Legal
Privacy Policy
Lulu does not require an account, include advertising or third-party analytics, track users, or sell personal information. Limited technical information is processed to deliver the catalog and audio.
Information stored on your device
Lulu stores app preferences, onboarding choices, favorites, recently played track identifiers, saved ambient mixes, your optional bedtime reminder schedule, downloaded audio, and any Sleep Journal entries locally on your device. Journal entries may include bedtime and wake time, your self-reported sleep quality, morning feeling, and optional notes. This information is used only to provide app features and is not transmitted to us. If you enable a bedtime reminder, Lulu asks iOS to schedule local notifications for the time and days you select; the schedule is not sent to a Lulu server. You can delete individual journal entries in Lulu or remove all local information by deleting the app.
Apple Health
If you choose to connect Apple Health, Lulu requests read-only access to sleep data so it can show sleep duration, time in bed, sleep stages when supplied by your device, and sleep trends. Lulu does not write sleep data to Apple Health. Access is optional and is requested only after you choose to connect it.
Apple Health data is processed and displayed on your device. Lulu does not transmit this health data to us, Tencent Cloud, advertising services, analytics services, or other third parties. You can review or revoke Lulu's access at any time in the Health app or iOS Settings.
Purchases
Premium subscriptions are processed by Apple through StoreKit and your Apple Account. Lulu receives subscription entitlement status from Apple so the app can unlock premium features. We do not receive or store your full payment card details. Apple handles purchase information under its own privacy policy and terms.
Network access
Lulu may request a public content catalog, artwork, and audio from infrastructure operated for us by Tencent Cloud, including EdgeOne and Cloud Object Storage. A network request necessarily processes the device's IP address, request time, requested path, and standard HTTP information for the limited purpose of delivering and securing the requested content. We do not use this information for advertising or tracking, create a cross-app profile, or retain raw access logs in Lulu's systems.
For premium remote content, Lulu may send an Apple-signed StoreKit transaction to our server for real-time verification. The server checks the app, product, expiration, and revocation status with Apple, then returns a short-lived access token and signed audio URL. We do not log or retain the raw StoreKit transaction, transaction identifier, access token, or signed URL. We do not receive full payment card details.
Listening history, favorites, saved routines and mixes, bedtime reminders, Sleep Journal entries, and Apple Health data are not included in catalog, entitlement, or audio requests and are not transmitted to Tencent Cloud. Links to support, terms, privacy information, and Apple subscription-management pages may open outside Lulu at your request.
Children
Lulu is a general-audience relaxation and audio app. It does not knowingly collect personal information from children.
Security and retention
Lulu does not maintain an account database. Catalog and audio delivery use short-lived authorization and operational safeguards. Information stored locally remains on your device until you remove it or delete the app. If we later add accounts, analytics, crash reporting, server-side listening history, or longer-term identifiers, we will update this policy and the App Store privacy disclosure before enabling those features.
Changes to this policy
We may update this policy when Lulu's features or legal obligations change. The effective date above identifies the latest version.
Contact
For privacy questions, email hoangsondev@gmail.com.