Privacy policy

Last updated: 23 October 2026 · Data controller: DRZ Nova (Fabio D'Aurizio), Rue de Presles 239, 6200 Châtelet, Belgium, company number 0629.967.488 · Contact: hello@drznova.com

In short

• No account, no ads, no trackers, no analytics.
• Your child's first name and the name of their cuddly toy never leave the phone. The AI writes with placeholders that the app replaces on the device.
• Profiles, stories, illustrations and settings are stored only on your phone.
• Only custom stories require sending a few choices, without any name, to our server and our artificial intelligence providers.

What stays on your phone

The child's first name, the cuddly toy's name, the profiles, saved stories, their illustrations and the settings. They are never sent to us.

The Dodolune library

Library stories are files downloaded from our website. No data about you is sent to read them. The first name and the toy's name are added on the phone.

Custom stories: what is sent, and why

To write and illustrate a custom story, the app sends our server: the language, the age range (3-4, 5-6 or 7-8), "he" or "she", the appearance picked from lists (hair, skin colour, glasses), the cuddly toy's type and colour, the favourite animal, the theme, the length, the optional short detail you type (60 characters maximum), and the character's reference portrait. This portrait is an illustration drawn by AI from those lists: it is never a photo.

This information is used only to produce the requested story. Our server passes it to our AI providers, then deletes the order and its result as soon as the app has collected them, and within one hour at the latest. It is not logged.

Please do not type a name, address, school or health information in the short detail. A filter rejects e-mail addresses, links and numbers, but it can make mistakes.

Legal basis: performance of the service you request (Article 6(1)(b) GDPR). At first launch, the app explains what is sent to an external AI and asks for your agreement.

Our processors

• Netlify (hosting of our server and this website): receives the app's requests. Processing may take place in the European Union and in the United States.
• Anthropic Ireland Ltd (writing and checking the texts, Claude models, through the Anthropic API): processing in the United States. Anthropic deletes inputs and outputs within 30 days, or keeps them for up to 2 years if its safety systems flag them. Anthropic does not train its models on this data.
• OpenAI (illustrations, gpt-image-2 model, through the OpenAI API): processing in the United States. OpenAI does not train its models on API data, and we have requested zero data retention.

Transfers to the United States are covered by the European Commission's standard contractual clauses, included in these providers' data processing agreements.

Purchases and story counting

Purchases go through Apple's App Store on iPhone, and Google Play on Android: we never see your name or payment method. Apple and Google process this data under their own privacy policies.

• Device identifier: the app creates a random identifier stored in the phone's keychain (on Android: a hash of the identifier the system gives the app, computed on the phone; that identifier itself is never sent). It is used only to count the free story and pack credits, even after reinstalling. Our server keeps only a salted hash of it, with counters.
• Purchase receipts: the app sends Apple-signed receipts, or on Android the Google Play purchase token (which our server has Google verify), to check a subscription or a pack. The server keeps a hash of the subscription's transaction identifier, with the number of stories used in the month.
• IP address: used at the time of the request to limit abuse. The server keeps only a hash of it, tied to a one-hour or one-day counter.

These counters are kept as long as they are needed to count the free story, credits and subscriptions. Legal basis: performance of the contract and our legitimate interest in preventing fraud (Article 6(1)(b) and (f) GDPR).

Reporting a story

If you use the "Report" button, we receive the story text (with placeholders, never the first name), its image descriptions, the language and your optional comment. No device identifier is attached. We keep reports for up to 12 months to improve content safety.

Children

Dodolune is meant for parents: the parent creates the profiles and orders the stories. A parental gate protects purchases, settings, external links, deletions and reports.

We never receive the child's first name, nor any photo, voice, location or contacts. Only the choices described above (age range, he or she, appearance from lists, cuddly toy, animal, theme, short detail) are processed, at the parent's request and with their agreement, to produce the story. We build no profile of the child and use no data for advertising. No decision with legal effects is made automatically. We do not knowingly collect personal information from children.

Your rights

The "Erase all my data" button (parents' area) deletes profiles, stories and settings from the phone. The device identifier stays in the keychain (on Android, it is computed again identically) so that the free story is not counted twice.

You have the rights of access, rectification, erasure, restriction, objection and portability, and you can withdraw your agreement at any time (by no longer using custom stories). For server counters, write to us at hello@drznova.com.

You can also lodge a complaint with the Belgian Data Protection Authority (Autorité de protection des données / Gegevensbeschermingsautoriteit): dataprotectionauthority.be.

Changes

We will update this page before any change of provider or of the data sent, and the date at the top will change.