Lunela
← Back to Lunela

Privacy Policy

Last updated: September 21, 2026

Lunela (“we”, “us”) makes a bedtime-story app for families. This policy explains what information we collect, how we use it, and the choices you have. We designed Lunela to be privacy-respecting and calm: no advertising, no ad tracking, and we never sell personal information.

Children’s privacy

Lunela is intended to be set up and operated by a parent or guardian, not by children directly. The account belongs to the parent. Any information about a child is entered by the parent to personalize stories, and by using Lunela you provide consent, as the child’s parent or guardian, for us to process that information for that purpose. We do not knowingly allow children to create their own accounts, we do not show behavioral advertising, and we do not build advertising profiles of children. If you believe a child has provided us information without a parent’s involvement, contact us and we will delete it.

Information we collect

  • Account information. When you sign in with Apple, we receive a unique Apple account identifier and, if you choose to share it, an email address. We do not receive your Apple password.
  • Child profile. The details you enter to personalize stories, such as first name, age, pronouns, favorite characters/animals, and any fears or themes you choose to add. This is used only to generate age-appropriate, personalized stories.
  • Generated content. The stories and audio narration created for your family, and basic usage counters (for example, how many episodes were generated).
  • Device identifier. When you sign in, the app sends your device’s identifier for vendor, an identifier Apple gives to us alone, which is not your advertising ID and cannot be used to recognise you in anybody else’s app. We store only a one-way hash of it, and only so that the three free stories can be given out once per device. It is never used for advertising and never shared.
  • No analytics or crash tracking. Lunela does not collect app usage data, product analytics, or crash reports at all.
  • How much of the month you have used. A count of the stories made against your plan, kept against the subscription itself rather than against your account, so it survives if you delete the account and start again on the same subscription. It is a number and a month, nothing else, and it exists so that one plan grants one plan's worth of stories.
  • Purchases. Subscription status. Payments are handled by Apple; we never receive your card details.

How we use information

  • To generate and deliver personalized bedtime stories and narration.
  • To operate your account, subscription and saved worlds.
  • To keep content safe and age-appropriate, and to improve the Service.
  • To respond to your support requests.

We do not use your or your child’s information for advertising, and we do not sell it.

Service providers we use

We share the minimum necessary, and only for the purpose described. The providers below process data on our behalf under written data processing terms: none of them may use it for their own purposes, for advertising, or to train AI models. Apple, which takes the payments, acts as a seller in its own right and handles payment details under its own privacy policy.

  • Apple: sign-in and in-app subscription payments.
  • An AI writing provider: writes each story and checks it is safe to read. It receives the details needed for that: age range, pronouns and chosen interests. Your child’s name is never sent to it at any step, because stories are written and checked against a placeholder and the name is inserted afterwards, on our side. Their exact age is never sent either. Like most such providers, it keeps a log of requests for up to 30 days to detect misuse of its service, and then deletes it.
  • A voice provider: reads every story aloud. It receives the finished story text, which does contain your child’s name: a name has to be spoken to be narrated. Separately, and only if you choose to record a narration voice, it also receives that recording and builds a voice from it; we do not store the raw recording ourselves. You can delete a voice at any time in Reading Preferences, and deleting your account removes it from the provider too.
  • A cloud hosting provider, in the European Union: the database and file storage for your account, worlds and audio.
  • A subscription management provider: which plan you are on and when it renews, against an identifier that does not contain your name or email.
  • An email delivery provider. We send one kind of message and no other: the notice described under “If you stop using Lunela” below. There are no newsletters and no marketing email, and our messages contain no tracking pixels.
  • A website delivery network: serves lunela.app and protects it from attacks, which means processing visitors’ IP addresses. The website itself stores no personal information.

Data retention & deletion

Summarised here; the full detail, including every deletion trigger and how backups are handled, is in our Data Retention Policy.

We keep your account information and worlds while you are using Lunela, so your child’s story can continue where you left it.

You can delete your account at any time from Profile → Delete account in the app. This is immediate and permanent: it erases your child’s profile, every story and audio recording, and any narration voice you created, including the voice model held by our voice provider. Deleting your account does not cancel an App Store subscription; cancel that in your Apple Subscriptions settings. We retain a record of the purchase itself, which we are required to keep for tax and accounting purposes, and the count of stories used against a subscription this month. Without that, deleting an account would hand out a second month's worth of stories on the same plan. You can also email us at the address below to request deletion.

A narration voice is also removed automatically if it has not been used for 365 days, whether or not you ask.

If you stop using Lunela

We should not hold a child’s details longer than we are actually using them, so accounts that nobody opens are eventually deleted. If Lunela has not been opened for 18 months and you have no subscription running, we will email you first, telling you what will be deleted and when. An active subscription always keeps your account, whether or not you have opened the app.

You then have 30 days, and opening the app is all it takes to cancel it. Nothing is ever deleted for inactivity without that email being sent first. If you would rather it happened sooner, you can delete the account yourself at any time.

If you are trying Lunela without signing in (“Look around first”), we cannot email you, so there is no warning: a trial account that is not opened for 90 days is deleted, with everything in it. Signing in with Apple keeps it.

Your rights

Depending on where you live (including under the UK GDPR and California law), you may have rights to access, correct, delete, or export your personal information, to object to or restrict how it is used, and to withdraw consent at any time. As a parent you can exercise these rights for your child’s information too, including reviewing it and asking us to stop using it. To exercise any of them, contact us at the address below. We reply within one month, and we will not discriminate against you for exercising them.

If you are unhappy with how we handled your information, please tell us first so we can put it right. You also have the right to complain to the data protection regulator where you live:

  • United Kingdom: the Information Commissioner’s Office, ico.org.uk
  • Australia: the Office of the Australian Information Commissioner, oaic.gov.au
  • New Zealand: the Office of the Privacy Commissioner, privacy.org.nz
  • Canada: the Office of the Privacy Commissioner of Canada, priv.gc.ca
  • United States: the Federal Trade Commission, reportfraud.ftc.gov, or your state attorney general

Security

We use industry-standard measures, including access controls and encryption in transit, to protect information. No system is perfectly secure, but we work to safeguard your family’s data.

International transfers

Our main hosting is in the European Union. Some of our providers are in the United States, so your information may be processed there. Every such transfer rests on a recognised legal safeguard:

  • where the provider is certified under the EU-US Data Privacy Framework and its UK Extension, on the UK’s adequacy regulations for that framework;
  • otherwise, on the standard contractual clauses approved by the European Commission together with the UK International Data Transfer Addendum issued by the Information Commissioner, built into our data processing terms with that provider.

Transfers to the European Union rely on the UK’s adequacy regulations for the EEA. You can ask us for a copy of the safeguards that apply at the address below.

Changes

We may update this policy; we’ll revise the date above and, for material changes, notify you in the app.

Contact

Privacy questions or requests: [email protected].