running the site and blocking abuse | Vercel (hosting), LiveKit (video connection, servers in Germany) | Vercel deletes its logs after 1 day at most. LiveKit keeps technical connection data under its own privacy policy, never the sound or the picture (we do not turn recording on) |
No data about your child is sent to Stripe, Mollie or Resend. We sell no data and do not use the conversations to train an AI. Anthropic, Deepgram and Microsoft commit not to use this data to train their models; we are asking ElevenLabs, Inworld, LemonSlice and HeyGen (LiveAvatar), which only receive the Saint's sentences, for the same written commitment.
Legal basis
We process this data to provide the call you bought (contract), and because you, the parent, choose to tell us about your child (consent, which you can withdraw by not starting the call or by hanging up). Payment data is kept for our legal obligations.
Transfers outside the European Union
Some providers are based in the United States (Anthropic, Deepgram, ElevenLabs, HeyGen, Inworld, LemonSlice, Microsoft, Vercel). These transfers rely on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Your rights
You can ask to access, correct or delete your data, or object to its use, by writing to contact@allosaintnicolas.be. As we do not keep the call data, we will usually hold nothing but your payment. You can also complain to the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels (dataprotectionauthority.be).
Cookies
The site uses no advertising or audience-measurement cookies. A single small technical cookie, « sint-lang », remembers the language you choose (FR, NL, EN, DE, IT or ES) for one year, only if you change it. It holds nothing else and is not shared. Your browser also keeps, for itself only, a few technical markers (letter already opened, preparation form in progress, place in the waiting line) that are never sent to us.
Data controller : Brice Lecrenier (Allô Saint-Nicolas), contact@allosaintnicolas.be.
Give