Privacy Policy

Last updated: October 20, 2026

NOTE TO OWNER: This template must be reviewed and completed with your legal entity details before public launch (entity name pending LLC formation), and reviewed by a qualified professional. It reflects Lulliko's intended data practices as of the date above.

1. Who we are

Lulliko ("we", "us") operates the website lulliko.com and the Lulliko baby-care logging application (the "Service"). Contact: support@lulliko.com. Our legal entity details will be updated here upon completion of company formation.

2. What we collect

• Account data: your email address (for magic-link sign-in) and your chosen display name / caregiver role.
• Care records: the structured entries you create (feeding, sleep, diaper changes, notes, growth measurements). These are the core content of the Service.
• Voice recordings (temporary): when you use voice logging, your audio is transmitted solely for transcription. The raw audio is deleted immediately after transcription is complete and is never stored, used to train models, or used to create voice profiles.
• Technical data: minimal operational logs (e.g., timestamps, error diagnostics) needed to run and secure the Service.

3. What we do NOT do

• We do not sell or rent personal data to anyone.
• We do not show advertising or embed third-party ad trackers.
• We do not use your content to train machine-learning models.
• We do not retain raw voice recordings beyond the seconds needed for transcription.

4. Processors we rely on

To operate the Service we use a small number of vetted processors: a cloud hosting provider (application and database hosting), a speech-to-text provider (transcription only; audio deleted after processing under our data-processing agreement), an email delivery provider (magic links and notifications), and a payment processor (for paid subscriptions; payment card data is handled by the processor and never touches our servers). We will maintain a current list of processors on request.

5. Children's privacy

The Service is intended for use by parents and caregivers to record information about children in their care. We do not knowingly collect personal information directly from children under 13. Care records about a child are controlled by the account-holding parent or guardian, who may edit or delete them at any time. If you believe a child has provided personal information directly to us, contact us and we will delete it.

6. Your rights

Depending on your jurisdiction (including the EU/EEA under GDPR, the UK, California under CCPA/CPRA, and elsewhere), you may have the right to access, correct, export, and delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. You can export or delete your family's records from within the Service at any time, or contact us at support@lulliko.com and we will respond within 30 days.

7. Data retention & security

Account and care records are retained while your account is active. If you delete your account, records are deleted within 30 days, except where longer retention is required by law. Raw audio: deleted within seconds of transcription. We protect data in transit with TLS and at rest with encryption, apply least-privilege access internally, and never store payment card numbers on our systems.

8. International transfers

Our hosting and processors may be located in the United States and other countries. Where required, transfers rely on appropriate safeguards such as EU Standard Contractual Clauses.

9. Changes to this policy

If we make material changes, we will notify you by email or in-app notice before they take effect. The "Last updated" date above reflects the current version.

10. Contact

Questions, requests, or complaints: support@lulliko.com