Privacy Policy

Last updated: June 8, 2026

1. Information we collect

Information you provide as the account holder (the parent/guardian)

• Account details: your email address, password (stored securely/hashed by our authentication provider), preferred language, and time zone.
• Billing details: your subscription plan and payment status. Payments are handled by Stripe; we receive limited information (such as the last four digits and card brand, your customer ID, and renewal/expiry dates) but never your full card number.
• Support communications you send to us by email.

Information you provide about your child to create stories

To personalize stories, you may choose to provide information about your child, including: first name, age or birthday, gender, physical appearance (such as hair color, hair type, and skin tone), interests, daily “memories” you write, optional photographs, and characters (family members, friends, pets) with their names, relationships, and descriptions. You decide what to share, and most of this is optional.

Information collected automatically

• Basic technical and usage data needed to run the Service securely (such as log data, device/browser information, and approximate region), generated by our hosting and infrastructure providers.
• Essential cookies used for sign-in/session management and your language preference. We do not use the Service to build advertising profiles.

2. Children’s privacy (COPPA & GDPR-K)

Lunary is intended for use by adults. We do not knowingly allow children under 13 to create accounts or provide information directly to us. Instead, a parent or guardianprovides information about their child to generate stories. By submitting a child’s information, you confirm you are the child’s parent or legal guardian and you consent to our processing of that information solely to provide the Service to you.

We use children’s information only to create and store the personalized stories you request. We do notuse it for advertising, sell it, or share it except with the service providers needed to operate the Service (described below). As a parent/guardian, you may review, update, or delete your child’s information at any time through the app or by contacting us at lunarychildrenstories@gmail.com. If you believe a child has provided us information without parental consent, contact us and we will delete it.

Families in the EEA, UK, and Switzerland: the age of digital consent varies by country (between 13 and 16). For all information about your child, we rely on your consent as the parent or legal guardian, given and managed by you on your child’s behalf, as the lawful basis for processing. You may withdraw that consent at any time by deleting the information, the child’s profile, or your account.

3. How we use information

• To create, generate, store, and display your personalized stories and illustrations;
• To provide your account, process payments, and manage subscriptions and gift purchases;
• To send essential service emails (such as sign-in confirmation, receipts, and renewal reminders);
• To provide customer support and respond to your requests;
• To maintain security, prevent fraud and abuse, and comply with legal obligations;
• To improve and maintain the reliability of the Service.

We do notsell your personal information, and we do not use your or your child’s photos or memories for advertising.

4. AI processing of your inputs

To generate stories, your text inputs (and the descriptions used for illustrations) are sent to our AI providers to produce the story text and images you request. Photographs you upload are used to help inform illustration prompts and are stored privately in your library. We instruct our providers to process this data to deliver the Service. We do not authorize the use of your family’s personal content to train third-party public AI models for unrelated purposes.

5. How we share information — our service providers

We share information only with vendors that help us run Lunary, under agreements that require them to protect it and use it only for our purposes. These include:

• Supabase— authentication, database, and encrypted file storage (account data, stories, and photos);
• Anthropic (Claude)— generates story text from your inputs;
• Replicate— generates story illustrations;
• Stripe— payment processing and subscription management;
• Resend— delivery of transactional emails;
• Vercel— secure hosting of the Service.

We may also disclose information if required by law, to enforce our Terms, to protect the rights, safety, and security of users or the public, or in connection with a business transfer (such as a merger or acquisition), in which case we will require the recipient to honor this Policy.

6. Data storage & security

Your data is stored on secure cloud infrastructure in the United States. Photographs are kept in a private storage area and served only through short-lived, signed links. We use industry-standard safeguards, including encryption in transit and access controls. The Service also includes measures intended to discourage casual copying of stories (such as screenshot deterrents), though no security measure is perfect, and no method of transmission or storage is 100% secure.

7. Data retention

We keep your information for as long as your account is active or as needed to provide the Service. If you delete a child profile, story, character, or memory, we remove the associated content from your library. If you delete your account or ask us to delete your data, we will delete or de-identify your personal information, except where we must retain certain records (for example, transaction records) to comply with legal, accounting, or fraud-prevention obligations.

8. Your choices & rights

• Access & update: view and edit your account, children, characters, memories, and stories in the app.
• Delete: delete individual stories, photos, characters, children, or your entire account in the app, or follow our account deletion page.
• Communications: we send essential service emails; we will honor unsubscribe requests for any non-essential messaging.
• Requests: contact us at lunarychildrenstories@gmail.comto exercise any rights you have under applicable law, including reviewing or deleting your child’s information.

Depending on where you live (for example, under Florida’s and other U.S. state privacy laws), you may have rights to access, correct, delete, or limit the use of your personal information. We will not discriminate against you for exercising these rights.

EEA, UK & Switzerland (GDPR / UK GDPR). If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have the rights to access, rectify, erase, restrict, or object to the processing of your personal data, to data portability, and to withdraw consent at any time. The lawful bases on which we process your data are: performance of our contract with you (to provide the Service), your consent (for optional data such as photographs and the details you provide about your child), and our legitimate interests (to secure, maintain, and improve the Service). You also have the right to lodge a complaint with your local data protection authority.

9. International users & data transfers

Lunary is operated from the United States. If you use the Service from outside the U.S. — including the EEA, the United Kingdom, or Switzerland — your information will be transferred to and processed in the United States and other countries where we and our service providers operate, where data-protection laws may differ from those in your country. Where required for these transfers, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses. By using the Service, you understand your information will be processed as described in this Policy.

10. Changes to this Policy

We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, for material changes, provide additional notice where appropriate. Your continued use of the Service after an update means you accept the revised Policy.

11. Contact us

For privacy questions or requests, contact us at lunarychildrenstories@gmail.com.
Stellar Consulting X LLC
7901 4th St N, Suite 300, St. Petersburg, FL 33702, USA