Privacy
The short version
Luna Story is made for families, so the rule we hold ourselves to is simple: a child's name, a story's words and anything a parent tells us is on their child's mind are never sold, never shared with advertisers, and never used to build a profile.
What stays on the device
The child's name, age band and whether they are a boy or a girl are stored on the device — in the app's own preferences, or in your browser's storage on the web. They are not kept in an account.
They travel to our servers only as part of writing a story, because a story about your child needs to know their name.
What we keep
Stories are saved to a bookshelf that belongs to your account, and only your account can read it. That is enforced by the database itself, not by our app being polite.
If you use the app without creating an account, the bookshelf belongs to an anonymous session on that device. Creating an account later keeps the same bookshelf.
- The stories written for your child, and the pictures and narration made for them
- The friends a parent has invented, and their portraits
- Whether the account has an active subscription or story credits
What we measure
We record which screens are opened and which buttons are pressed, so we can tell whether the app works. Those measurements are attached to an account identifier, never to a child's name.
The app contains no advertising or attribution software of any kind, and no advertising identifier. There is no third party in the app for a child's details to reach, and story text, story titles, a child's name, a friend's description and what is on a child's mind are marked as private content in the code besides — so that none of it could travel even if a measurement tool were ever added.
This website is different, and we would rather say so than blur it: our marketing pages use ordinary web analytics and advertising pixels, and they run only if you accept them in the cookie banner. They are never present in the app your child uses.
Who else sees anything
We keep this list short on purpose. These are the only companies that process anything on our behalf from inside the app:
If you buy on this website rather than in the app, OneSignal also sends you the one email carrying your download link.
- Google (Firebase) — sign-in, the bookshelf database, crash reports and the basic usage measurements above
- RevenueCat — subscriptions and story packs, so purchases follow you between devices
- Anthropic — the model that writes a story, from the details you choose for it
- Google — the model that illustrates it
What we never log
Our servers record the shape of a request — which route, which result — and not its contents. Story text, prompts, sign-in tokens and purchase payloads are never written to a log.
Deleting everything
Settings has a “Delete everything” option. It removes the bookshelf and the account. Ask us and we will confirm it is gone.