Privacy Policy

Last updated 9 October 2026

The short version

Banaluna is for grown-ups. Children don't sign up, and we never ask for their birthdate, photo, location or contact details.
We store what you tell the app: your children's first names (optional) and age groups, the kinds of activities they enjoy, what you save, and the Moments you record. We also collect basic information about how the app is used and when it crashes, so we can make it better. Never your children's names, and never anything you type.
There are no ads in Banaluna. We don't sell your information, and we don't track you across other companies' apps or websites.
You can delete your information yourself at any time in the app (Profile → Delete all data), or ask us to see or delete it by emailing dpo@streamcore-media.com.

Who we are
What we collect
How we use it
Who we share it with
Children
This website
The web app
Keeping and deleting
Your rights
Security
Changes
Contact

1. Who we are

Banaluna is an app of step-by-step activities for parents and caregivers to do with children aged 3 to 12. It is published by Streamcore Media Inc. ("Streamcore Media", "we", "us", "our"). We are responsible for the personal information described in this policy. Our address is 319 Coteau St, Pierre, SD 57501, United States.

This policy covers the Banaluna apps for iPhone and Android, the Banaluna web app at app.banaluna.com, the Banaluna website, and the Banaluna sign-up flow on the web (together, the "Service"). The rest of Streamcore Media's business is covered by our company privacy policy. Where the two differ, this policy applies to Banaluna.

2. What we collect

Banaluna doesn't ask you to create an account with a name or password. When you first open the app, it signs you in with an anonymous identifier, so your information stays yours on every launch. If you subscribed on our website, you can sign in to the app with the email address you used: we email you a six-digit code, and once you enter it, the app on that phone is linked to that email. The Banaluna web app at app.banaluna.com works the same way: you sign in with the email you subscribed with and a six-digit code, and your browser stays signed in until you sign out. It shows the same children, saved ideas and Moments as the apps. Beyond that, we collect what you choose to give us, and basic information about how the app is used and when it crashes.

Information	What it is	Why
Your children	An optional first name or nickname for each child, and their age group (for example 5–6). Never a birthdate or photo.	So we only suggest activities that fit their ages, and so you can note which child took part.
Preferences	The kinds of activities your children like and don't like, and how you like ideas to be picked.	To personalise your feed and recommendations.
Activity history	Activities you save, skip or complete, and when.	To keep your saved ideas and avoid repeating ones you've skipped.
Moments	Your rating of an activity, any reasons you tick, and any note you write, such as something your child said.	To keep your Moments for you to look back on, and to improve the ideas we suggest.
Anonymous identifier	A random ID created by our sign-in provider. It isn't linked to your name, or to your email unless you sign in with it.	To keep your information together and private to you.
Subscription status	Whether you have an active subscription, which plan, and when it renews. Payment is handled by Apple or Google, or, for web sign-ups, by our payment provider. We never see your full card details.	To unlock the app for subscribers.
Web sign-up details	If you subscribe through our website, the details you enter there, such as your email address and your answers to the sign-up questions. When you sign in to the app with that email, we move your answers about your children into the app, and we keep sign-in codes only as a scrambled copy, for 15 minutes.	To create and manage your subscription and get you into the app.
Messages to us	Anything you send when you contact support.	To help you.
App usage	Which screens and activities you use: onboarding steps, activities opened and completed, ratings, saves, searches (counted, never what you typed), and subscription screens. Linked to your anonymous identifier. Never your children's names or your notes. In the apps only; the web app doesn't collect this.	To understand which activities families enjoy and where the app is confusing, so we can improve it.
Crash reports	When the app crashes: what went wrong in the code, your device model, operating system version (iOS or Android) and app version. Linked to your anonymous identifier. In the apps only; the web app doesn't collect this.	To find and fix bugs.
Device and approximate location	Identifiers for this installation of the app (for analytics, crash reports and notifications), app sessions and launches, and a general location such as country or city worked out by Google Analytics from a shortened IP address. Only while Share usage data is on, apart from the notification token. In the apps only; the web app doesn't collect this.	To count usage and find problems, and to send notifications to the right device.
Notification token	In the apps, if you allow notifications: a token that lets us send notifications to your phone, with your time zone, language setting and app version.	To send you notifications, such as new activities, at a sensible time of day.

Neither the apps nor the web app access your photos, camera, microphone, location or contacts. The app contains no advertising and doesn't use your device's advertising identifier. It uses Google Analytics for Firebase to count how the app is used, with advertising features turned off. Google Analytics works out a general location, such as your country or city, from a shortened version of your IP address; the app itself never reads your phone's location. The web app doesn't use Google Analytics or any other analytics.

3. How we use it

To provide the Service: showing activities that suit your children, keeping your saved ideas and Moments, and unlocking your subscription. This is necessary to perform our agreement with you.
To improve Banaluna: for example, learning which activities families enjoy so we can make more like them. Where we do this, we use information in aggregate, not to profile you individually. For app usage and crash reports we rely on your consent (see the legal bases below); for everything else, on our legitimate interest in making a better app.
To communicate with you: answering support requests and, if you subscribed on the web, sending messages about your subscription. We only send marketing emails if you have agreed to them, and every one has a way to unsubscribe.
To send notifications, if you allow them: for example, when new activities arrive. You can turn notifications off at any time in your phone's settings (on iPhone, Settings → Notifications → Banaluna; on Android, Settings → Apps → Banaluna → Notifications); the app's Profile has a shortcut there.
To keep the Service safe and meet legal obligations: for example, preventing fraud and keeping records required by law.

We don't make decisions about you that have legal or similarly significant effects based solely on automated processing. Your activity feed is personalised automatically, but that only changes which ideas you see first.

Our legal bases, if you're in the EU, EEA, UK or Switzerland:

Providing the Service — your children's details, preferences, activity history, Moments and subscription status: necessary to perform our agreement with you.
App usage and crash reports — your consent. In the EU, EEA, UK and Switzerland, "Share usage data" is off until you turn it on in the app (Profile → Privacy). Elsewhere it starts on. Wherever you are, you can turn it off at any time.
Notifications — your consent, given when you allow notifications on your phone. On Android versions before 13, which don't ask, notifications are on until you turn them off in your phone's settings.
Support messages — our legitimate interest in helping you.
Legal records, such as transaction records — our legal obligations.

We don't sell or rent your personal information, and we don't share it with advertisers. We share it only with service providers who process it on our behalf, under contract, to run Banaluna:

Google Firebase for sign-in, secure storage of your app data, app usage analytics (Google Analytics for Firebase), crash reporting (Crashlytics) and delivering notifications (Cloud Messaging). Security rules only allow your own identifier to read or change your app data. Firebase Hosting also serves the web app, and receives your IP address and browser details when you load it. Google doesn't use this information for advertising.
RevenueCat to manage subscriptions. It receives your anonymous identifier and purchase details, not your name or your children's information.
Apple, which processes App Store purchases under its own privacy policy, and delivers notifications to your iPhone through its push notification service.
Google, which processes Google Play purchases under its own privacy policy. On Android, notifications are delivered by Firebase Cloud Messaging, listed above.
Twilio SendGrid, to email you sign-in codes. It receives your email address and the code.
Our web payment and hosting providers, for subscriptions bought through our website.

We may also disclose information:

if the law, a court order or a regulator requires it;
to protect the rights, property or safety of our users, the public or Streamcore Media, including investigating fraud or breaches of our Terms;
to Streamcore Media affiliates who help us run the Service, under the same protections as this policy;
as part of a merger, acquisition or sale of all or part of our business. We would tell you before your information became subject to a different privacy policy.

Some of these providers process data outside your country, including in the United States. Where that happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

5. Children's privacy

Banaluna is designed to be used by parents and caregivers, together with their children. Children don't create accounts, and the app isn't built for them to use on their own.

The only information we hold about a child is what their grown-up enters: an optional first name or nickname, an age group, their activity preferences, and any notes the grown-up writes in Moments. We don't collect children's birthdates, photos, voices, locations or contact details, and we never use children's information for advertising.

If you'd rather not use your child's real name, a nickname or initial works just as well. If you believe a child has given us personal information without their parent's or guardian's consent, email dpo@streamcore-media.com and we'll delete it.

6. This website

The Banaluna website doesn't use analytics or advertising pixels. It uses CookieScript to show a cookie notice and remember your choice, which it keeps in a small cookie on your device; CookieScript receives your IP address and browser details when it loads. Our Cookies Policy lists every cookie the website uses. Like any website, our hosting provider receives your IP address and browser details when you load a page, and we use Google Fonts, which receives the same technical details when it serves the page's typeface.

Our web sign-up flow may use cookies and similar technologies to keep you signed in and to measure which of our adverts led you to us. Where it does, it will tell you and, where the law requires it, ask your permission first.

Links to other websites, including the App Store and Google Play, are governed by those websites' own policies.

7. The web app

The Banaluna web app at app.banaluna.com uses no cookies, analytics or advertising pixels. To keep you signed in, and to show your activities quickly and when your connection drops, it stores your sign-in session and a copy of the activities and your household's information in your browser's storage on your device. This is strictly necessary for the web app to work, so it doesn't ask for consent. Signing out ends the session; clearing your browser's data for app.banaluna.com removes the copy on your device. Its typeface is served from our own site, not from Google Fonts.

8. Keeping and deleting your information

We keep your app data for as long as you use Banaluna. You can delete it yourself at any time: in the app or the web app, go to Profile → Delete all data. This immediately deletes your children's names, preferences, saved ideas, Moments and notification token from our servers, along with your anonymous identifier. You can also email dpo@streamcore-media.com from the address you used to subscribe, or tell us you're using the app without a web sign-up and we'll help you identify your data. We'll delete it within 30 days, except records we must keep by law, such as transaction records.

If you signed in with the email you subscribed with, the record of your web subscription (that email, your plan and its billing references) is kept while the subscription is active, so you can sign in again. It's deleted when you ask us, once the subscription has ended.

App usage data is kept for 2 months and crash reports for 90 days, after which they are deleted automatically. Once you delete your data, neither can be connected to you.

Deleting the app from your phone removes the copy of your data stored on the device, but not the copy we hold, and it doesn't cancel your subscription. To cancel an App Store subscription, on your iPhone go to Settings, tap your name, then Subscriptions. To cancel a Google Play subscription, open the Google Play app, tap your profile picture, then Payments & subscriptions → Subscriptions.

Signing out of the web app, or clearing your browser's data, works the same way. To cancel a subscription you bought on our website, email support@banaluna.com from the address you subscribed with.

9. Your rights

Depending on where you live, you have some or all of these rights over your personal information:

Access: ask for a copy of the information we hold about you.
Correction: ask us to fix anything incomplete or inaccurate.
Deletion: ask us to delete your information.
Restriction: ask us to pause using your information, for example while we correct it.
Objection: object to our using your information based on our legitimate interests.
Portability: receive the information you gave us in a structured, machine-readable format, or have it sent to another organisation where that's technically feasible.
Withdraw consent: where we rely on your consent, withdraw it at any time.

To stop sharing app usage and crash reports from the iPhone or Android app, turn off Profile → Privacy → Share usage data. This takes effect immediately, deletes the analytics identifier on your phone, and drops any crash reports not yet sent.

To use any of these rights, email dpo@streamcore-media.com. We'll reply within 30 days and won't treat you differently for asking. You also have the right to complain to your local data protection authority.

California residents: we don't sell or share personal information for cross-context behavioural advertising, as those terms are defined in the California Consumer Privacy Act.

10. Security

We use reasonable technical and organisational measures to protect your information. It is encrypted in transit, and access is restricted so that only your own identifier can read your app data. No system is completely secure, so we can't guarantee the absolute security of information sent over the internet. If a breach affects your personal information, we'll notify you and the relevant authorities as the law requires.

11. Changes to this policy

We'll update this policy if the Service or the law changes. We'll post the new version here with a new date and, if the changes are significant, tell you in the app or by email before they take effect.

12. Contact us

For questions about this policy or your information, email our data protection officer at dpo@streamcore-media.com. For anything else about Banaluna, email support@banaluna.com. You can also write to us at:

Streamcore Media Inc.
319 Coteau St
Pierre, SD 57501
United States