Lunela
← Back to Lunela

Privacy Policy

Last updated: July 26, 2026

Lunela (“we”, “us”) makes a bedtime-story app for families. This policy explains what information we collect, how we use it, and the choices you have. We designed Lunela to be privacy-respecting and calm: no advertising, no ad tracking, and we never sell personal information.

Children’s privacy

Lunela is intended to be set up and operated by a parent or guardian, not by children directly. The account belongs to the parent. Any information about a child is entered by the parent to personalize stories, and by using Lunela you provide consent, as the child’s parent or guardian, for us to process that information for that purpose. We do not knowingly allow children to create their own accounts, we do not show behavioral advertising, and we do not build advertising profiles of children. If you believe a child has provided us information without a parent’s involvement, contact us and we will delete it.

Information we collect

  • Account information. When you sign in with Apple, we receive a unique Apple account identifier and, if you choose to share it, an email address. We do not receive your Apple password.
  • Child profile. The details you enter to personalize stories — such as first name, age, pronouns, favorite characters/animals, and any fears or themes you choose to add. This is used only to generate age-appropriate, personalized stories.
  • Generated content. The stories and audio narration created for your family, and basic usage counters (for example, how many episodes were generated).
  • Device identifier. When you sign in, the app sends your device’s identifier for vendor — an identifier Apple gives to us alone, which is not your advertising ID and cannot be used to recognise you in anybody else’s app. We store only a one-way hash of it, and only so that the three free stories can be given out once per device. It is never used for advertising and never shared.
  • No analytics or crash tracking. Lunela does not collect app usage data, product analytics, or crash reports at all.
  • How much of the month you have used. A count of the stories made against your plan, kept against the subscription itself rather than against your account — so it survives if you delete the account and start again on the same subscription. It is a number and a month, nothing else, and it exists so that one plan grants one plan's worth of stories.
  • Purchases. Subscription status. Payments are handled by Apple; we do not receive your card details.

How we use information

  • To generate and deliver personalized bedtime stories and narration.
  • To operate your account, subscription and saved worlds.
  • To keep content safe and age-appropriate, and to improve the Service.
  • To respond to your support requests.

We do not use your or your child’s information for advertising, and we do not sell it.

Service providers we use

We share the minimum necessary with trusted providers who process data on our behalf:

  • Apple — sign-in and subscription payments.
  • OpenAI — writes each story and checks it is safe to read. It receives the details needed for that: age range, pronouns and chosen interests. Your child’s name is never sent to OpenAI at any step, because stories are written and checked against a placeholder and the name is inserted afterwards, on our side. Their exact age is never sent either. OpenAI acts solely as a data processor — it does not use this data to train its models, and it is never used for advertising. Like most providers, it keeps a log of API requests for up to 30 days to detect misuse of its service and then deletes it.
  • ElevenLabs — reads every story aloud. It receives the finished story text, which does contain your child’s name: a name has to be spoken to be narrated. Separately, and only if you choose to record a narration voice, it also receives that recording and builds a voice from it; we do not store the raw recording ourselves. ElevenLabs acts solely as a data processor — it does not use any of this to train its models. You can delete a voice at any time in Reading Preferences, and deleting your account removes it too.
  • Supabase — secure database and storage hosting for your account, worlds and audio files.
  • RevenueCat — subscription management.
  • Resend — email delivery. We send one kind of message and no other: the notice described under “If you stop using Lunela” below. There are no newsletters and no marketing email, and our messages contain no tracking pixels.

Data retention & deletion

Summarised here; the full detail, including every deletion trigger and how backups are handled, is in our Data Retention Policy.

We keep your account information and worlds while you are using Lunela, so your child’s story can continue where you left it.

You can delete your account at any time from Profile → Delete account in the app. This is immediate and permanent: it erases your child’s profile, every story and audio recording, and any narration voice you created — including the voice model held by ElevenLabs. Deleting your account does not cancel an App Store subscription; cancel that in your Apple Subscriptions settings. We retain a record of the purchase itself, which we are required to keep for tax and accounting purposes, and the count of stories used against a subscription this month — without that, deleting an account would hand out a second month's worth of stories on the same plan. You can also email us at the address below to request deletion.

A narration voice is also removed automatically if it has not been used for 365 days, whether or not you ask.

If you stop using Lunela

We should not hold a child’s details longer than we are actually using them, so accounts that nobody opens are eventually deleted. If Lunela has not been opened for 18 months and you have no subscription running, we will email you first, telling you what will be deleted and when. An active subscription always keeps your account, whether or not you have opened the app.

You then have 30 days, and opening the app is all it takes to cancel it. Nothing is ever deleted for inactivity without that email being sent first. If you would rather it happened sooner, you can delete the account yourself at any time.

Your rights

Depending on where you live (including under GDPR and CCPA), you may have rights to access, correct, delete, or export your personal information, and to withdraw consent. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising them.

Security

We use industry-standard measures — including access controls and encryption in transit — to protect information. No system is perfectly secure, but we work to safeguard your family’s data.

International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards for such transfers.

Changes

We may update this policy; we’ll revise the date above and, for material changes, notify you in the app.

Contact

Privacy questions or requests: [email protected].