Privacy Policy

Last updated 5 June 2026

Lulloon (“we”, “us”) makes personalized bedtime stories for children, created and managed by their parents or guardians. We care deeply about the privacy of the families who use our service, and especially about the children whose stories we create. This policy explains what we collect, why, and the choices you have.

Accounts are for parents, not children

Lulloon accounts are created and controlled by an adult parent or guardian. Children do not sign in, create accounts, or interact with the service directly. A parent sets everything up and receives the stories by email on the child’s behalf.

Information we collect

Parent account details — your email address and authentication information, so you can sign in and receive stories.
Billing details — handled by our payment processor, Stripe. We never see or store your full card number.
Child story profile— the first name, date of birth, appearance description, companion/pet, favorite color, favorite animal, and interests you choose to provide. We use the date of birth to tailor each story to your child’s age and to celebrate their birthday, and the rest only to personalize and illustrate their stories.
Delivery preferences — the bedtime and time zone you select for nightly delivery.
Generated content — the stories and illustrations we create for your child, stored so you can revisit them in your library.

We ask you to provide only a first name (or nickname) for your child and to avoid including sensitive personal information in free-text fields.

Children's privacy & parental consent

Because our stories are made for children, a parent or guardian provides the child’s story details and, in doing so, gives consent for us to use that information solely to generate and deliver that child’s stories. We do not knowingly collect personal information directly from children, we do not require a child to disclose more than is reasonably necessary, and we do not use children’s information for advertising or to build marketing profiles. Parents can review, edit, or delete a child’s profile and stories at any time, or contact us to do so on their behalf.

How we use information

To generate, illustrate, and deliver your child’s stories.
To send the nightly story email and essential service notices.
To process your subscription and prevent fraud.
To maintain, secure, and improve the service.

We do not sell your or your child’s personal information, and we do not use it for third-party advertising.

Service providers we share with

We share the minimum information needed with trusted providers who help us run Lulloon: hosting and database (Supabase, Vercel), AI text and image generation (Kie.ai), email delivery (Resend), and payments (Stripe). These providers process data on our behalf under their own terms and are not permitted to use your information for their own purposes. Story details may be sent to our AI providers to generate the story text and illustrations.

Data retention

We keep your account, child profile, and generated stories for as long as your account is active so you can revisit them. If you delete a profile or close your account, we delete or anonymize the associated personal information within a reasonable period, except where we must retain limited records for legal, tax, or fraud-prevention purposes.

Your choices and rights

You can edit or delete your child’s profile, pause delivery, update billing, or cancel at any time from your account. You may also request access to, correction of, or deletion of your personal information by contacting us. Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA.

Contact us

Questions about this policy or your data? Email privacy@lulloon.com.

This page is a plain-language summary provided for transparency. It is not legal advice and should be reviewed by a qualified attorney before you rely on it for your business.