Privacy policy

At lullaloop, your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal data when you use our website, our mobile app, and our services.

1. Who we are

lullaloop is a personalized song creation platform and mobile app based in Como, Italy, and complies with GDPR and applicable laws.

2. What data we collect

Depending on how you use lullaloop, we may collect the following types of data:

• Personal information: name, email, shipping address
• Baby details: name, birthdate, preferences
• Audio recordings
• Device and usage information: IP, browser, logs, a device or installation identifier, and product-analytics events (which screens and features you use, and playback actions such as starting a song)

Our product-analytics events are linked to your account, identified by your email, so they are not anonymous and help us understand how signed-in users use the app. In our iOS mobile app specifically, we collect the email address you use for passwordless sign-in and product-analytics events through PostHog, such as login attempts, an album being opened, or a song being played.

3. Why we collect your data

To create songs, deliver services, and improve our experience.

4. Legal basis for processing

Contractual necessity, consent, and legitimate interest.

5. How we share your data

Only with the service providers who help us run lullaloop: Stripe (payment processing), Cloudflare (hosting and audio delivery), and PostHog (product analytics, hosted in the European Union). We do not sell your personal data, and we do not use it for cross-app advertising or tracking. This also applies to the analytics and device-identifier data described above: it is never shared with data brokers, and it is never used for advertising or for tracking you across other companies' apps and websites.

6. Data retention

We retain data up to 12 months; audio is deleted after delivery unless requested.

7. Your rights

You may request access, correction, or erasure. Withdraw consent anytime.

8. Security

SSL, access control, and encryption are in place.

9. Children’s privacy

We don't collect data from children under 16 directly.

10. Contact us

Email: privacy@lullaloop.com