Stellina AS
Privacy Policy
Last updated 15 October 2026
1. Summary
Stellina lets your child fall asleep to a voice they trust: yours. That makes your voice and your child's details the most sensitive things we hold, and we treat them that way. We collect only what the App needs, we store it in the EU where we can, we never sell it, we never use it for advertising, and you can delete everything from the App at any time.
2. Who is responsible
Stellina AS, organisation number 938 111 529, Lindemans gate 3C, 0267 Oslo, Norway, is the data controller. Questions about privacy: privacy@stellina.app.
3. What we collect, why, and on what legal basis
| What | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Your email address or Apple sign-in ID, your first name and your relation to the child | To create your account, sign you in and show who is in the household | Contract, art. 6(1)(b) | Until you delete your account |
| Your voice recording and the temporary voice model made from it | To create sleep audio for your child in your voice, and to create new audio later without asking you to record again | Your explicit consent, art. 6(1)(a) and 9(2)(a) | The recording is stored encrypted in the EU until you withdraw consent, record again, leave the household or delete your account. The voice model at ElevenLabs is deleted as soon as the audio has been made, and created again from your recording only when new audio is needed |
| Your child's first name, birth month and chosen story language | To personalise the stories and suggest the right universe for the time of day | Contract, art. 6(1)(b) | Until you delete the child's profile or your account |
| Your child's gender (optional, only if you choose to give it) | Only for anonymous, combined statistics about who uses Stellina, so we can improve it. It is never used in the stories, never shown to anyone else and never used for advertising | Your consent, art. 6(1)(a). You can remove it at any time in the child's profile | Until you remove it, delete the child's profile or delete your account |
| Your child's photo (optional) | To show it in the App to members of your household | Your consent, art. 6(1)(a) | Until you remove it or delete your account |
| Generated audio | So the App can play it again, also offline, without creating it again | Contract, art. 6(1)(b) | Until you delete your account; deleted with the voice it was made with |
| Listening history (which universe was played, when it started and stopped, and why it stopped) | To keep your place, show how often your voice has been with your child at bedtime, and suggest a time of day | Contract, art. 6(1)(b) | Until you delete your account |
| Subscription status (plan, renewal date, trial, whether it renews) | To give your household access to Premium | Contract, art. 6(1)(b) | Until you delete your account. Apple keeps its own purchase records |
| Household invitations and members | To let you share your child's universe with people you choose | Contract, art. 6(1)(b) | Until the invitation expires or is used, or the member leaves |
| Messages you send to support | To answer you | Contract, art. 6(1)(b), and our legitimate interest in helping you, art. 6(1)(f) | 24 months after the case is closed |
| Crash reports and technical errors, without names, email addresses or IP addresses | To find and fix errors | Our legitimate interest in a stable and safe App, art. 6(1)(f) | 90 days |
| Reminders | To remind you of bedtime or the end of your trial. They are scheduled on your phone and are not sent to us | Your choice in the App | On your device |
We do not use tracking or advertising identifiers, and we do not combine your data with data from other sources. To understand how the App is used and where it can be improved, we collect anonymous usage statistics with TelemetryDeck, for example that a step in the setup was completed or that a trial was started. These signals contain no name, email address, recording, voice or details about your child, and the identifier is anonymised on your phone before it is sent. Legal basis: our legitimate interest in improving the App, art. 6(1)(f). You can turn this off under App preferences.
4. About your child
Stellina is used by parents and caregivers, not by children. Your child does not have an account, and we only process the details you enter. Do not enter more about your child than the App asks for.
5. How your voice is processed
First, you read a short text aloud in the App. The recording is sent, encrypted, to our server and from there to ElevenLabs, our voice technology provider, which creates a voice model. As soon as the audio has been made, the voice model is deleted at ElevenLabs. Your recording is kept encrypted in our own storage in the EU, so new audio can be made later without you recording again. The App asks for each story once and stores the finished audio in your household's private storage and on your phone. Playback never sends your voice anywhere again. ElevenLabs processes your voice only on our instructions, under a data processing agreement, and may not use it to train its models.
You can withdraw consent, record again or delete your voice at any time under Privacy & Security. We then delete your recording, any voice model at ElevenLabs and the audio made with it.
6. Who we share data with
We never sell personal data. We use these providers, who process data only on our instructions under data processing agreements:
| Provider | What they do | Where |
|---|---|---|
| Supabase | Database, sign-in and file storage | EU |
| ElevenLabs | Creating the voice model and the audio | May involve transfer outside the EU/EEA, under standard contractual clauses or the EU–US Data Privacy Framework |
| Resend | Sending sign-in codes by email | EU (Ireland) |
| TelemetryDeck | Anonymous usage statistics | EU (Germany) |
| Sentry | Crash and error reports | May involve transfer outside the EU/EEA, under standard contractual clauses |
Apple handles payments, the free trial and Sign in with Apple as an independent controller under its own privacy policy. Members of your household see the child's details and history you share with them.
We may disclose data if the law requires it, for example to the police with a valid order. If Stellina AS is sold or merged, your data may be transferred to the new owner, who must follow this policy. We will tell you in advance.
7. Security
Data is encrypted in transit and at rest. Each household can only see its own data, enforced in the database. Child photos and audio are kept in private storage. Only a small number of people at Stellina have technical access, and nobody at Stellina listens to your recording or your child's audio.
8. Your rights
You can ask for access to your data, correction, deletion, restriction, a copy to take elsewhere (data portability), and you can object to processing based on legitimate interest. Where we rely on consent, you can withdraw it at any time without affecting what was done before.
In the App you can export your data and delete your account under Account and Privacy & Security. Deleting your account deletes your account, your voice recording and any voice model, your child's profile, photo and audio, and your history. If you are the last member of the household, the whole household is deleted. Copies in our backups are removed within 30 days.
For anything else, write to privacy@stellina.app. We answer within one month. You can also complain to the Norwegian Data Protection Authority (Datatilsynet) or the authority where you live.
9. Changes
If we change this policy in a way that matters to you, we will tell you in the App before the change applies. If a change requires new consent, we will ask for it.