Lunae Moments · DELGOODS B.V. · version 4.1 · effective 24 September 2026
Lunae Moments lets you record photos, texts and milestones of your child in a private diary. This statement describes what personal data we process, why, for how long, with whom and the rights of data subjects.
DELGOODS B.V., Raadhuisweg 3d, 1851 JA Heiloo, the Netherlands, Chamber of Commerce 42032237, VAT NL869394447B01, is the controller for Lunae Moments. Privacy questions and requests: info@delgoods.nl.
You choose what content to record and with whom to share it. DELGOODS determines how the platform stores, synchronises, secures and deletes that content and is responsible for that platform processing. Google processes the Firebase data described below on DELGOODS's instructions.
| Category | Purpose | Legal basis |
|---|---|---|
| Account and login name, email address, account ID and credentials managed by Firebase | create, verify, secure and manage the account | performance of a contract (Art. 6(1)(b) GDPR) |
| Child profile name, date of birth, profile photo and selected theme | personalise the diary and display age | legitimate interest in a private family archive (Art. 6(1)(f) GDPR) |
| Diary content photos, text, dates, milestones, moods and possible data about others appearing in a photo | store, synchronise and show content to authorised people | legitimate interest in a private family archive (Art. 6(1)(f) GDPR) |
| Sharing invitations, requests, members, per-child access, contribution rights and hearts | grant, limit and revoke access | performance of a contract (Art. 6(1)(b) GDPR) |
| Technical and security installation ID, app version, language, timestamps, IP/device/error information, App Check attestation and abuse limits | operation, synchronisation, integrity, fraud prevention and recovery | legitimate interest in a secure and reliable service (Art. 6(1)(f) GDPR) |
| Contact and support name, email address, your message, app version and platform; when signed in also your account ID and account email address | answer your question, solve problems and limit misuse of the form | legitimate interest in answering questions and improving the service (Art. 6(1)(f) GDPR); for questions about your account or subscription also performance of the contract (Art. 6(1)(b) GDPR) |
| Statistics optional Google Analytics for Firebase events: which screens and features are used (for example signing up, adding a moment or viewing Premium), coarse characteristics such as role, number of children and moments in ranges, language, app version, device and operating system type, coarse location (country/region) and a pseudonymous app instance ID generated by Firebase | understand app use and quality, find bottlenecks and improve the app | consent (Art. 6(1)(a) GDPR); off by default and only after opt-in. No names, email addresses, account IDs, photos, diary texts or codes, no advertising ID (IDFA/AAID) and no advertising or personalisation purposes |
Name, email and login details are required for an account. A child profile is required to use a diary. Photos, free text, profile photos, sharing, hearts and statistics are optional. Without required information the relevant service cannot be provided.
Special-category data. Lunae is not a medical record. Do not upload diagnoses, medical records or other Article 9 GDPR data. We use no facial recognition and do not turn photos into biometric identification data. If free text or images inadvertently contain sensitive information, the same access controls, security, deletion and rights apply.
Lunae is for users aged 16 and over. We receive data about a child or another depicted person from the account holder who enters it. That user must be authorised to record and share the content, keep the sharing circle as small as possible and remove content where the child's interests or wishes require it. In a dispute or suspected unauthorised posting, any data subject may contact info@delgoods.nl; the child's interests and safety take priority.
Our legitimate interest is to provide a safe, private digital archive. The circle is neither public nor searchable, access is limited per person and child, revocation is enforced server-side and we do not use content for advertising, profiling, AI training or other independent purposes. In normal parent/guardian-controlled use, this interest therefore does not override the child's rights. Data subjects can object at any time.
We do not sell or rent personal data and show no advertising. We use Google Firebase/Google Cloud as processor:
europe-west4 (the Netherlands);europe-west1 (Belgium);To receive and answer contact messages and to send service emails (such as password resets) we use Google Workspace (Gmail) by Google as processor.
The Google Cloud Data Processing Addendum, applicable EU Standard Contractual Clauses and, where applicable, Google's EU-U.S. Data Privacy Framework certification apply. More information: Firebase Privacy and Security. We disclose data to authorities only where legally required.
We use RevenueCat, Inc. to verify purchases and subscription access. RevenueCat receives a pseudonymous Lunae account ID, app and store identification, product, purchase, renewal, expiry and refund status, and necessary technical information such as IP/SDK/device information. Our server links the paying account to one family. We do not send names, email addresses, photos, child details or diary text as RevenueCat customer attributes. This integration does not collect advertising IDs or contact lists. The legal basis is performance of the Premium contract and, for necessary fraud prevention, legitimate interest.
RevenueCat also processes this information in the United States. Processor and international-transfer arrangements are described in the RevenueCat Data Processing Addendum, including applicable standard contractual clauses. Apple and Google process store account and payment data under their own terms and privacy statements. DELGOODS does not receive full payment card details.
Diaries are not public. An owner invites someone or approves a request and then chooses per child whether that person may view and contribute. A user's own children remain separate from followed diaries. Firestore and Storage rules, trusted server functions and per-child permissions enforce access server-side; App Check helps prevent automated abuse by non-genuine apps. Traffic uses TLS and Google encrypts stored data. Administrative access is limited to necessary support, security and legal obligations.
Revocation stops future access once the change is processed online and the other device synchronises. It cannot retrieve anything a recipient previously viewed, photographed or exported.
The app stores necessary information locally for speed and offline use. Signing out removes local app data. Native exports temporarily use a private cache directory; unfinished exports are removed after failure, old handed-off exports are cleaned on a subsequent app launch/export after 24 hours, and cached exports are cleared on sign-out. No export is uploaded to a new server location. Copies you choose to save or share, and backups you control, must be managed separately. Android system backup of app data is disabled.
An account deletion request immediately closes the owned family and starts a seven-day recovery period. Only the account holder can restore it before the displayed deadline by recently confirming their password. After that, permanent deletion begins for the family, child profiles, moments, photos, invitations, connections, account-linked billing and technical records, acceptance records and authentication account; failed steps are retried. Deleting the owner's account removes the shared archive. Individual moment or child deletion does not include seven-day recovery.
After permanent deletion, a minimal deletion marker without diary content is retained for up to one day to reject previously issued sign-in tokens. If a deleted payer financed Premium for another family, only its already-paid expiry remains with that family, without a link to the deleted paying account. RevenueCat customer data is included in deletion handling; data Apple or Google independently process for their stores follows their retention policies. Store subscriptions must be cancelled separately. Google's contractual deletion process, including backups, may take up to 180 days after removal from our live environment. Copies and exports independently saved by recipients are outside our control.
You may request access, rectification, erasure, restriction, portability and object to processing based on legitimate interest. You may withdraw statistics consent at any time without affecting prior lawful processing. Account deletion and correction of your content are available in the app.
A privacy copy of your data is available free of charge by emailing info@delgoods.nl. The enhanced ZIP/photo-book export in the app may be offered as a Premium product feature; this does not limit your free GDPR rights. We normally respond within one month and ask only proportionate information to establish identity or authority.
You may complain to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.
We make no solely automated decisions with legal or similarly significant effects, do not profile children or users, use no facial recognition and train no AI models on Lunae photos or texts.
For a material change we notify users in the app and request renewed confirmation where necessary. The current version is available in the app and on this page.
DELGOODS B.V. · Raadhuisweg 3d, 1851 JA Heiloo · info@delgoods.nl