consent is the architecture, not a checkbox.
this product is one screenshot away from being a deepfake tool. the right answer is a permanent, visible commitment to the narrow use case, enforced in the architecture. these are the rules. they will not change.
the reader signs their own consent.
you can’t consent on behalf of someone whose voice will be cloned. we send the reader a verification link. they sign in their own session, record (or upload) their own sample, and click through their own copy of this consent form. the account holder is not in the room.
output is bedtime stories. only.
the system does not have a “type and have my dad say it” interface. it will not exist. the only input is a full book. household uploads pass a safety classifier before they ever reach synthesis.
every audio file is watermarked.
inaudible. traceable to household + reader. if a 0p-generated clip turns up in the wild outside the household, we can trace it back.
revocation is one click. always.
readers have a permanent (free) portal. they see every session in their voice. they listen back. they revoke in one click. pending audio is invalidated the same minute. the cached files in your voice are deleted from our cache.
children never appear.
listeners are a name and an age. they do not have an account. they do not have a profile. we never collect a voice sample from a child. the agent does not converse with the child.
memorial puts the responsibility on you.
when the reader has died, the consent gate substitutes a written attestation: you tell us who they were to the child, where the voice recording came from, and you accept — under our terms of use — that you have the right to use it. a human contractor reviews every memorial intake. we may ask for documentation if anything looks off.
we run on the same legal posture as any service that touches voice: the EU AI Act’s general-purpose AI provisions, the US state-level deepfake disclosure laws (Tennessee’s ELVIS Act, California AB-2655, AB-2602), and the body of children’s-privacy laws (COPPA in the US, the GDPR’s special provisions for minors in the EU). where the regulation is ahead of us we adjust the product. where the product is ahead of the regulation, we still adjust the product.
questions? want to revoke?
there is one phone number for every 0p, and bedtime gets the same one.