Privacy Policy
Last updated 14 October 2026
In short. Noctilo writes personalised bedtime stories. To do that it needs what you tell it about your children — first names, ages, what they love — and it sends that to the AI services that write, illustrate and read the stories aloud. We don't sell anything about you, show no ads, and use no analytics or tracking.
Who we are
Noctilo is published by Camille Chambefort, 500 chemin des Rascas, 06700 Saint-Laurent-du-Var, France (“we”), the controller of the personal data described here. Questions or requests: [email protected].
Who the app is for
The app is used by parents and other adults who read to children. Children don't have accounts and don't use the app on their own; the adult chooses what to tell the app about them. Purchases are behind a parental check.
What we collect, and why
| Data | Why |
|---|---|
| Account: an account id; with Sign in with Apple or Google, your email address (Apple may give us a private relay address) and the name you enter. | To keep your stories and coins across devices. You can also use the app without signing in (an anonymous account). |
| Children's profiles: first name or nickname, age, boy or girl (for pronouns), favourite colour, interests, companions (a cuddly toy, a sibling) and things to avoid. | To write stories about them. Stored with your account. |
| Stories: what you choose in the story builder (place, theme, length, wishes), the story text, its illustrations, narration and sounds. | To make the story and keep it on your shelf. |
| Coins and purchases: your balance and plan, what each story cost, and App Store transaction records (product, date, transaction id — never your card details, which only Apple sees). | To credit what you buy, charge stories, handle refunds and keep accounting records. |
| Technical records: for each AI request, which service was used, how long it took, what it cost and any error, linked to your account id; for a failed illustration, the app version, device model, iOS version and language. | To run the service, fix problems and refund what failed. Deleted after 60 days, except failure reports attached to a refund. |
| Device check: Firebase App Check asks Apple (App Attest / DeviceCheck) to confirm requests come from the genuine app. | To stop abuse of the service. No identifier is stored by us. |
Legal bases (GDPR): performing our contract with you (the stories, coins and purchases you ask for), our legitimate interest in keeping the service secure and working, and legal obligations (accounting records).
Some features run entirely on your iPhone and send nothing to us: story-theme ideas (Apple's on-device model) and the free on-device voice.
Who processes it
Each service below receives only what it needs for its part, processes it to return the result, under its own terms:
- Google Firebase / Google Cloud — sign-in, database, file storage and our servers, in the European Union (Belgium, europe-west1). Privacy
- Anthropic (Claude) — writes the story text. Receives the story request, including the children's first names, ages, pronouns, interests, companions and things to avoid. Privacy
- Google (Gemini) — illustrations (from a description of each page), the premium voice (the page text) and music (a mood). Privacy
- ElevenLabs — the Luxe voice (the page text) and ambient sounds (a short description of the place). Privacy
- Apple — Sign in with Apple, App Store payments and refunds, App Attest. Privacy
- Google Sign-In — if you choose to sign in with Google.
Anthropic, Google, ElevenLabs and Apple may process data outside the European Union, notably in the United States, under the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.
Refund requests
If you ask Apple for a refund, Apple asks us for information about the purchase. We answer with how much of it was used (the share of its coins spent), that it was delivered, and whether we'd recommend a refund. Apple makes the decision. You agree to this when you buy coins or a plan; you can withdraw that agreement at any time by writing to us.
How long we keep it
- Account, children's profiles and stories: until you delete them or ask us to delete your account.
- Technical records: 60 days.
- Purchase records: as long as French accounting law requires (up to 10 years), even after the account is deleted.
Your rights
You can ask to access, correct, export or delete your data, to restrict or object to its use, and withdraw any consent. To delete a child's profile, a story or your whole account, write to [email protected] from the address you signed in with; we answer within one month. You may also complain to the French data protection authority, the CNIL.
Security
Data travels encrypted (HTTPS). Only our servers write coins and purchases; each family can read only its own data. No API key for any AI service is ever in the app.
This website
This site sets no cookies, loads nothing from other sites and keeps no analytics. Our host (Firebase Hosting) keeps standard request logs.
Changes
If this policy changes in a way that matters, we'll say so in the app before it applies. The date at the top shows the latest version.