Privacy Policy

This policy explains what Lull collects, why, and what control you have. Short version: we collect the minimum needed to run the app, we don't sell your data, and we don't show ads.

1. What we collect

• Listening & app activity. Which sounds and mixes you play, session length, sleep-timer use, morning check-in ratings, and onboarding answers (sleep goal, preferences). Stored only on your device.
• Purchases. Subscription status is processed by the store you bought through — Apple (App Store) or Google (Google Play) — together with RevenueCat. We never see your payment details.
• Analytics. We use PostHog to understand feature usage (e.g., "onboarding completed", "sleep timer set") tied to a random identifier that isn't linked to your real-world identity.
• Ad measurement. On iOS, Apple's App Tracking Transparency prompt asks whether we may measure which ad brought you here. If you allow it, we share your device's advertising identifier (IDFA) and basic device signals with Meta (Facebook) and RevenueCat to attribute your install and subscription to an ad; if you decline, we don't collect the IDFA. You can change your choice anytime in Settings > Privacy & Security > Tracking. On Android, we never collect the advertising ID — the app ships without the AD_ID permission — and ad measurement uses only aggregated app events (install, launch, purchase) with no cross-app tracking.

2. What we don't do

• No selling or renting of personal data.
• No ads inside Lull, ever. We only measure which ad brought you to Lull — on iOS only if you allow it at the App Tracking Transparency prompt, and on Android without any advertising identifier at all.
• No microphone recording. Lull plays audio; it never records it — the app ships without microphone permission.

3. Notifications

With your permission, Lull sends a local reminder before your free trial ends. That's a notification generated on your device — declining it doesn't affect the app.

4. Where data lives & how long

There are no accounts, so we hold no account data. Analytics are stored with PostHog (US). Purchase state is held by RevenueCat and by Apple or Google, depending on where you bought. Aggregated ad-measurement events are held by Meta. Your listening data lives on your device and is removed when you delete the app. Data from retired legacy accounts is deleted on request.

5. Your rights

• Delete: deleting the app removes your on-device data. For analytics erasure or legacy account data, email us and we'll handle it within 30 days.
• Access/export: email us and we'll share what little we hold (analytics events tied to your random identifier).
• EU/UK (GDPR) and California (CCPA) residents have the corresponding statutory rights; contact us to exercise them.

6. Children

Lull is not directed at children under 13, and we do not knowingly collect data from them. The baby-sleep sounds are for parents' use.

7. Changes & contact

We'll update the date above when this policy changes. Questions or requests: jarrodkeem@gmail.com.