1. Who operates LunaRae
LunaRae is operated by shoulderBlaze in the United Kingdom. In this policy, “shoulderBlaze”, “we”, “us” and “our” refer to the operator of LunaRae.
For privacy, legal or support enquiries, contact support@lunarae.app.
2. Services covered by this policy
This policy covers:
- LunaRae: Bedtime Stories, designed for parents and children to enjoy together;
- LunaRae: Thriller Stories, intended for people aged 16 and over; and
- the LunaRae website at www.lunarae.app.
The apps do not currently require a LunaRae user account. Some information is kept locally on your device, while other information is processed by shoulderBlaze or by the providers described below.
3. Product-specific information
Bedtime Stories
Bedtime Stories is designed for parents and children to enjoy together. Parents and guardians should supervise children’s use and should not enter identifying, private, confidential or sensitive information about a child into a story prompt.
The current free experience permits 2 generated stories per day and includes advertising. The iOS Story Weaver subscription permits 5 generated stories per day and removes ads, with monthly and yearly options. The Android version currently provides the free, ad-supported experience without subscriptions.
Thriller Stories
Thriller Stories is intended for ages 16 and over. This age requirement is communicated in the app and relevant app-store listing. LunaRae does not claim to perform identity verification or technical age verification.
The current free experience permits 1 generated story per day and includes advertising. The iOS Thriller Seeker subscription permits 3 generated stories per day and removes ads, with monthly and yearly options. The Android version currently provides the free, ad-supported experience without subscriptions.
4. Information handled when you use the apps
Story prompts and generated stories
When you request a story, the prompt you enter is transmitted to OpenAI for processing and OpenAI returns generated story content. A prompt may contain personal information if you choose to enter it. Please do not include unnecessary personal, identifying, confidential, financial, health-related or other sensitive information in a prompt.
shoulderBlaze does not use prompts to train its own AI models. The treatment and retention of information by OpenAI is governed by OpenAI’s applicable terms, privacy policy and service configuration. We do not claim that Zero Data Retention is enabled.
App analytics and usage information
The apps use Firebase Analytics. Information processed may include app launches, screen views, feature and interaction events, general device information, operating-system information and technical identifiers associated with an app installation. When a story is successfully generated, the apps may record the length of the prompt and generated story; the inspected analytics event does not include the prompt or story text.
We use this information to understand app use, maintain and improve features, measure performance and support operation of the services.
Crash and diagnostic information
The apps use Firebase Crashlytics to identify crashes and technical faults. Crash and diagnostic information may include the device model, operating-system and app versions, installation or session information, error details, stack traces, the current app screen, and related technical events or logs.
Advertising information
The free versions use Google Mobile Ads, including Google AdMob. Google and participating advertising providers may process advertising identifiers, device and app information, approximate location derived from technical information, consent choices, ad requests, ad interactions and diagnostic information. The exact information used can depend on your device, location, consent choices and provider settings.
The apps use Google’s User Messaging Platform (UMP) to request or manage advertising consent where required and to determine whether advertisements may be requested. Where an in-app privacy-options entry point is available or required, it may be used to revisit relevant choices.
Subscriptions and purchases
On iOS, Apple processes Story Weaver and Thriller Seeker subscription purchases through the App Store and StoreKit. Apple processes payment and transaction information under its own terms and privacy policy. shoulderBlaze does not directly receive or process your complete payment-card details. The apps process information needed to display products, confirm or restore an entitlement, and determine whether subscription features should be available.
Information stored locally on your device
The apps use local device storage for operational information such as the daily story count, the date used to reset that count, app preferences, and subscription or entitlement state. Current daily counters reset at local midnight. This locally stored information may be removed if you delete the app, clear its storage, or reset the device.
5. How information is used
Information may be used to:
- generate and deliver requested stories;
- apply free and subscription usage limits;
- provide, verify and restore subscription features;
- display and manage advertising in free versions;
- understand use of the apps and website;
- diagnose crashes, maintain security and prevent misuse;
- improve reliability, usability and service performance;
- respond to support, privacy and legal enquiries; and
- comply with legal obligations and protect legal rights.
Depending on the activity and applicable law, processing may be necessary to provide a service you requested, based on your consent, based on shoulderBlaze’s legitimate interests in operating and securing LunaRae, or necessary to comply with law. Where processing relies on consent, you may withdraw that consent, although this does not affect earlier lawful processing.
6. OpenAI and AI story generation
Both apps use OpenAI technology to generate stories. The prompt and related request information are sent to OpenAI’s systems, which process them to produce a response. OpenAI may process data in locations outside the United Kingdom.
OpenAI states that data submitted through its API is not used to train its models by default unless the customer opts in, but OpenAI may retain certain API data for abuse monitoring or other permitted purposes depending on the applicable service configuration and legal requirements. For current details, consult OpenAI’s privacy and API data-control information.
LunaRae is an independent service and is not affiliated with, endorsed by or sponsored by OpenAI.
7. Advertising consent and Apple tracking choices
Advertising consent and privacy choices may differ by region and platform. Google UMP may present a consent form when required. On iOS, the apps include an Apple tracking-usage description. If iOS presents an App Tracking Transparency choice, you may allow or refuse tracking and can later change the setting through your device settings. Availability of that choice does not mean LunaRae performs identity or age verification.
Refusing a consent or tracking choice does not necessarily remove all advertising. It may affect whether certain data can be used for personalised advertising, subject to platform, provider and legal requirements.
8. Children and age-related privacy
Bedtime Stories
Bedtime Stories is designed for parents and children to enjoy together. We ask parents and guardians to supervise use and to enter prompts on a child’s behalf where appropriate. Do not include a child’s real name, address, school, contact details, precise location, health information or other identifying or sensitive information in prompts.
We do not intentionally ask children to create accounts or directly provide identifying details. If you believe a child has submitted personal information that should not have been provided, contact us so that we can assess the request and take appropriate action where possible.
Thriller Stories
Thriller Stories is intended for ages 16 and over and contains mature suspense and thriller themes. It should not be treated as a child-friendly product.
9. Website information, cookies and similar technologies
The website uses Google Analytics 4 (GA4) to understand visits and selected interactions, including pages viewed and clicks on designated download or store links. Depending on Google’s processing and your device, analytics information may include page location and title, browser and device information, operating-system information, approximate location, referring information and technical identifiers.
Analytics storage is denied by default. The GA4 script is loaded after analytics consent is accepted through the website banner. The website uses Google Consent Mode to communicate the selected analytics and advertising-storage states. Advertising storage remains denied by the current website configuration.
Your consent choice and a timestamp are stored in your browser’s localStorage so the website can remember it. The current consent record expires after six months, after which the website asks again. You may revisit your choice through Cookie Settings. If analytics consent is withdrawn or expires, the website attempts to remove GA cookies associated with the site.
The website also loads resources from third-party hosts, including Google Fonts, Tailwind’s content-delivery network, Apple’s badge service and Wikimedia-hosted badge imagery. Those hosts may receive technical request information such as your IP address, browser information and the requested resource under their own policies.
Website support requests
When you contact us through the website support form, we collect your name if you choose to provide it, your email address, the selected LunaRae app (Bedtime Stories or Thriller Stories), your support category and the contents of your support message. No account is required.
We use this information to receive and manage your request, respond to you, troubleshoot reported problems where applicable and protect the support service against misuse where applicable. The form includes validation and anti-abuse measures. Please do not submit passwords, payment-card details or other highly sensitive information through the support form.
The form uses Amazon Web Services (AWS) as a service provider to process and deliver support requests. Requests are sent to an AWS Lambda function, and Amazon Simple Email Service (Amazon SES) delivers them to LunaRae’s private support inbox. Your submitted email address is used as the Reply-To address so we can respond directly to you.
10. Third-party providers
Providers used in connection with LunaRae include:
- OpenAI for AI story generation;
- Google Firebase Analytics for app analytics;
- Google Firebase Crashlytics for crash and diagnostic reporting;
- Google AdMob and Google Mobile Ads for advertising;
- Google User Messaging Platform for advertising consent choices;
- Google Analytics 4 for website analytics;
- Amazon Web Services (AWS), including AWS Lambda and Amazon Simple Email Service (Amazon SES), for processing and delivering website support requests;
- Apple App Store and StoreKit for iOS subscriptions and entitlement processing; and
- Google Play for distribution of the Android apps.
These providers process information under their own terms and privacy policies. Their processing locations, retention periods and legal roles may differ.
11. Sharing and sale of information
shoulderBlaze shares information with providers where necessary to operate the services, fulfil a request, maintain security, process subscriptions, provide advertising, or comply with law. We may also disclose information where required by law or where reasonably necessary to establish, exercise or defend legal rights.
shoulderBlaze does not sell story prompts or generated stories. We do not claim that third-party advertising providers never create profiles or use information for their own permitted purposes; their practices are governed by their policies, consent choices, platform rules and applicable law.
12. Data retention
Retention depends on the type of information and who processes it:
- daily counters, preferences and entitlement state may remain locally until changed, cleared or the app is removed;
- support correspondence, including information submitted through the website support form, is kept only for as long as reasonably necessary to provide support, keep appropriate records, maintain security, handle disputes or meet applicable legal requirements;
- website consent choices are currently retained in local storage for up to six months;
- analytics, advertising, crash, transaction and AI-provider data are retained under the relevant provider settings and policies; and
- information may be retained longer where required by law, for security, or to establish, exercise or defend legal claims.
Because no LunaRae account is currently required, we may be unable to identify or retrieve provider or device information relating to a particular person without sufficient technical details.
13. International processing
Some providers may process information outside the United Kingdom. Where UK data-protection law applies, shoulderBlaze will rely on the provider’s applicable transfer mechanism or another lawful basis for the transfer where required. Provider locations and safeguards can change, so their current privacy documentation should also be reviewed.
14. Security
We use reasonable technical and organisational measures intended to protect information handled through LunaRae. Information transmitted to service providers is sent over encrypted network connections where supported. No internet transmission, device storage or electronic system can be guaranteed completely secure.
15. Your UK privacy rights
Subject to applicable law and relevant exceptions, you may have rights to request access to personal data, correction, deletion, restriction, portability, or objection to certain processing. You may also withdraw consent where consent is the basis for processing.
You may complain to the UK Information Commissioner’s Office or another competent supervisory authority. Before doing so, you are welcome to contact us so we can try to address your concern.
Because LunaRae does not currently require an account and some information is held only on a device or by a provider, we may need enough information to verify and locate relevant records, and in some cases may not be able to associate information with you.
16. Changes to this policy
We may update this policy to reflect changes to LunaRae, providers, legal requirements or business practices. The updated version will be posted on this page with a revised date. Where required, we will provide additional notice or request consent.
17. Contact
For privacy questions or requests, including those concerning information submitted through the website support form, contact shoulderBlaze at support@lunarae.app.