Privacy Policy

👋 Overview

Lullova ("we", "our", "us") is committed to protecting your privacy and your child's privacy. This policy explains what data we collect when you use the Lullova app on iOS and Android, why we collect it, and how we keep it safe.

We follow a local-first design — your recordings and stories are stored on your device first. Cloud features are opt-in and only activate when you create an account.

📋 Data We Collect

Account information (optional)

• Email address — when you sign in with Google or Apple
• Display name and profile picture — from your Google or Apple account

Audio recordings

• Voice recordings you create in the app (lullabies, bedtime stories)
• Voice profile samples you record for AI narration (Premium feature)

AI Story content

• Story parameters you enter: child's age group, character name, theme, language, length
• Generated story text — stored locally and optionally in the cloud

Usage data (anonymous)

• App crash reports via Firebase Crashlytics
• Basic app performance metrics

Payment data

• Subscription status only — we never see or store your payment card details. All payments are handled by Apple App Store or Google Play.

⚙️ How We Use Your Data

• To store and play back your recordings and AI stories
• To back up your content to the cloud when you are signed in
• To generate personalised AI bedtime stories via the Claude API
• To narrate stories using your voice profile via the ElevenLabs API (Premium)
• To manage your subscription through in-app purchase
• To identify and fix crashes and performance issues

We do not use your data for advertising, profiling, or any purpose not listed above.

🔗 Third-Party Services

Lullova uses the following trusted third-party services. Each has its own privacy policy.

🔒 Data Storage & Security

• Local storage: Recordings are stored using encrypted app-sandboxed storage on your device.
• Cloud storage: When signed in, files are stored in Firebase Storage with strict security rules — only you can read or write your own data.
• Transmission: All data is transmitted over HTTPS/TLS.
• Access control: Firestore security rules ensure each user can only access their own content.

👶 Children's Privacy

Lullova is designed to be used by parents to create content for their children. The app is not intended for direct use by children under 13.

We do not knowingly collect personal data from children under 13. Story content (character names, themes) entered by parents is not associated with a child's identity in our systems.

If you believe a child under 13 has provided personal data without parental consent, please contact us and we will delete it promptly.

⚖️ Your Rights

You have the right to:

• Access — request a copy of the data we hold about you
• Correction — update inaccurate personal data
• Deletion — delete your account and all associated data from within the app, or by contacting us
• Portability — your audio recordings are stored in standard .m4a format and are exportable
• Withdrawal — sign out at any time; your recordings remain on your device

🗓️ Data Retention

• Local data — kept on your device until you delete it or uninstall the app
• Cloud data — kept while your account is active; deleted within 30 days of account deletion
• Voice profiles on ElevenLabs — deleted from ElevenLabs when you delete the profile in the app
• Crash logs — retained for 90 days by Firebase Crashlytics

📝 Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes, we will notify you via the app.

Continued use of Lullova after changes are posted constitutes your acceptance of the updated policy.