Lullaby is built for families, so privacy matters to us as much as it matters to you. This page explains, in plain language, what we collect, why, and what your rights are.
What we collect
When you create an account we collect your email address, a password hash, and any household and child profile details you choose to add (first name, age band, favourite things, family members or pets).
When your child listens to a story we record which stories were created, which chapters were played, and any favourites you tag. We do this so the shelf shows up correctly across devices and so narrators can pick up where you left off.
For billing we use Stripe. We never see or store your card details. We only keep your plan, renewal date, and a Stripe customer identifier.
What we do not collect
- Voice recordings of your child, unless you opt in to "record your own voice" on the Family plan.
- Location data, contacts, camera roll, microphone access outside of the opt-in feature above.
- Third-party advertising identifiers. There are no ads in Lullaby.
Children under 13
Lullaby is used by children, but accounts are held by a parent or guardian. We do not knowingly collect information directly from a child. Profile details a parent enters about a child are used only to personalise stories and are never sold, shared, or used for advertising.
If you believe a child has provided us with information directly, please write to privacy@lullaby.app and we will delete it immediately.
How we use what we collect
- To generate the personalised stories you and your child hear.
- To keep your shelf, chapter progress, and favourites in sync across devices.
- To process your subscription and send occasional product emails you can unsubscribe from.
- To diagnose bugs and improve story quality. Anything used for training is aggregated and stripped of personal detail.
Who we share it with
We use a small number of processors to run Lullaby: our hosting provider, an email service, Stripe for billing, and the model providers that generate story text and narration. Each is contractually bound to only process what is needed and to keep it confidential.
We never sell personal data. Full stop.
Your rights
- Access: ask us for a copy of the data we hold on your household.
- Correction: edit profile and household details any time in Parent settings.
- Deletion: delete your account from Parent settings. Everything is removed within 30 days, except billing records we are legally required to keep.
- Portability: request an export of your story library.
Security
Data is encrypted in transit. Passwords are hashed with a modern algorithm. Access to production data is limited and logged. If a breach ever affects you, we will notify you within 72 hours of becoming aware.
Contact
Write to privacy@lullaby.app and a real person will reply, usually the same day.