Privacy Policy

Last updated: June 22, 2026

    The short version: Lulla stores your personal data on your device and in your private iCloud account. We never sell it, never share it with advertisers, and never read it ourselves. Your mental health data stays yours.
  

1. Who we are

Lulla is an iOS app built by Micky Biddison ("we," "our," or "us"). You can reach us at support@lullaapp.com.

2. What data Lulla collects

Lulla collects only what you provide or authorize:

Daily check-ins — your mood rating (1–5), selected triggers, and sleep choice.
SOS sessions — which symptom you selected, the technique used, how long the session lasted, and whether you felt better, the same, or still struggling afterward.
Practice activity — thought records and worry-jar entries you create inside the app.
Your coping statement — personal text you write and save.
Your safe circle — names and phone numbers of people you add.
Apple HealthKit data (only if you grant permission) — sleep duration, resting heart rate, and heart rate variability. This data is read from Apple Health; Lulla also writes mindful session records back to Apple Health after SOS exercises.
In-app purchases — processed entirely by Apple. Lulla receives only a receipt; we never see your payment details.

3. How Lulla uses your data

To show you your mood history, readiness score, and weekly patterns inside the app.
To surface insights about your anxiety triggers and which techniques work best for you.
To generate a personalized experience — for example, surfacing your coping statement during SOS recovery.
We do not use your data for advertising, profiling, or any purpose outside of making the app work for you.

4. Where your data lives

All data is stored on your device in a local database. If you have iCloud enabled and are signed into iCloud on your device, your data is also synced to your private iCloud account via CloudKit — this sync happens between Apple's servers and your account only. We cannot access your iCloud data.

Thought records and worry-jar entries are stored in your device's local app storage (UserDefaults). They are not synced to iCloud.

5. HealthKit

Lulla requests read access to sleep analysis, resting heart rate, and heart rate variability from Apple Health. Lulla requests write access to log mindful sessions.

Your HealthKit data:

Is never shared with third parties.
Is never sold.
Is never uploaded to our servers (we have none).
Is processed only on your device to generate your readiness score and weekly insights.

You can revoke HealthKit access at any time in iPhone Settings → Privacy & Security → Health → Lulla.

6. Third-party services

Lulla does not use analytics SDKs, advertising networks, or crash-reporting services. The only external service involved is Apple:

App Store / StoreKit — for processing subscription purchases.
CloudKit — for private iCloud sync. Data is end-to-end accessible only via your Apple ID.
Apple Health — for reading and writing health data, subject to Apple's own privacy policies.

7. Data retention and deletion

Your data lives on your device. To delete it, delete the Lulla app from your iPhone — this removes the local database. If iCloud sync is on, go to iPhone Settings → Apple ID → iCloud → Manage Account Storage → Lulla → Delete Data to remove iCloud copies.

We have no server-side copies to delete.

8. Children

Lulla is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided personal data through Lulla, contact us and we will assist with deletion.

9. Your rights (CCPA / GDPR)

Because all data is stored on your device or in your private iCloud account, you have full control at all times. You can:

Access your data — it's visible inside the app.
Delete your data — by deleting the app and removing iCloud data as described above.
Opt out of data "sale" — we never sell data, so no action is needed.

For GDPR inquiries, contact us at support@lullaapp.com.

10. Mental health disclaimer

Lulla is a wellness tool, not a medical device. It is not a substitute for professional mental health care, diagnosis, or treatment. If you are in crisis, please contact a crisis line (such as 988 in the US) or visit your nearest emergency room.

11. Changes to this policy

If we materially change this policy, we will update the "Last updated" date above. Continued use of Lulla after changes constitutes acceptance of the updated policy.

12. Contact

Questions about this policy? Email us at support@lullaapp.com.