Privacy

Last updated: October 21, 2026 (on the ChatGPT ads page, with your permission, OpenAI knows whether the ad brought you; before: adds the optional account to manage the list on the web; includes pack choice, colour and product photos and the price alerts; adds actions for agreements, protection, archive, consumables and nursery comparison, only with permission and never their content; in test versions, by default)

Meceluna is an app for families who are expecting a baby or have just had one. It is made so that what you log is yours alone: there is no sign-up or ads, and nothing that reaches us identifies you. Only if you give us permission do we count which parts of Meceluna are used (for example, “logged a pee nappy”), how often you open it, what stage you are at (in ranges, such as “2nd trimester” or “1-3 months”), whether something fails or runs slowly, the iPhone model and, if you came through an App Store ad of ours, which campaign; never what you write, amounts, dates or who you are. You change it in Settings › Your data.

Who is responsible

Eugen Marius Circiu, que hace la app. Para cualquier cosa: Ver el correo.

Who has your data

You do. What you log is on your iPhone and, if you turn on iCloud, in your iCloud account, which Apple keeps encrypted for you like your notes or your photos. We have no copy or access: we cannot see, export or delete it.

What you log

Feeds, nappies, sleep, appointments, lists, photos and documents are kept on your iPhone. If you back up your iPhone (to iCloud or to a computer), they go in it, like those of any other app. By default they go nowhere else.

iCloud is optional: you choose it at the start or in Settings › Your data. Then everything is also kept in your iCloud account, in case you lose or change your iPhone, and only you can see it. Texts, numbers and dates are encrypted on the iPhone before uploading; photos and documents are encrypted by iCloud. With iCloud Advanced Data Protection, only you hold the key. We have no access to any of this.

Sharing with your partner, on iPhone or Android, goes through the Meceluna sync service: changes are encrypted on your mobile before they leave (AES-256-GCM) and travel from one mobile to the other through our server, which only keeps those encrypted changes and cannot read them; only your family's mobiles hold the key. A family that does not use the service for 13 months is deleted automatically. On the iPhone, iCloud remains your backup.

The invitation is a link that you send yourselves (by WhatsApp or Messages): send it only to your partner. When you create it, you choose whether whoever joins can log or only view. We notify you when someone joins, and in Settings › Share › Who has access you see who is in and can remove them: they stop seeing it and it is deleted from their iPhone.

If you turn off iCloud, what you have stays on the iPhone and stops syncing. The iCloud copy is deleted in iPhone Settings › your name › iCloud.

Your details for benefits

Income, the municipal register (padrón), dates of birth, health information (such as pregnancy risk), your home address and the rest of the data you enter to find out which benefits apply to you are kept with everything else: without iCloud, on that iPhone (and in its backup, if you make one); with iCloud, encrypted in your account, and if you share, you both see them so you have the same. They are also included in the archive backups you make from Settings: keep them somewhere safe.

What the app downloads

The guide, the nurseries, the health centres, the catalogue and its photos are downloaded from datos.meceluna.com and fotos.meceluna.com, served by Cloudflare. The provider receives the technical connection data to deliver the response. The technical count of the index keeps for 90 days a fingerprint calculated from the IP, the app's agent, the day and a service key, plus the country, system and version. The IP is not stored in that count. The fingerprint changes every day: it estimates daily download activity, not unique people or households. When adding up days, the same connection may count several times. At the start, the app asks that same server in which country and region the connection is, to set them for you; it is not stored and can be changed.

Meceluna Plus

Plus belongs to the family: if you share, along with your data travels also until when you have Plus and the name (the one you put in the app) of whoever has it, so the family's other mobiles can use it without paying twice. It is encrypted like the rest of what you share and does not reach us.

The optional subscription is charged by Apple to your App Store account. We do not receive your payment details or know who has it: the app checks on the iPhone whether it is active. Apple notifies our server of each change to the subscription (sign-up, renewal, cancellation, failed charge, refund) with the plan, price, country and a purchase number that does not say who you are; we count it to know how many people have Plus and for how long, without storing it on the server. If you get the one-year Plus gift for the first families and you claim it, the app sends us (to Cloudflare, in the European Union, and from there to our server) a number for your family that does not say who you are (the same on both mobiles), to give you an Apple code and make sure each family gets one; we store it next to the code we gave you. If you give us usage data permission, the app also counts when it is subscribed or cancelled.

Store links

Some store links carry our affiliate code: if you buy, the store gives us a small commission and it costs you the same. When you open the link, the store may use its own cookies according to its privacy policy. Stores are always ordered by price, never by commission.

App usage data

Sin pedir permiso, la app mantiene un recuento agregado: cuántos móviles usan cada parte, cuándo, con qué ajustes y si algo falla o va lento (con el modelo, la versión del sistema y los datos técnicos del fallo), y algunos datos de lo apuntado siempre agrupados en tramos (como las horas de sueño), con la edad del bebé en tramos y si es niño o niña, el país de la conexión y el idioma del móvil (si Meceluna no lo tiene, solo «otro»). Sin un código estable de móvil, bebé u hogar y sin nada de lo que escribís, salvo lo que se busca en los productos, en Ajustes y en la música: sin saber quién lo busca, sin nada al lado y solo si lo han buscado varias familias distintas. Para evitar que un reintento cuente dos veces, cada tanda puede llevar un código aleatorio nuevo y la posición de sus filas. No se reutiliza para enlazar tandas ni se vincula al código de la analítica con permiso; el servidor conserva su huella técnica para reconocer reintentos. Lo recibe Cloudflare como encargado nuestro. Para los avisos operativos de primeras aperturas usamos ntfy: recibe solo la cantidad y si es iOS o Android, sin códigos de móvil, datos familiares ni estado del permiso. Una reinstalación o reiniciar el recuento puede contar de nuevo; no identifica dispositivos físicos. Se puede apagar en Ajustes › Tus datos › «Recuento anónimo». Lo que sigue es lo que se cuenta, además, solo con vuestro permiso.

We also count, only with permission, the actions when using parenting agreements, home protection, purchase archive, consumables, usual products and nursery comparison: opening their screens, saving or confirming, preparing an import or opening a store. Never the agreements, stock, amounts, prices, schedules, sources, names of centres or documents that you log or import. In the calendar we count opening or cancelling editing, saving a day or period and removing manual dates, never reasons or dates.

We also count which vaccine you log (which one, and whether you entered a lot number or brand; never the lot number, the brand, the centre or the notes), whether you add or delete a photo when the baby is poorly (never the photo or its note) and whether you open a PDF (the paediatrician's, an episode's or the vaccine record).

If you say yes to the usage data permission (the screen says so up front before you answer), the app also lets Google know whether you came through an ad of ours on YouTube: Firebase Analytics (Google, a US company) receives that the app was opened for the first time, when it is used and an iPhone identifier that Firebase creates (it is not Apple's advertising one) and that is deleted if you withdraw the permission (Settings › Your data › “Share usage data”: turning it off turns this off too). It does not receive what you do inside the app or anything you write, it is not used for personalised ads and there are no ads on the iPhone. Without permission, Google only receives from Apple, through SKAdNetwork, that an install happened after its ad, with no data about the iPhone or about you.

On product pages we count whether you choose a single product, duo, trio or pack, whether you change colour and whether there is an associated photo to view it, and whether loading a photo fails. We never send which product or which colour you chose.

Only if you give us permission. The app asks on each iPhone once you have used it a little (on the second day or after the first entry: “Will you help us improve Meceluna?”), with the essentials in three points and the link to this page, which has the detail of everything that is counted. Three answers, each one a single tap: “Sure, I'll help”, “Not now” (it asks again once a week and once a month, and after that it does not insist) and “Don't ask again”. Until you say yes, nothing is sent. Each iPhone decides on its own and, if you say no, everything works exactly the same. You can change it whenever you want in Settings › Your data › “Share usage data”.

In TestFlight and in the Android test versions, permission is also requested before turning on analytics with codes. Taking part in a test is not taken as acceptance. The test version's answer is stored separately from the store version's and can be changed in Settings.

In both apps, if you give permission, we count whether you tap Search or Clear and on which screen, never the query or the name of the store.

On Android, usage data is also asked about on each mobile, with the same two answers. The internal “pre” versions also need an explicit answer and let you change it in Settings. We count whether tabs and tools are opened, whether the optional sign-up details or the calendar conditions are expanded, whether you choose to log an earlier sleep, whether you switch between the 7- or 14-day report and whether loading Plus is retried or restoring it is requested. We also count whether an option is chosen by swiping, only the type of control (menu, tabs or segmented), never the option or the position of the finger. We count whether an action is run by swiping a row or a date or time is confirmed, without its label or values. In search fields we count whether Search is tapped or the search is cleared, only the screen, never the query or the name of the store. We also count whether you choose the nappies in use or delete a consumable, never its brand, size, stock or quantities used. When the nursery map is opened we count only its provider and whether it is the list or a detail page; in street view, only its availability and whether loading is retried, never the visible area, location, address or centre. Also the type of failure when reading an import, saving or preparing a report. Never the menu texts, file names, questions, medication or anything the family writes.

If you say yes, we count which parts are used, to know what is useful to you and what is not: what kind of thing is logged (a feed, a nappy, a temperature, but never its value, its time or its note), from where (the app, Siri, the widget), which tabs are opened, which history or Shopping filter is chosen, whether an entry is deleted or saving it is retried (never its content), whether the backup reminder is seen or postponed, whether turning on iCloud is chosen from it or a backup is saved or cancelled (never the file, its location or its content), whether something is added to the list or shared with your partner (inviting, joining, leaving or removing someone and with what permission; never who), what stage you are at (in ranges: the trimester of pregnancy or the baby's age, such as “1-3 months”; never dates), your region (the one you enter or, if none, an approximate one from the connection, without keeping the IP; or your country, if you live outside Spain), how many children and whether you use Plus or iCloud, how often you open the app and whether your partner also logs (yes or no, never who), what you answer in the short questions we sometimes ask you, which benefits from the guide you open, whether a search finds something (never what you search for), the type of appointment you create (never its date or where), whether you use widgets, the watch or alerts, accessibility, whether the app is slow to open, what happens with each store (that its page or its QR is opened, that it is saved as your store, that a product is viewed from it or that its website is visited: to improve the app and tell each store what Meceluna brings it) whether Plus is subscribed, renewed, cancelled, a charge fails or it is refunded (with the plan, the offer, the price, the country and the currency of the Apple store) and, if you came through an ad of ours on the App Store, which campaign, ad group and keyword (Apple tells us, without telling us who you are or asking permission to follow you). Also whether something fails: whether the app closes by itself or freezes (the type of closing that iOS gives and in which part of the app's code it happened, without what you were writing), whether changes cannot be saved or syncing with iCloud or with your family gives an error (only its code) or whether a purchase or a submission does not go through. Along with that go the iPhone model, the iOS and app version, the language, the time zone and the accessibility settings (such as text size), and the state of the phone in ranges (network, battery saver, free space).

The app's notices (something new, a corrected figure) are downloaded with everything else and it is your iPhone that checks whether they apply to you: we do not know who receives them. Some new features are tested first with some of the families. Your iPhone decides this with what it already has (the version, the region, the stage), without sending anything. If you have given us permission, along with what we count goes also which version of that new feature you see, so we know which works better.

Of price alerts, we only count whether you ask permission, open their settings, iOS accepts preparing them or you open them. Never the product, price, store, title or link. That iOS accepts an alert does not mean that you have seen it.

What we never count or do: anything you write (no names, no notes, no photos, no exact amounts, no titles, no links, no baby dates); anything that says who you are (no name, no email, no mobile, no location); no ads, no selling it, no sharing it with anyone, no following you in other apps or websites.

Analytics with permission uses pseudonymised codes: one per mobile, one fingerprint per shared baby and, since the updated permission, another random code to group the household that shares data. The latter is synced encrypted between your mobiles and is not sent to the count without permission. They are grouping codes, not names or contact details. The baby's historical key keeps its meaning and is not turned into the household one. Withdrawing permission stops sending and resets the mobile's code; it does not automatically delete events already received. PostHog receives this analytics as a processor, with the data in the European Union, in Frankfurt and without storing the IP. The basis is your permission, which you can withdraw in Settings.

This website

Para saber cuántas visitas tiene, qué páginas se leen, lo que tardan en cargar, de qué web venís y desde qué dispositivo, usamos PostHog (empresa de EE. UU., con los datos en la Unión Europea, en Fráncfort) como encargado nuestro, sin guardar la IP. La primera vez os preguntamos si nos dejáis usar una cookie propia, de meceluna.com, solo para saber si volvéis otro día. Si decís que no, contamos la visita igualmente, sin cookies, con una huella que PostHog calcula en su servidor y que cambia cada día, así que no se puede saber quién sois; si no contestáis, no se cuenta nada. Lo único que se guarda en vuestro navegador es vuestra respuesta. En la página a la que llevan nuestros anuncios en ChatGPT, si aceptáis, OpenAI recibe también que llegasteis por su anuncio y si tocasteis «Descargar», para saber si el anuncio sirve. Cambiar mi elección

What is kept in your browser, for what, how long it lasts and how your permission is proven: in the cookie policy.

It is served by Cloudflare, which, like any network, receives the technical data of the visit (IP, browser) to deliver the page. The QR page for each store (meceluna.com/t/…) is counted like any other visit.

Gift list

If you publish your list from Shopping, we store what you choose to show: each gift (name, photo, price, store, link and category), the title, the message, the colour and the cover photo if you add one, and, if you write them, the shipping address and how to get a contribution to you. It is stored on Cloudflare, in the European Union, and whoever has the link can see it; it does not appear in search engines. The address is seen only by the person who reserves and chooses to ship it, and how to contribute only by whoever contributes to a pot.

The person who reserves does not need an account: when reserving we store their name, their email, their message and whether they hand it over or ship it, to send them their reservation with a link to change or cancel it (and a single reminder per week if they have not marked it as bought) and so the family can thank them. The family sees that data in their app and in their panel; for families with an account, we notify them by email of each new reservation. To send the emails we use an email delivery provider in the European Union, which only delivers them. If someone loses their email, they can ask on the list page for us to resend it; we reply the same whether they have reservations or not. To curb abuse, we count the reservations from each connection with a code that changes every day and from which the IP cannot be derived. Those pages carry no analytics. When the list is unpublished, everything is deleted: gifts, cover, reservations (with their emails) and emails pending to be sent; those already sent leave no content on our server.

Account to manage the list on the web

If you create an account to manage the list at meceluna.com/mi-lista, we store the identifier that Apple or Google gives us, your name and your email, only so that you can sign in. There is no password. You can delete it whenever you want from My account: that data is deleted and the list stays in the app. With your cookie permission, we count which screens of this panel are used, never your email or what your reservations contain.

When you write to us

Si nos contáis algo desde la app («¿Algo está mal?» o «Algo está mal o una idea» en Ajustes), nos llega lo que dice esa pantalla: vuestro texto, sobre qué dato es, la versión de la app, la comunidad y, si las añadís, hasta 2 capturas (sin ubicación ni datos de la foto). No lleva vuestro nombre, ni la IP, ni nada que os identifique. Llega primero a Cloudflare (en la Unión Europea), que lo guarda solo hasta que nuestro servidor lo recoge, en minutos, y lo borra. Lo guardamos para corregir datos y mejorar la app. Si en el texto o en una captura sale algo personal y queréis que lo borremos, escribid a Ver el correo diciéndonos cuándo lo mandasteis.

So we can reply inside the app, each message carries a random code that only your phone keeps and that can't be used to find out who you are. If we reply, you'll see it in Settings › Your feedback; the reply is deleted after 180 days.

Other services the app uses

Maps

On iOS, the maps are Apple Maps. In the Android test versions, the nursery mapping uses Google Maps when it is configured and the mobile has Google services; the header of the detail page may show Street View images. In other cases it uses OpenStreetMap. The provider receives the area of the map or street view that you are looking at and the normal connection data, according to the privacy policies of Google and OpenStreetMap. We do not send those services your names, notes or the typed address. Routes open in the maps app you choose.

Location and address

Only if you ask for it: to sort nurseries and health centres by proximity or to set your address or region. Distances are calculated on the mobile. To turn an address into a point on the map, or your location into an address, the mobile's maps service (Apple on iPhone, Google on Android) receives that address or point at that moment. We do not store where you are; your home address stays on your mobiles.

Store products

When you save a link, the app opens that store page to read the name, photo and price. The store receives that visit like any other. If the store does not let your mobile read it, we ask our server for it: only that link (without what comes after “?”), which is deleted after an hour. If you share with Meceluna a product that is not in our catalogue, we receive its link (without what comes after “?”) and the app version, to add it. Nothing of yours. It is turned off with “Help complete the catalogue”, in the share sheet or in Settings › Your data.

Medicines

If you scan a medicine's box (or type its national code), that code goes to CIMA, the public register of the Spanish Agency for Medicines (Agencia Española de Medicamentos) (cima.aemps.es), to bring up its name and its leaflet. Only the code: nothing of yours.

Collective agreements

If you look for your company's collective agreement (convenio), the search goes to the BOE (Spain's official gazette, boe.es).

Calendar

Only with your permission, to add appointments.

Camera

Only if you scan a paper (a circular, an appointment) or a medicine's box. Dates are read on the iPhone; the image does not leave it unless you save it in Documents with iCloud turned on.

Inviting your partner

With the iPhone share sheet (Messages, WhatsApp or a link). iOS suggests who; the app does not see your contacts.

Your rights

Podéis borrar todo desde la app (Ajustes) o borrando la app. Lo único que guardamos es lo que nos escribís desde la app, las visitas de esta web y los datos de uso de arriba, sin nada que os identifique. Para cualquier duda, escribid a Ver el correo. También podéis reclamar ante la Agencia Española de Protección de Datos (aepd.es).