Privacy Policy

Effective Date: July 1, 2026

1. Introduction

Welcome to Lullaville! We take your family's privacy seriously. This Privacy Policy explains how Lullaville ("we," "our," or "us") collects, uses, and protects information when you use our mobile application (the "App").

Lullaville is designed for parents and caregivers to create personalized bedtime stories for their children. Accounts must be created by an adult (18 years of age or older). Child profiles are set up within that adult's account.

We comply with the Children's Online Privacy Protection Act (COPPA) and are committed to protecting the privacy of children under 13.

2. Information We Collect

From Parents / Account Holders

When you create an account, we collect your email address and the password you choose. We do not collect your real name, phone number, or payment card details directly — subscription billing is handled securely by RevenueCat and Apple/Google.

Child Profile Information

To personalize stories, parents provide the following for each child profile:

• Child's first name or nickname
• Child's age
• Selected interests (e.g. Dinosaurs, Music, Science)
• Preferred adventure companion
• World setting
• Story lesson
• Language preferences

This information is stored in our database and used solely to generate personalized bedtime stories. We do not use it for advertising or share it with third parties for marketing purposes.

Story Retention

Stories generated through the App are stored and associated with your account so you can revisit them. Free-tier stories expire after 7 days; premium stories are retained as long as your account is active.

Usage Data

Our database and authentication provider, Supabase, automatically logs standard technical session data (such as device and connection information) for security purposes when you sign in. This data is not linked to individual children and is not used to analyze or improve the App.

3. How We Use Your Information

• To create and manage your account
• To generate personalized bedtime stories for child profiles
• To enforce subscription tier limits (story count, profile count, etc.)
• To restore your story library across devices
• To respond to support requests
• To improve app performance and fix bugs

We do not use child profile information for behavioral advertising, analytics profiling, or any purpose other than story personalization.

4. Third-Party Services

Lullaville uses the following third-party services to operate. Each has its own privacy practices:

• Supabase — secure database and authentication (supabase.com/privacy)
• Anthropic (Claude API) — AI story generation (anthropic.com/privacy)
• OpenAI (Text-to-Speech) — audio narration for premium users (openai.com/privacy)
• RevenueCat — subscription management; no card data touches our servers (revenuecat.com/privacy)
• Apple App Store / Google Play Store — payment processing for subscriptions

We do not sell your data or the child's data to any third party.

5. COPPA — Children's Privacy

Lullaville is directed at parents and caregivers. Children under 13 do not create accounts or submit personal information directly to us.

Child profiles are created by the account holder, who must be 18 years of age or older. By creating a child profile, you confirm that you are at least 18 years of age.

Account holder rights: As the account holder, you may at any time:

• Review the information stored in the child's profile
• Edit or delete a child profile from within the App
• Request deletion of all data associated with your account by contacting us at lullavilleapp@gmail.com
• Withdraw consent by deleting your account

If we discover that a child under 13 has created an account without parental consent, we will promptly delete that account and its associated data.

6. Data Retention

We retain your account data for as long as your account is active. Free-tier stories are automatically deleted after 7 days. If you delete your account, we will remove your personal data and child profiles within 30 days, except where retention is required by law.

7. Data Security

We use industry-standard security measures, including encrypted data transmission (TLS), secure authentication, and row-level security on our database. No method of transmission over the internet is 100% secure, but we take reasonable steps to protect your information.

8. Your Rights

You may have rights under your local data protection laws — such as the right to access, correct, or delete your personal data. To exercise any of these rights, contact us at lullavilleapp@gmail.com, and we will respond within 30 days.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by email. Your continued use of the App after changes are posted constitutes acceptance of the updated Policy.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Lullaville
Email: lullavilleapp@gmail.com