Legal

Privacy Policy

At Once, everything is built around trust. This page explains what we collect, how we use it, and the choices your family has. This is a plain-language summary — see the full policy for detail.

Last updated: August 2026

  1. Who we are

    Once is a shared-reading service that lets a grandparent and a child read picture books together over a live audio connection, with each spoken word highlighted on the child's screen.

  2. The accounts we offer

    A parent or grandparent creates their own account with an email and password. A child account is created only by a parent, through the parent dashboard — a child never enters an email or any contact information, and never signs up on their own.

  3. What we collect

    Your email, password, and display name; a child's nickname and approximate age (set by their parent); reading-session activity (page turns, session start/end); and diagnostic data needed to keep the service running.

  4. Session recordings

    A live reading session is recorded automatically to power the read-along and recap features — this is not optional and there is currently no in-app control to turn it off for a single session. Recordings are deleted automatically: after 30 days if a child took part, after 90 days otherwise. We do not yet offer an on-demand "delete this recording" control; you can request deletion sooner from support.

  5. Voice cloning (optional)

    A family or publisher may optionally clone a voice for narration. This requires an explicit consent step from the voice's owner before any clone is created, and it can be revoked at any time — revoking deletes the clone and its stored voice samples.

  6. Child photos for personalization (optional)

    A parent may optionally upload a photo of their child so a book's illustrations can be personalized to include them. This requires the parent's explicit consent, and it can be withdrawn at any time.

  7. AI providers we use

    Several tasks in Once are powered by third-party AI providers, acting as our sub-processors under confidentiality obligations:

    • Anthropic — generating story recaps, discussion questions, and image descriptions
    • OpenAI — real-time speech recognition during a live reading session
    • ElevenLabs and Google Cloud — text-to-speech narration and optional voice cloning
  8. How we use your data

    To run reading sessions, sync the page and voice between family members, generate recaps and narration, and operate and improve the service. We do not sell your personal data, and we do not use it for third-party advertising — Once has no ads.

  9. Children's privacy

    A child's account is managed entirely by their parent and is visible only inside the family it was created for. We never ask a child for information beyond what a session needs. Voice used to improve our reading-recognition model is opt-in, off by default, and de-identified when a family opts in.

  10. Sharing and disclosure

    We share data only with the service providers listed above, under confidentiality obligations, or where legally required. Family data stays within the scope of that family — a publisher never sees an individual family or session.

  11. International transfers

    Where you use Once from a region with data-transfer rules, your data may be processed outside that region by us or by the providers listed above, under an appropriate legal transfer mechanism.

  12. Your choices and rights

    You can review, correct, or export your data, and close your account — from your account settings, or by writing to us. We will respond promptly.

  13. Contact us

    For any privacy question, reach us at hello@once.axera-sa.cloud and we will be glad to help.