Privacy Policy

The short version

Someday exists so a father’s voice reaches his children someday. Trust is the entire product, so our data practices are simple and we state them plainly:

• We never sell your personal information, your recordings, or your children’s information.
• We never use your recordings or your family’s information for advertising, or to train AI models — ours or anyone else’s. Ever.
• We don’t do voice identification. Your recordings are messages, not biometrics — we do not create voiceprints and will not permit voice-based identification from your content.
• Your recordings are yours, encrypted, exportable to storage you control, and yours to keep regardless of whether you pay us.
• We collect the minimum needed to run the Service, and children are never our users — you tell us about your kids; they don’t tell us anything.

The rest is detail.

1. Who we are

The Service is operated by Hypera Venture Inc. (“we,” “us”), the company behind Someday and the Stedhaven brand. Contact: hello@stedhaven.com · 1509 Avenida de Nogales, San Clemente, CA 92672.

2. What we collect

Account information (from you): name, email, sign-in credentials (via Sign in with Apple or Google — we receive a token, not your password), and, if you receive physical products, a shipping address.

Information about your children (from you, the parent): a first name and birthdate for each child, which you provide to personalize the Service and to control when messages become available. Your children are not users and do not provide us anything. You confirm you’re their parent or legal guardian when you enter it.

Your content: voice recordings and the details you attach to them (titles, recipients, categories, availability settings). Recordings are encrypted at rest. Content is private to your account and to the people you designate through the Service’s access features.

Payments: processed by Apple (in-app) or Stripe (web). We never receive or store card numbers. We receive confirmation details (that a payment succeeded, membership status, billing contact info you provide).

Automatic data: standard device and usage data (device type, OS version, app version, IP address, crash logs, and in-app events like “a recording was saved” — event data describes actions, not content; we do not analyze the audio of your recordings for analytics). Our marketing website uses cookies and, with your consent where required, analytics and advertising tags (currently Google Analytics, Meta Pixel, Reddit Pixel). The app itself contains no advertising trackers.

Future access flows: the Service lets people you designate — typically your children, possibly years from now — access an archive after completing verification steps you configure (for example, using a physical coin plus details only your family knows). During that flow we process the verification inputs (such as a birthdate entry and an answer you set) solely to verify access.

What we deliberately do not collect: contacts, precise location, photos (unless a future feature asks and you grant it), advertising identifiers in the app, or anything from your children directly.

3. How we use information

• To provide the Service: store, encrypt, back up, and deliver your recordings; run memberships; ship physical products.
• To personalize: suggest prompts and time features using details you gave us (like a child’s age).
• To communicate: service messages (receipts, trial reminders, shipping notices) and, if you opted in, product news — every marketing email has an unsubscribe link and our mailing address.
• To keep the Service safe: security, fraud prevention, debugging.
• To comply with law.

We do not: sell personal information; use your content or children’s information for advertising; use your content to train AI/ML models; build voiceprints or biometric identifiers; or make automated decisions with legal or similarly significant effects about you.

4. How we share information

Only with service providers who help us run the Service, under contracts limiting their use to providing services to us:

• Hosting and storage — encrypted storage and infrastructure.
• Apple / Stripe — payments.
• Email provider — service and (opt-in) marketing email.
• Analytics — event analytics as described above.
• Fulfillment/minting partners — to make and ship physical products, they receive your name and shipping address only; they never receive recordings, children’s information, or access codes tied to identity.
• Your own storage, at your direction — when you export or connect your archive to storage you control (like your Google Drive), we transmit your content there because you told us to; what happens in your storage is governed by that provider and you.

We may disclose information if required by law, to protect rights and safety, or in a corporate transaction — and any successor takes user content subject to the promises in this policy and our Terms (no sale, no advertising use, no AI training).

Some state laws treat website advertising cookies as “sharing” for cross-context behavioral advertising. Our marketing site’s ad tags fall in that bucket; you can opt out (see §6). The app itself does no such sharing.

5. Retention and deletion

• Content: kept as long as your account exists — including if you stop paying (your archive stays yours and retrievable; see our Terms). Deleted recordings enter a ~30-day recovery window, then are permanently deleted.
• Account deletion: deletes your archive and personal information, subject to the recovery window and any legal retention obligations. Export first — we will remind you.
• Payment and order records are kept as long as law and accounting require.
• Marketing-list data: until you unsubscribe.

6. Your rights and choices

Depending on where you live (including under California’s CCPA/CPRA), you may have rights to know/access, delete, correct, and opt out of “sale”/“sharing” of personal information, and to non-discrimination for exercising them. We don’t sell data for money; to opt out of ad-cookie “sharing” on the website, use the site’s cookie controls, enable Global Privacy Control (we honor it), or email us. To exercise any right: hello@stedhaven.com. We may verify your identity first.

You can also, at any time, in-app: export your archive, delete recordings, delete your account, and manage notification and email preferences.

7. Children’s privacy

The Service is for adults 18+. Children are not permitted to create accounts, and we do not knowingly collect personal information from children. Information about your children (first name, birthdate) is provided by you, their parent or legal guardian, for the Service’s family features. Future access flows may be used by your child (including as a teenager) with the setup and consent you provide as their parent. If you believe a child has provided us information directly, contact us and we will delete it.

8. Security

Recordings are encrypted at rest and in transit. Access within our company is limited and logged. Payment data never touches our servers. No system is perfectly secure, but protecting your family’s recordings is the core engineering commitment of this product — and your ability to export your own copies means your archive never depends solely on us. If a breach affects your personal information, we will notify you as required by law.

9. International

We operate from the United States and the Service is offered in the US. Information is processed in the US.

10. Changes

We’ll post updates with a new effective date and give notice of material changes before they take effect. The core promises in “The short version” will never be weakened by an update.

11. Contact

Hypera Venture Inc. · 1509 Avenida de Nogales, San Clemente, CA 92672 · hello@stedhaven.com