Sonacasts

Privacy Policy

Last Updated: October 9, 2026

1. Who We Are

Sonacasts is an audio service that creates stories, music and other audio content with AI. It is available at sonacasts.com and as iOS and Android apps. The service is provided by Sonacast Oy (Business ID 3582859-6, Finland), which is the data controller for your personal data. In this policy, "we", "our" and "us" mean Sonacast Oy.

This policy explains what personal data we collect, why, who we share it with, how long we keep it, and the rights you have. It applies to the website and the mobile apps.

2. Information We Collect

2.1 Information You Give Us

  • Account information: Your email address and, if you sign in with Google, Apple or Facebook, your name and the account identifier that provider shares with us. You can also sign in with a link sent to your email.
  • Profile and preferences: Language, country, listening interests and other settings you choose.
  • Child profiles: If you create stories for a child, the details you enter about them. See section 3.
  • Instructions and prompts: The topics, ideas and instructions you write to create content.
  • Voice recordings (website only): If you choose to create a custom voice, the recording you upload. Our mobile apps do not record audio.
  • Feedback and support: Messages you send us through feedback forms, content reports, the support chat or email.
  • Purchases: Your subscription plan, purchase and renewal history. Card details are handled by Stripe on the website, and by Apple or Google in the apps. We never see or store your full card number.

2.2 Information Collected When You Use the Service

  • Content and activity: Content you create, save, add to playlists or share, listening progress and history, and how much of your plan you have used.
  • Device and technical data: Device model, operating system and app version, language, time zone, IP address and, on the web, browser type.
  • Identifiers: Your Sonacasts user ID, app installation identifiers used by Firebase, and push notification tokens if you allow notifications. These are linked to your account. We do not collect your device's advertising ID.
  • Listening and viewing activity: Which stories and songs you open and listen to, and for how long, linked to your account and to the child profile in use. We use it in our own systems for your progress, your plan's listening time, popular and recommended stories, and to improve the service. It is not sent to analytics or advertising companies.
  • Usage analytics: Which screens and features you use, through Google Analytics for Firebase, only if you agree to analytics (see section 9).
  • Crash reports and diagnostics: Error logs, crash reports and performance data, used to find and fix problems.
  • Cookies (website only): Cookies needed for sign-in and security, and, only with your consent, analytics and advertising cookies.

We do not collect your precise location, contacts, photos or health data.

3. Information About Your Children

Sonacasts is for adults. Parents and other adults can create stories for children in their family by adding a child profile. Children do not have their own accounts, and we do not knowingly collect personal data directly from children.

A child profile can include:

  • The child's first name or nickname
  • Birth year and month, used to make stories suitable for the child's age
  • Interests you choose, used to make stories more personal
  • Your answers about how the child listens, if you fill them in: language level, preferred story length and excitement, and favourite books or shows. We use them only to fit stories to the child. We do not assess or label a child's development from them

We use this information only to create and organise content for that child. We do not use it for advertising and we do not send it to analytics services. When you ask for a story that uses the child's name, the name is included in the instructions sent to our AI providers (see section 6) and appears in the story itself. Personalised stories are private to your account.

If you share a child profile with family members, they can see the child profile, the content made for the child, and your display name. You can stop sharing or delete a child profile at any time in the app or on the website. Deleting a child profile also deletes the personalised content made for that child.

Please only add a child profile for a child you are the parent or guardian of, or with their parent's or guardian's permission.

4. How We Use Your Information

  • Provide the service: create, store and play your content, keep your library and progress in sync across devices
  • Manage your account, subscription, plan limits and payments
  • Send service messages, such as sign-in links, receipts and notices about your account
  • Send reminder emails, for example if you started signing up or paying but did not finish. Every such email has an unsubscribe link
  • Send push notifications you have allowed, such as when your content is ready
  • Keep the service safe: prevent abuse and fraud, verify that requests come from our genuine apps, and review reported content
  • Fix bugs and improve the service, using crash reports, listening and viewing activity and, if you agree, analytics
  • Measure our advertising on the website, if you agree to advertising cookies
  • Comply with legal obligations, such as accounting and tax law

We do not sell your personal data, and we do not show ads in our apps.

5. Legal Basis (EEA and UK Users)

  • Contract: To provide the service you signed up for, including your account, content, child profiles, subscriptions and service messages.
  • Consent: Analytics, advertising cookies and measurement, push notifications and custom voice recordings. You can withdraw consent at any time, without affecting what we did before.
  • Legitimate interests: Security, abuse prevention, crash reporting, counting listens and views to improve the service and recommend stories, and reminder emails. You can object to these (see section 10).
  • Legal obligation: Keeping accounting records and responding to lawful requests.

6. Service Providers We Share Data With

We use the following providers to run Sonacasts. They process data on our behalf and only for the purposes listed here.

  • Google Cloud and Firebase (Google): Hosting, database, file storage, sign-in, push notifications (Firebase Cloud Messaging), app integrity checks (Firebase App Check), crash reporting (Firebase Crashlytics) and app analytics (Google Analytics for Firebase)
  • Google Gemini: Generating text, audio and images from your instructions
  • ElevenLabs: Creating and using custom voices (website only)
  • OpenAI: Transcribing generated audio to create video captions
  • Stripe: Payments on the website
  • Apple and Google Play: App distribution, in-app purchases and subscriptions
  • Apple, Google and Meta (Facebook): Sign-in, if you choose to sign in with them
  • Resend: Sending email
  • Sentry: Error monitoring on the website
  • Google Analytics, Google Tag Manager, Google Ads and Meta: Website analytics and advertising measurement, only with your cookie consent. When you subscribe on the website and you have agreed to advertising cookies, we also send Meta a hashed (scrambled) version of your email address and name with the purchase event, so we can measure our ads

AI processing: Your instructions, and child profile details you choose to include in a story, are sent to our AI providers to generate your content. Under our agreements with them, they do not use this data to train their models.

We may also disclose data if required by law, to protect our rights or users' safety, or as part of a merger or sale of our business, in which case this policy continues to apply.

7. Where Your Data Is Stored and How It Is Protected

Our database, including your account and child profiles, is stored on Google Cloud in the European Union. Audio, images and other files are stored on Google Cloud in the United States, and some of our providers also process data there. For transfers outside the EU, we rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses to protect your data.

Data is encrypted in transit (HTTPS) and at rest. Access is limited to people who need it to run the service, and each user's data is kept separate. No system is completely secure, but we work to protect your data and will notify you and the authorities of a data breach where the law requires.

8. How Long We Keep Your Data and Deleting Your Account

We keep your data while you have an account. You can delete your account at any time in the app's settings. You can also request deletion without the app through our account deletion form.

When you delete your account, we immediately delete:

  • Your account, sign-in details, profile and settings
  • Your child profiles and all personalised or private content, including its audio files
  • Listening history, progress, playlists, plan usage, push tokens and email history
  • Your family sharing invitations and memberships
  • Feedback, story reports and screenshots you sent us from the app or website

Content you made public or shareable may stay available to other listeners without a link to your account. If you want it deleted too, choose full deletion in the deletion form or email us.

Deleting your account cancels website and Google Play subscriptions. Apple subscriptions must be cancelled in your Apple ID settings. We keep payment and invoice records for as long as Finnish accounting law requires (up to 10 years). Server logs that may contain your data are deleted within 30 days, and database recovery copies within 7 days. Crash reports are kept for up to 90 days and analytics data for up to 14 months.

We may remove content that breaks our Terms of Service.

9. Your Choices

  • Analytics in the apps: Google Analytics for Firebase is off until you agree. You can change this at any time in the app's settings. Counting the stories you open and listen to is part of the service (section 2.2) and stays with us.
  • Cookies on the website: Only necessary cookies until you choose otherwise in the cookie banner. You can change your choice at any time from the website footer.
  • Push notifications: Turn them off in your device settings.
  • Emails: Use the unsubscribe link in any reminder email. Service messages, such as sign-in links and receipts, are part of the service.
  • Offline data: Downloaded content is stored on your device. Clear it in your device's storage settings.

App Permissions

  • Internet and network state: To stream and sync content
  • Notifications (optional): For playback controls and to tell you when content is ready
  • Background playback: To keep audio playing when the screen is off or you switch apps

10. Your Rights

Depending on where you live, you have the right to:

  • Access your personal data and get a copy of it
  • Correct inaccurate data
  • Delete your data
  • Receive your data in a portable format
  • Restrict or object to how we process it, including processing based on legitimate interests
  • Withdraw consent at any time

To use these rights, email privacy@sonacasts.com. We reply within one month. If you are not happy with our answer, you can complain to your local data protection authority. In Finland, this is the Data Protection Ombudsman (tietosuoja.fi).

11. Age Requirement

You must be 18 or older to create a Sonacasts account. If you believe someone under 18 has created an account, or that we have collected data directly from a child, contact us at privacy@sonacasts.com and we will delete it.

12. Changes to This Policy

We may update this policy. We will post the new version here and update the date at the top. If a change materially affects how we use your data, we will also tell you by email or in the app before it takes effect.

13. Contact Us

  • Sonacast Oy
  • Business ID: 3582859-6
  • Haapaniemenkatu 16 C 320
  • 00530 Helsinki, Finland