Privacy Policy

Last updated: August 2026

1. Who we are

PlayLuni is a family bedtime story application. Parents create AI-generated personalised audio stories for their children. We take privacy — especially children's privacy — very seriously.

2. What data we collect

  • Parent account: Email address, authentication credentials.
  • Child profiles: First name, age range, avatar — entered by the parent.
  • Story preferences: Characters, settings, and themes chosen during story creation.
  • Listening history: Which stories were played and progress through them.
  • Usage data: API call counts for internal cost tracking. Not sold or shared.

3. Children's privacy (COPPA & GDPR)

PlayLuni is designed for parents to use on behalf of their children. Children do not directly interact with or create accounts on our platform.

  • All child data is stored under the parent's authenticated account.
  • We do not knowingly collect data directly from children under 13 (US) or 16 (EU).
  • We do not sell or share children's data with third parties for advertising.
  • By creating a child profile, you confirm you are the parent or legal guardian of that child and consent to data collection on their behalf.
  • Stories are shared with the PlayLuni community by default, and a story includes the first name you gave the child it was written for. Every story has a switch to make it private instead — on the story's own page, and in the studio right after it is generated.

4. How we use your data

  • To generate personalised stories using AI (Gemini, ElevenLabs).
  • To suggest stories that suit a child — their age, their interests, the themes you have chosen before, and anything you asked us to avoid.
  • To store and play back your stories.
  • To manage your family account and shared access.
  • To measure our own advertising — which ads bring people to PlayLuni, and whether a visit led to a signup or a subscription. See section 5 for who receives this.
  • We never sell your data, and we never use children's data for advertising.

5. Who else processes your data

We use a small number of processors to run the service. Each receives only what it needs, none of them may use it for their own purposes, and some are based outside the EEA.

  • Supabase — database and file storage (EU/US data centres).
  • Google Gemini — AI story and image generation. Story prompts may be sent to Google's servers.
  • ElevenLabs — text-to-speech. Story text is processed on ElevenLabs servers to produce the narration.
  • Lemon Squeezy (a Stripe company) — payments, as merchant of record. They handle your billing details; we never see your card number.
  • PostHog — product analytics (EU data centres). How the app is used, your account identifier, and which marketing campaign a visit arrived from are processed on PostHog's servers. Children's names and story content are never sent.
  • Meta (Facebook, Instagram) — advertising measurement (US). If you arrive from one of our ads, the pages you open and whether you signed up or subscribed are sent to Meta, so we can tell which ads are worth running. Children's names, story titles and story content are never sent, and Meta's automatic collection of form fields is turned off.

6. Your rights

Under GDPR and COPPA you have the right to:

  • Access all data we hold about you and your children.
  • Correct inaccurate data.
  • Delete your account and all associated data (available in Profile → Delete Account).
  • Withdraw consent at any time by deleting your account.
  • Ask for a copy of your data — email us and we will send a machine-readable export of your account, child profiles and stories within 30 days.

7. Data retention

Your data is retained as long as your account is active. Deleted stories are kept in the trash for 30 days before permanent deletion.

Deleting your account removes your account, your child profiles, your stories and the audio behind them, straight away rather than on a delay. The one exception is a story that is shared with the community: that stays available to other families after your account is gone. Anything set to private is deleted with everything else — so if you want a shared story removed too, set it to private first, or tell us.

8. Contact

Questions about this policy or your data? Contact us at hello@playluni.com