Privacy Policy

Lullaby (“we,” “us,” or “our”) is a personalized bedtime story service for families. We operate the website at lullaby.app and the Lullaby mobile applications.

We are committed to protecting the privacy of our users, especially children. This policy explains what data we collect, why we collect it, how we use it, and the choices you have.

Account data

• Email address (used for login and account recovery)
• Hashed password (we never store plain-text passwords)
• Subscription status and billing plan

Content you create

• Character names, descriptions, and traits
• Story prompts, themes, and preferences
• Generated stories (text content)
• Favorite and reading history

Billing data

• Payment details are processed by Stripe — we never see or store your full card number
• Stripe customer ID (linked to your account)
• Subscription plan, status, and renewal dates

Automatically collected data

• Browser type, operating system, and device type
• Pages visited and time spent
• IP address (used for security and abuse prevention)
• Cookies for session management and preferences

• Provide the service — generate stories, save characters, manage your library
• Process payments — handle subscriptions through Stripe
• Improve content safety — filter story prompts and outputs for age-appropriate content
• Send essential emails — account verification, password resets, billing receipts
• Prevent abuse — rate limiting, fraud detection, security monitoring

We do not sell your personal data. We do not use your data for behavioral advertising. We do not share children’s data with third-party advertisers.

When you create a story, your prompt (character role, theme, mood, and age range) is sent to our AI provider to generate the story text. Before sending, we automatically strip any personally identifiable information (email addresses, phone numbers, physical addresses, dates) from prompt inputs.

We send only the minimum data needed for generation — never your email, password, real names, or billing information. Generated stories are stored in your account and are only accessible to you. We do not use your stories to train AI models.

Lullaby is designed for families with children aged 2–10. We comply with the Children’s Online Privacy Protection Act (COPPA) and its 2026 amendments. This section explains how we protect children’s privacy.

Parental consent requirement

• Only adults aged 18 or older may create an account. We verify this during registration with a birth year check and parental confirmation.
• Before accessing child-related features, parents must complete Verifiable Parental Consent (VPC) through one of two methods: a credit card micro-transaction ($1.00, immediately refunded) or a signed consent declaration.
• Children never create their own accounts or interact with the service directly — a parent or legal guardian manages all data and content.

Child profiles and pseudonymization

• Child profiles use pseudonymized display names only (e.g., “Brave Bear,” “Star Explorer”). We never collect or store children’s real names, birthdates, photographs, or any directly identifying information.
• We store an age range (e.g., “4–5 years”), not a precise age or birthdate, to tailor story complexity.
• Parents can delete any child profile at any time. Deleted profiles and associated data are permanently removed within 30 days.

Data sent to AI providers

• When generating stories, we send only: the story theme, mood, character role, and age range. We strip all personally identifiable information (emails, phone numbers, addresses, dates) from prompts before sending them to our AI provider.
• Our AI provider (OpenAI) does not use API inputs for model training per their data usage policy.

Parental rights

• Review — parents can review all child profile data and associated stories from their account dashboard
• Delete — parents can delete any child profile and its associated stories at any time
• Withdraw consent — parents can withdraw consent by deleting child profiles and closing their account
• No conditional participation — we do not condition a child’s participation in activities on disclosing more information than is reasonably necessary

If you believe a child has provided personal information to us without parental consent, please contact us and we will promptly delete it.

We use the following third-party services to operate Lullaby:

We use cookies for:

• Essential cookies — login sessions, security tokens, cookie consent preference
• Preference cookies — theme choice (light/dark mode)

We do not use advertising or third-party tracking cookies. You can manage cookie preferences through your browser settings or our cookie consent banner.

• Account data — retained while your account is active. Deleted within 30 days of account closure.
• Stories and characters — retained until you delete them or close your account
• Child profile data — permanently deleted within 30 days of profile removal. Child profiles contain only a pseudonymized display name and age range.
• AI generation logs — story prompts sent to our AI provider are not retained by us beyond the generation request. Our AI provider retains API logs per their own data retention policy (currently 30 days).
• Billing records — retained as required by tax and accounting law
• Server logs — retained for up to 30 days for security purposes
• Analytics — usage analytics are anonymized and retained for up to 12 months

Under GDPR and applicable privacy laws, you have the right to:

• Access — request a copy of your personal data
• Correction — update inaccurate personal data
• Deletion — request deletion of your account and associated data
• Portability — receive your data in a machine-readable format
• Objection — object to processing of your data

To exercise any of these rights, contact us at privacy@lullaby.app. We will respond within 30 days.

We protect your data with:

• Encrypted connections (HTTPS/TLS) for all data in transit
• Row-level security policies on our database
• Server-side API key management (never exposed to browsers)
• Webhook signature verification for payment events
• Rate limiting on authentication and content creation

We may update this policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice on the website. Continued use of Lullaby after changes take effect constitutes acceptance of the revised policy.

If you have questions about this privacy policy or how we handle your data, please contact us: