Privacy Policy

1) What This Covers

• Landing page & waitlist. If you provide an email address to be notified about launch or updates.
• Product. If you purchase or use My Safety Song to generate a personalized song.

This document is intended to be legally accurate yet concise. If anything is unclear, contact us at .

2) Who Controls Your Data

Controller: My Safety Song, Cambridge, MA, USA (“Controller”). We determine the purposes and means of processing your personal information for the website, waitlist, and product.

3) Information We Collect

3.1 From the Coming-Soon / Waitlist Page

• Email address (required) — to notify you about launch, access, and service updates.
• Optional fields — any additional details you choose to provide (e.g., name, feedback).

3.2 From the Product

• Parent/guardian details — name and email for account, delivery, and support.
• Child personalization details — e.g., first name or nickname, and optional content you choose to include for the song (e.g., memorable contacts, city, lyric hints). Provide only what you are comfortable including in lyrics.
• Transactional data — purchase records, fulfillment status, and related support communications.
• Technical metadata — basic device and interaction logs strictly for security, fraud prevention, and reliability (e.g., time of request, IP at request time). We do not use third-party advertising trackers.

We do not intentionally collect precise geolocation, sensitive health data, or information unrelated to providing the service. If you provide information about a child, you confirm you are the child’s parent or legal guardian and consent to its use solely to create and deliver the song you requested.

4) How We Use Information

• Create, process, and deliver personalized songs you request.
• Operate and secure the website and product (e.g., troubleshooting, preventing abuse).
• Provide support, respond to inquiries, and communicate essential service messages.
• Comply with applicable law, legal process, or enforceable governmental requests.

We do not sell your data and we do not use third-party advertising cookies.

5) Processing by Service Providers (Including AI Generation)

To operate our service, we share limited information with carefully selected processors who act on our instructions and may only use the data to provide the contracted service to us. These include:

• AI text/audio generation providers used to create your personalized song. For this purpose, we securely transmit only the data needed to generate the requested output (for example, the child’s first name/nickname and any lyric prompts you provide). These providers are bound by contractual terms restricting use of your data strictly to generating the song.
• Multiple providers may be used. This may include, but is not limited to, the ChatGPT service provided by OpenAI and other comparable AI generation vendors. We do not guarantee use of a single provider.
• Infrastructure & delivery (e.g., hosting, object storage, email transport).
• Payments (if/when applicable) for processing transactions and preventing fraud.

Where required, we maintain data processing agreements (DPAs) with our processors. International transfers may occur (e.g., to the United States); where applicable, we rely on appropriate safeguards such as standard contractual clauses.

6) Legal Bases (EU/EEA/UK)

• Consent — joining the waitlist; providing personalization content for a song.
• Contractual necessity — creating, delivering, and supporting your purchased song.
• Legitimate interests — security, fraud prevention, service maintenance, and reliability (balanced against your rights and expectations).

7) Retention

• Waitlist emails — retained until you request removal (see §10) or until launch communications conclude.
• Order and song data — retained as long as needed to provide the service, resolve disputes, meet legal, tax, and accounting obligations, and maintain legitimate business records.

8) Children’s Privacy

The product is intended for parents and legal guardians. We do not knowingly collect personal information directly from children without verifiable parental consent. If you believe a child provided information to us without such consent, please contact so we can delete it.

9) Your Rights

Depending on your jurisdiction (e.g., GDPR in the EEA/UK, CCPA/CPRA in California), you may have rights to:

• Access, correct, or delete personal information we hold about you.
• Object to or restrict certain processing, and/or withdraw consent where processing is based on consent.
• Receive a portable copy of your data.

To exercise any of these rights, email . We may take reasonable steps to verify your identity before fulfilling requests.

10) Communications & Unsubscribe

We may send you essential service emails (e.g., delivery, receipts, policy updates). We do not send third-party advertising. If you joined our waitlist or otherwise receive non-essential updates from us and wish to stop, please email and ask to unsubscribe. We do not use automated unsubscribe links.

11) Security

We implement reasonable administrative, technical, and physical safeguards (e.g., HTTPS transport, access controls, and secure storage). However, no method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

12) How We Share Information

• Service providers/processors as described in §5.
• Legal, safety, and compliance — if required by law or to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to continued protections consistent with this Policy.

We do not sell your personal information.

13) International Data Transfers

Your information may be processed in countries outside your place of residence (including the United States). Where required, we rely on appropriate safeguards (e.g., standard contractual clauses) to protect personal data during cross-border transfers.

14) Cookies, Ads, and “Do Not Track”

We do not use third-party advertising cookies or cross-site tracking beacons. Browser “Do Not Track” signals are not standardized; while we do not track for advertising purposes, we may still perform basic, privacy-respecting logging strictly for security and reliability.

15) Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the “Last updated” date above and, where appropriate, by additional notice (e.g., email or website notice) before changes take effect.

16) Contact

My Safety Song Cambridge, MA, USA Email: