Privacy
Who is responsible
Orhan Olgar, Tellstr. 9, 12045 Berlin, Germany. hello@innercouncil.app
What stays on the phone
muri needs no account, no email address and no surname. The first names, the ages, each child's colour and every story that was told lie on this phone.
What is sent for a new story
The first names of the children who listen, the age, whether a story should say "she" or "he", the family's first names and roles, the two or three chosen words, the length, the themes you ruled out and one sentence about each of at most three earlier stories. With them a random key of this phone and, with a subscription, Apple's proof of purchase. And the wish for the story, if you say or type one. And your own things with what you wrote about them, when one of them is chosen. When your child says a word, what the phone understood goes along as text, so it is spelled right. Sound never leaves the phone.
Who writes the text
Our server passes these details to Anthropic in the USA. An AI writes the text there. Our server stores none of it. Please keep health, faith and the like out of a wish: what your child says goes to Anthropic as text.
What our server keeps
One counter per phone: how many new stories were told in which week and how many bought stories are still open. The counter belongs to the random key, and only a hash of that key is stored. With it a list that is not tied to any phone: day, language, length and computing effort of each story.
Voice and microphone
Stories are read aloud with the muris' voices or with this phone's own voice. For the muris' voices the text that is spoken goes line by line through our server to ElevenLabs in the USA and comes back as sound. The sound of a line is kept on our server and on this phone, so the same line is not made twice. Without your consent, or when no sound comes, this phone's own voice reads, and nothing leaves the device for that. A spoken word is recognised on the phone; your child's voice is not stored and never leaves the phone. If you choose a speaker in the settings, the sound goes to that speaker.
Purchases
Purchases run through Apple and through RevenueCat in the USA. RevenueCat learns which subscription belongs to which install, but never a child's name. We do not receive payment details.
Codes
If you redeem a code, the code and this phone's random key go to our server. The hash of the key and the day the code ends are then stored next to the code. Tries are counted per network address and day. The address itself is not stored.
Usage counts
Only if you switch on "Share usage counts" does the app send single events to our server, for example "story started, 6 minutes, age group 4 to 5". Our server passes them on to PostHog in the EU under a random id of this phone, without names and without words. You can switch it off again at any time.
Sharing
You share a story as a link. Its text with the first names in it then lies on our server for 30 days. Whoever has the link can read it. You can delete the link before that. A story someone sends you opens behind the parent gate and reaches the shelf only when a parent agrees.
Backup
A backup is a file with children, names and shelf. You save it yourself, wherever you like. If Apple backs up your phone, the data of this app is part of that backup.
Deleting
Under Settings, Delete everything, you remove children, names and shelf from this phone, and this phone's counter and your shared links from our server. Bought stories that are still open stay under the hash, so the purchase is not lost.
Your rights
Under the GDPR you have the right to information, correction, deletion, restriction of processing, data portability and objection, and the right to complain to a supervisory authority. Write to hello@innercouncil.app.
Date
October 2026