Your family's voices belong to your family.

Who we are

Lully is operated by Lully LLC ("Lully," "we," or "us"). We are based in Illinois, United States. You can reach us at hello@lullyapp.com.

This policy explains what information we collect when you use the Lully mobile app or website (together, the "Service"), how we use it, and the choices you have.

What we collect

Account information

When you create a Lully account, we collect:

• Your name and email address (or the equivalent provided by Sign in with Apple or Google).
• A profile display name you choose, used to label your recordings within your family library.
• Authentication tokens used to keep you signed in securely.

Information about your baby and family

To organize your library, we store:

• The name of the baby (or babies) your library is for. This is whatever you choose to enter; it does not need to be a legal name.
• The relationships between people in your family library (for example, who has the role of parent versus extended family).
• Invitations you send to other family members, including the email address or phone number you send the invite to.

We do not knowingly collect any other information about your baby. We do not collect health information, location, or any data your baby could provide directly.

Voice recordings

The recordings you and your invited family members create are stored privately in our secure cloud storage. Each recording is associated with the family library it was made for. Only people you invite to your family library can listen to the recordings in it.

We treat voice recordings as sensitive personal data. We do not use them for any purpose other than playing them back to your family inside the Service. Specifically:

• We do not use your recordings to train artificial intelligence or machine learning models, ours or anyone else's.
• We do not transcribe your recordings except where you ask us to (for example, to generate a memory book).
• We do not sell, license, or disclose your recordings to third parties, except as strictly required to provide the Service (such as our cloud storage provider) or as required by law.

Usage and device information

Like most apps, Lully automatically collects some technical information when you use the Service:

• Device type, operating system, and app version, so we can support your device and fix bugs.
• Anonymous usage events (for example, when a recording is played or saved) so we can understand which features are useful.
• Crash reports, which help us fix problems quickly.

We do not track you across other apps or websites for advertising purposes.

How we use your information

We use the information we collect to:

• Provide the core Service: recording, storing, organizing, and playing back voices for your family.
• Sync your library across the devices you sign in to.
• Deliver invitations to family members you choose to invite.
• Communicate with you about the Service (for example, important updates, account confirmations, or support replies). We will not send marketing emails without your separate consent.
• Improve the Service by understanding how it is used and fixing bugs.
• Comply with legal obligations and protect the security of the Service and our users.

Who we share information with

We share information only in these specific cases:

• People you invite to your family library. Recordings and family information are visible to other invited family members. This is the entire point of the Service.
• Service providers who help us run Lully — for example, our cloud hosting provider (Supabase) and our analytics provider. These providers can only use your information to provide services to us and are bound by confidentiality obligations.
• Legal requirements. If we are legally required to disclose information (for example, in response to a valid subpoena), we will do so. We will attempt to notify you unless legally prohibited.
• Business transfers. If Lully is ever acquired or merges with another company, your information may transfer to the successor — but only on the same privacy terms you agreed to here.

We do not sell your personal information. We do not share it with advertisers.

Your choices and rights

Access, correction, and deletion

You can review and edit most of your information directly in the Lully app — your profile, your library, your recordings.

You can delete your account at any time from inside the app, under Settings → Delete Account. Deleting your account permanently removes your profile, your recordings, and your family memberships. If you were the only parent on a baby's library, that library and all its recordings will also be deleted.

Download your data

You have the right to receive a copy of the data we hold about you. You can request this from inside the app, under Settings → Download My Data, or by emailing hello@lullyapp.com. We will provide your data in a machine-readable format within 30 days.

If you live in California

The California Consumer Privacy Act (CCPA) gives you specific rights, including the right to know what we collect, the right to delete it, the right to correct it, and the right not to be discriminated against for exercising those rights. You can exercise these rights using the methods above, or by contacting us.

If you live in the European Economic Area or United Kingdom

The General Data Protection Regulation (GDPR) and UK GDPR give you additional rights, including the rights to access, rectification, erasure, restriction of processing, and data portability. You also have the right to lodge a complaint with your local data protection authority.

Our legal basis for processing your data is the contract between us (you have asked us to provide the Service), your consent (where applicable, for example for marketing), and our legitimate interests in operating and improving the Service.

If you live in Illinois (Biometric Information Privacy Act)

Lully is based in Illinois, and we want to be especially clear about how we handle voice recordings under the Illinois Biometric Information Privacy Act (BIPA).

Lully stores voice recordings so that you and your invited family members can play them back. We do not create voiceprints, biometric templates, or any mathematical representation of voices for identification purposes. We do not use voice data to identify, recognize, or distinguish individuals.

To the extent that any recording you create through Lully is considered "biometric information" or a "biometric identifier" under BIPA:

• We collect and store it solely to provide the playback functionality you have requested.
• By using the Service, you give us your written consent (as defined under BIPA) to collect, store, and use voice recordings for that purpose.
• We retain recordings only as long as your account is active or as you direct, and we permanently delete them when you delete your account or recordings — and in any event no later than three years after your last interaction with the Service, in accordance with BIPA's retention requirements.
• We do not sell, lease, trade, or otherwise profit from voice recordings.
• We disclose recordings only to family members you invite, our service providers under written confidentiality obligations, and as required by law.

If you live in Texas or Washington

These states have their own laws governing biometric information. The same protections described in the Illinois section apply: we store recordings only for playback, do not create voiceprints, and obtain your consent through your acceptance of this Privacy Policy and your use of the Service. We retain recordings only as long as your account is active or as you direct, and we delete them when you delete your account or recordings.

Children's privacy

Lully is designed for adults to record voices for their babies and young children. The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13.

Recordings made about a baby (the baby's name, the family library) are different from recordings made by a child. If you believe a child under 13 has provided us with personal information, please contact us at hello@lullyapp.com and we will delete it.

Security

We use industry-standard security measures to protect your information, including encryption in transit and at rest, secure authentication, and access controls. No system is perfectly secure, but we take reasonable steps to keep your data safe and to notify you promptly if anything unexpected happens.

Data retention

We keep your information for as long as your account is active. When you delete your account, we delete your personal information and recordings, except where we are required to retain limited records for legal, tax, or fraud-prevention purposes.

International transfers

Lully is operated in the United States. If you use the Service from outside the United States, your information will be transferred to and stored in the United States. By using the Service, you consent to this transfer. Where required, we use appropriate safeguards (such as Standard Contractual Clauses) to protect your data during these transfers.

Changes to this policy

We will update this policy from time to time. When we do, we will revise the "Last updated" date at the top. If the changes are material, we will notify you in the app or by email before they take effect, and give you a chance to review them.