LullaWave Privacy Policy

The short version

• We collect what we need to run LullaWave: your name and email, your settings, your subscription status, and what you share during the nightly ritual.
• What you share during the ritual is used to shape that night's ritual and to recognize certain phrases that bring crisis resources forward. When the ritual ends, your words are erased from our systems, apart from short-term backups that expire on their own. We don't keep a history of what you've said.
• Your words are never sold and never used for advertising.
• A few service providers help run LullaWave. They're described below.
• For about two days in July 2026, our website used Meta's advertising pixel, a tracking tool that sent Meta information about visits to the site. We removed it. The details are in section 6.
• You can delete your account from inside the app, or email [email protected] to access, correct, or delete your information.
• LullaWave is for adults 18 and older.
• Because what you share can reveal how you're feeling, we also publish a Consumer Health Data Privacy Policy.

1. What we collect

When you create an account

• Your first name and email address. You create an account on our website.
• We also record which version of our Terms you agreed to, and when.

When you use the app

• Your settings: Voice or Touch Mode, your chosen voice, session length, and nightly-reminder preferences.
• Your plan: Free or Premium, and how many free rituals you've used that week.
• What you share in the ritual.
  • Voice-led ritual. The microphone listens for what you share after each prompt. Your voice isn't recorded. Apple's Speech Recognition turns it into text on your device. Small amounts of audio may briefly go to Apple's servers to improve recognition, under Apple's privacy policy.
  • Touch Mode. No audio is captured. We receive the sequence of tiles you tap. Some tiles name feelings.
• The kind of night you described. From what you share, the app picks a general category that decides which soundscape plays. It's kept with your session until your next ritual begins.
• Which prompts you've recently heard, so the ritual doesn't repeat itself. Because prompts differ by category, this short record also reflects the categories of your recent rituals. We keep only the most recent few for each step.

Purchases. Premium is sold through Apple's App Store. Apple handles payment, and we never see your card details. We receive your subscription status and purchase history through our subscription management service, which receives your account identifier, your App Store purchase information, and technical information such as your IP address when the app contacts it. Before September 2026 some purchases were made on our website and processed by Stripe, which keeps those transaction records as tax law requires.

On our website

• When you visit lullawave.app, our website platform sets a first-party cookie and stores small amounts of session, navigation, marketing-attribution, and browser-fingerprint data in your browser.
• Our hosting and content delivery provider collects aggregate performance data.
• Our website analytics service counts page visits without cookies or individual profiles.
• Our font service may see your IP address when fonts load.

Stored on your device. Your preferences and a sign-in token, removed when you sign out or delete the app.

What we don't collect. We don't collect your precise location, contacts, biometric data, or data from Apple Health. There's no advertising or tracking SDK in the app, and the app doesn't track you across other apps or websites.

2. How we use it

• To run LullaWave: create and secure your account, sign you in, deliver the ritual and soundscape, remember your settings, and manage your plan.
• To shape each night's ritual from what you share, and to recognize the specific phrases described in section 4.
• To send the emails you need, like sign-in codes and important account notices, and marketing emails if you opt in.
• To keep the service secure, prevent abuse, and fix problems.
• To meet legal obligations, including age requirements.

We don't use what you share in the ritual for advertising, profiling, or training AI models. We don't use it for anything beyond running the ritual and its safety feature.

3. What happens to what you share in the ritual

• In our backend. When a ritual ends, the words you spoke are erased from our session storage. If a ritual is interrupted, they're erased within about an hour. Touch Mode selections are erased when the session ends. Our hosting provider keeps short-term recovery copies of that storage, which expire within 30 days; we don't access them.
• At OpenAI. To choose the prompts and soundscape that fit your night, the words from each voice-led ritual are sent to OpenAI's language model. Your name, email, and account identifier aren't included, unless you say them yourself. Under OpenAI's API terms, this data isn't used to train OpenAI's models, and OpenAI keeps it for up to 30 days for security and abuse monitoring. We'll update this policy if those terms change. Touch Mode doesn't use OpenAI.
• We don't keep a history of what you've said, and we don't link your words to your account after the ritual.

4. If you say something concerning

LullaWave is a nighttime ritual, not a clinical or medical service. What you share is treated with care, but it isn’t therapy or treatment. If you’re in distress, please reach out for help directly. In the U.S., you can call or text 988 for the Suicide & Crisis Lifeline. The National Domestic Violence Hotline is 1-800-799-7233. International options are listed at findahelpline.com. For postpartum-specific support, Postpartum Support International is reachable at 1-800-944-4773. For immediate physical danger to yourself or others, call 911.

• How it works. If what you say in the voice-led ritual includes explicit language about harming yourself or someone else, or certain other phrases on a list we've defined, the app pauses the wind-down and brings crisis resources forward. Recognition runs on our backend in two steps: the phrase list, then a brief AI check (OpenAI) that filters out false alarms, like negation or someone talking about a past event. The AI step doesn't search for distress in language that doesn't match the list.
• What it doesn't do. The app doesn't monitor you over time, and it doesn't contact anyone on your behalf.
• What we record. Each time the safety feature responds to something said, or checks a phrase and decides not to respond, we record: the time, what kind of check it was and how it was handled, whether a message played and which one, which of your two spoken answers it concerned, whether it was treated as postpartum-related, reference numbers for the list entries involved (never the words), the version of the list, and a scrambled (keyed) account identifier. Our short-term logs also hold your chosen voice and a keyed one-way fingerprint of the input, and they expire within 7 days. We keep the records for up to 12 months, to check that the safety feature works as it should, and then delete them. They never contain your words. If you delete your account, the records are unlinked from you, and we don't try to link them back.
• Touch Mode. Tile selections aren't routed through recognition. In Touch Mode, the crisis resources are available from the sharing screens, and anytime from the app's settings when the app isn't listening.

LullaWave is not a crisis service; this step is a hand-off to one.

5. Who we share information with

We share information only with service providers that help run LullaWave. Each is limited to that job:

• Apple. Speech recognition and App Store purchases.
• OpenAI. Interpreting ritual text, as described in section 3.
• Our account and email platform. Stores your name, email, plan, voice and session-length settings, and tags such as beta-tester status. It hosts our website and sends our emails. Sign-in emails, including their codes and links, remain in that platform's message history.
• Our hosting and content delivery provider. Runs our backend, stores session data, serves the audio, and provides website performance data.
• Our subscription management service. Receives your account identifier, App Store purchase information, and technical information such as IP address, to keep your Premium access in sync.
• Our website analytics service and font service. For the website only.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or reorganization of the company. In that case, this policy continues to apply to your information.

6. Advertising, and what happened in July 2026

We don't sell your personal information, and we don't share it for cross-context behavioral advertising

From July 5 to July 7, 2026, our website (lullawave.app, not the app) used Meta's advertising pixel. During that time, Meta received website visit information: which pages were viewed, actions such as tapping a sign-up button, IP address, and browser or cookie identifiers.

Meta's automatic matching feature may also have received a scrambled (hashed) version of email addresses typed into forms. Nothing anyone said or selected in the app was included. Under California law this counts as "sharing" for cross-context behavioral advertising.

What we did:

• We removed the pixel on July 7, 2026.
• In September 2026 we also found that our website forms placed a new member's name and email in the welcome page's web address. No one submitted those forms during July 5–7, so no names or email addresses were sent to Meta. We changed the forms so names and emails are no longer placed in web addresses.
• We removed those addresses from our website analytics.

Apart from those days, we haven't sold or shared personal information in the past 12 months.

If we ever use advertising tools on our website again, we'll update this policy first and offer a way to opt out, including honoring Global Privacy Control signals.

7. How long we keep information

• Account information (name, email, settings, plan, agreements): while your account is active. After you delete your account, it's removed from our systems, apart from short-term backups that expire on their own. If you close your account by email instead, it's removed within 60 days.
• What you share in the ritual: erased from our backend when the ritual ends, or within about an hour if interrupted. OpenAI's copy is covered in section 3.
• Sign-in codes: deleted from our backend within about a day. The emails remain in our email platform's message history until your account is deleted.
• Safety log entries: as described in section 4.
• Purchase records: Apple keeps its own. Our subscription management service may keep a record of your subscription after you delete your account; email us and we'll have it removed.
• Stripe records from earlier website purchases: kept by Stripe as tax law requires.

8. Your choices and rights

• Delete your account anytime in the app: tap the LullaWave logo to open settings, then "delete my account." Or email [email protected].
  • Deleting your account doesn't cancel an Apple subscription. Cancel it in iPhone Settings → your name → Subscriptions.
• Access, correct, or delete your information, or ask which service providers have received it: email [email protected].
  • We may verify your request using the email on your account.
  • We respond within 45 days. We can extend that once by another 45 days if needed, and we'll tell you if we do.
• Appeal. If we decline your request, reply to our response with "appeal," and someone who wasn't involved in the first decision will review it within 45 days.
• Marketing emails: unsubscribe from any email.
• We won't treat you differently for using these rights.

9. Consumer health data (Washington, Nevada, Connecticut, and elsewhere)

What you share in the ritual, and the category the app picks from it, can reveal how you're feeling. Some state laws treat that as health data. Our Consumer Health Data Privacy Policy explains how we handle it and the rights you have.

10. California residents

• Categories collected in the past 12 months:
  • Identifiers: name, email, account identifier, IP address, cookie identifiers.
  • Customer records.
  • Commercial information: subscription status and purchase history.
  • Internet or other electronic activity: settings, Touch Mode selections during a session, website browsing and attribution data.
  • Audio, electronic, or similar information: the text of what you say in the voice-led ritual.
  • Inferences: the kind of night you described.
  • Sensitive personal information: ritual content that may reveal mental or physical health.
• Sources: you, Apple, our subscription management service, and our website platform.
• Purposes: section 2.
• Disclosed to: the service providers in section 5.
• Sold or shared: see section 6. For July 5–7, 2026: identifiers and internet activity, to Meta (an advertising platform).
• Sensitive personal information is used only to provide the ritual and its safety feature, which doesn't require a right-to-limit option.
• Retention: section 7.
• Your rights: to know, delete, correct, opt out of sale or sharing (we don't currently do either), and limit use of sensitive personal information (we don't use it beyond providing the service); plus freedom from retaliation. Use them by emailing [email protected].

11. Canada

• We process and store information in the United States, through the service providers in section 5. Information processed there may be accessible to US authorities under US law.
• You can ask to access or correct your information, withdraw consent (which may limit what LullaWave can do), or ask questions. Contact our Privacy Officer at [email protected].
• If you're not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada, or in Québec, the Commission d'accès à l'information.

12. Outside the US and Canada

LullaWave is available in the United States and Canada. We're not ready for the European Union, the European Economic Area, or the United Kingdom yet. When we are, this policy will describe the rights the GDPR and UK GDPR provide.

13. Adults only

LullaWave is for adults 18 and older. It isn't directed to children, and we don't knowingly collect information from anyone under 18. If we learn we have, we delete it. If you believe someone under 18 is using LullaWave, email [email protected].

14. AI model training

We don't use personal information to train large language models or other AI models, and we don't sell it for that purpose.

15. Changes

• When we update this policy, we change the date at the top.
• If a change is material, we'll also tell you by email, and in the app where it matters.
• We won't use what you share in a materially new way without asking you first.

16. Contact

• [email protected]
• LullaWave, LLC, 1500 N Grant St #7745, Denver, CO 80203