Privacy Policy for Elfventure
Last updated: 27 October 2026
Elfventure ("the app", "we", "us", "our") is made and operated by Ashley Bennett, trading as Saassy SaaS, in the United Kingdom. We are the data controller for the app. You can contact us at support@saassy-saas.com.
This policy explains, in plain words, what the app does with information about you and your children. It applies to the Elfventure app on iOS and Android.
1. The short version
- No accounts. You never sign up, log in or give us an email address to use the app.
- Almost everything stays on your phone. Your children's first names, your PIN and the cards, videos, voicemails, photos and stories you keep are stored only on your device.
- Some things are sent away to be made, then not kept by us. When you ask the app to make a video, a picture, a voice message, a video call or a reply from Father Christmas, only the photo or words needed for that one item are sent through our secure server to the specialist service that produces it. Our server passes them on and does not keep them, with one exception described in section 5 (the video-call greeting clip).
- No adverts, no tracking, no analytics, and we never sell data.
2. Who the app is for
Elfventure is a tool for parents and carers. The Parent Portal is protected by a PIN that the parent sets, and optionally by the phone's own Face ID, Touch ID or fingerprint unlock. Children only see Kid Mode, where they watch, listen to and read what their parent has prepared. In Kid Mode a child cannot upload photos, record anything, make purchases or contact anyone.
For older children a parent can switch on a short, moderated text chat with Father Christmas (section 4). We do not knowingly collect personal information directly from children other than those messages, which a parent has chosen to enable and can read in full in the Parent Portal.
3. Information that stays on your phone
| What | Why | How long |
|---|---|---|
| Your PIN (stored in scrambled form, never as the digits themselves) | To keep the Parent Portal private | Until you change it, reset the app or delete the app |
| Your children's first names (or nicknames) and the elf each child chose | To personalise cards, voices, calls and Kid Mode | Until you delete the child, use Delete everything, or delete the app |
| Cards, videos, voicemails, calls, photos and story audio you keep | So you and your children can enjoy them again | Until you delete them, use Delete everything, or delete the app |
| Chats with Father Christmas and the Christmas list (older children only) | So you can read every chat and see what your child wished for | Until you delete them, use Delete everything, or delete the app |
| Your coin balance and purchase history | So the app knows what you can make | Until you use Delete everything or delete the app |
| Which Kid Mode items have been opened, kindness stars, reminder and call schedules | To run Kid Mode and local notifications | Until you use Delete everything or delete the app |
The app never asks for your location, your contacts or your calendar. It never uses the microphone: nothing in the app records sound. If you turn on Face ID, Touch ID or fingerprint unlock, that check is done by your phone; the app never receives or stores your face or fingerprint.
Photos you choose for the app are made smaller and stripped of embedded details such as location and camera information on your phone before anything else happens to them.
4. Information that is sent away, and why
Nothing is sent anywhere until you choose to make something, and the app asks you to confirm before a photo is sent for the first time. You can withdraw that agreement at any time in Settings and privacy → AI features, after which the features that send data are switched off and the rest of the app keeps working.
| When you… | What leaves your phone | Where it goes |
|---|---|---|
| Make an elf video, a doorbell video, an "Animate My Elves" clip, a sleigh video or an evidence picture | One photo you chose (already shrunk and stripped of location details), plus the elf and action you picked | Our secure server, then a specialist image or video generation service |
| Make a voicemail, a video call or a video with a spoken message | The words of the message, the voice you chose and, if you include it, your child's first name | Our secure server, then a text-safety check and a specialist speech generation service |
| Save or share a video that has a spoken message | The finished clip and its voice track, combined into one file | Our secure server, then a specialist media processing service |
| Let an older child message Father Christmas | The child's short typed message | Our secure server, then a specialist text generation service that writes the reply |
| Download bedtime stories you have bought | Nothing about you; the app fetches our pre-recorded audio | Our secure server |
Our server exists to check each request, forward it, and return the result to your phone. It keeps no copy of your photos, words, audio, videos or chat messages, and it holds no database of families, children or phones. The only thing it stores is described in section 5.
The specialist services. We use a small number of established third-party artificial-intelligence and cloud providers, acting as our processors, to generate images, video, speech and text and to run our server. They receive only what is needed for the one item you asked for, process it on our instructions, and may hold it briefly for the time it takes to produce and deliver the result and for routine abuse prevention. We have chosen settings that stop these providers using your content to train or improve their models wherever such a setting is offered, and none of them receives your name, email address, phone number, purchase details or any identifier for you or your device. A list of the categories of provider we currently use is available from us on request; we do not publish their names here because the mix of services we use is part of how the app works and may change between seasons.
Where data is processed. Our server runs in the United Kingdom and Europe. Some of the specialist services are based in, or process data in, the United States and other countries outside the UK. Where personal data leaves the UK we rely on safeguards recognised under UK data protection law, such as the UK International Data Transfer Agreement or Addendum, or the UK Extension to the EU-US Data Privacy Framework for providers certified under it.
5. The one thing our server keeps: video-call greeting clips
A child's first name is spoken once in their video-call greeting. The first time a particular first name is used, our server produces a short clip of that greeting and keeps it so that the same clip can be reused for other children with the same first name. This keeps calls quick and affordable.
The clip is filed under a scrambled form of the name together with the character, accent and script line only. Nothing stored with it says which family, child or phone asked for it: there are no accounts, and no device or purchase identifier is sent with the request. The clip is not linked to you, your child or your phone, and because it serves every child who shares that first name it is not deleted on request. If you believe you entered something other than a first name by mistake, such as a full name or other sensitive information, email us at support@saassy-saas.com and we will review it and remove it where appropriate, case by case.
6. Purchases
Elfventure uses coins, bought as one-off in-app purchases. Payments are taken entirely by Apple (App Store) or Google (Google Play) under their terms; we never see your card details.
To confirm that a purchase was genuine and to credit your coins, the app uses a third-party purchase-validation service. That service receives a random identifier generated by the app (not your name, email address or phone number), the purchase receipt from Apple or Google, and basic device information such as platform and app version. It does not receive anything about your children or what you make. Coins stay on the phone they were bought on.
7. Notifications
Reminders and scheduled video calls are local notifications, planned and shown by your phone. No push-notification service is used, and nothing about your notifications leaves your device. You can turn them off in your phone's settings or in the app.
8. Safety checks
The words of every voicemail, call and video message are checked for clearly unsafe content on your phone and again by an automated safety check before a voice is made. Messages a child sends to Father Christmas, and the replies, are checked the same way. Requests that fail a check are not made, and no coins are used. Every item the app makes carries a Report this option in the Parent Portal; a report sends us only the item you are reporting and your description of the problem.
9. What we do not do
- We do not show adverts.
- We do not use analytics, tracking, advertising identifiers or crash-reporting services.
- We do not sell, rent or share personal data for anyone else's purposes.
- We do not use your photos, your words or your children's names to train artificial-intelligence models, and we have chosen provider settings that stop our providers doing so wherever that choice exists.
- We do not contact you or your children: the app has no accounts, no email list and no messaging.
10. Why we are allowed to use this information (lawful basis)
We process the photos and words you send only to provide the item you asked for: this is performance of our contract with you (UK GDPR Article 6(1)(b)). Where a message includes a child's first name, you choose whether to include it and can leave it out for any message. Keeping the greeting clips of section 5 and running safety checks are in our legitimate interests (Article 6(1)(f)) in providing a fast, affordable and safe service, and we have designed both so that they cannot be linked to any person.
11. Your rights
Because almost everything is on your own phone, you are in control of it:
- See it: everything the app holds about your family is visible in the app.
- Delete it: delete single items, a child's profile, or use Settings and privacy → Delete everything. Deleting the app also removes everything on the phone. See also our data deletion page.
- Ask us: you can contact us about any right under UK data protection law, including access, correction, deletion, restriction, objection and portability, at support@saassy-saas.com. For purchase-validation records, tell us the random identifier shown in Settings and privacy or send your store receipt and we will arrange deletion.
You can also complain to the UK Information Commissioner's Office at ico.org.uk or on 0303 123 1113.
12. Children's privacy
The app is designed to follow the principles of the UK Age Appropriate Design Code: no profiling, no nudges to share more, no tracking, data kept to the minimum needed, and a parent-only area for anything that sends data away. A parent controls whether the older-children features are switched on and can read every chat. If you believe a child has given us personal information directly, contact us and we will help remove it.
13. Security
Everything sent between the app and our server is encrypted in transit. Your PIN is stored only in scrambled form in your phone's secure storage. Our server holds no accounts and no family data, which is the simplest protection of all.
14. Changes to this policy
If we change this policy we will update the date at the top. For meaningful changes we will tell you in the app before they take effect.
15. Contact
Ashley Bennett, trading as Saassy SaaS, United Kingdom. Email: support@saassy-saas.com. We aim to reply within two working days.