Privacy Policy

Controller within the meaning of data protection law is:

De Girardi GmbH, Chnüpferweg 3, 8320 Fehraltorf, Switzerland

Email: goodnight@lunory.app, Phone: +41 44 577 57 70

This policy applies to the Lunory website, the Lunory web and mobile app, and all related services operated by De Girardi GmbH.

Account data: name, email address, hashed password, language preference.

Content data: hero names, themes, prompts and stories generated through the service.

Usage data: technical log data such as IP address, browser, device type, time of access, pages visited.

Payment data: billing information processed by Stripe. We do not see or store full card numbers.

Communication data: messages you send to us by email or contact form.

Providing the service and personalising stories: contract performance.

Account management, security, fraud prevention and abuse detection: legitimate interest.

Billing and accounting: contract performance and legal obligation.

Analytics and product improvement: consent where required, otherwise legitimate interest.

Customer communication and support: contract performance and legitimate interest.

We work with carefully selected providers who process data on our behalf:

Supabase (database, authentication, file storage). Hosting region: Central Europe (Zurich).

OpenAI (story generation with GPT-5). Servers in the United States. Data transfers are based on Standard Contractual Clauses.

Stripe (payment processing). Servers in the United States and Ireland.

Google Analytics 4 (usage analytics). Servers in the United States. Activated only after consent where required.

4DAnalytics (privacy-friendly usage analytics).

We do not sell personal data and we do not use it for third-party advertising.

Some of our providers process data in countries that may not offer the same level of data protection as Switzerland or the EU, in particular the United States. In these cases we rely on safeguards such as the EU Standard Contractual Clauses and the Swiss addendum, together with technical and organisational measures.

We use technically necessary cookies to keep you logged in and to remember language preferences. Where required by law, analytics and marketing cookies are only set after you have given your consent through our consent banner.

We keep personal data only as long as necessary for the purposes described above or as required by law (in particular Swiss accounting law, generally ten years for billing records). Account and content data are deleted on request, subject to legal retention obligations.

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing. Where processing is based on consent, you may withdraw that consent at any time with effect for the future.

Please send requests to goodnight@lunory.app. You also have the right to lodge a complaint with a supervisory authority, in Switzerland with the Federal Data Protection and Information Commissioner (FDPIC), or with your competent EU authority.

We use TLS encryption for data in transit, encrypted storage for sensitive data, role-based access controls and regular backups. Access to personal data is limited to employees and processors who need it for their work.

Lunory is designed for families with children aged 3 to 10. The contractual user is always an adult. We do not knowingly create accounts for children and we do not target advertising at children.

We may update this privacy policy from time to time. The current version is always available on this page. Significant changes will be communicated through the service.