Rablab ("we", "us", "our") built and operates Lullogram. This policy explains what we collect, how we use it, and your rights. It applies to everything Lullogram: the iOS app, the Android app, our website at lullogram.app, and the Lullogram skill for Amazon Alexa. Rablab is the data controller.

Information we collect

In the apps (iOS and Android)

• Email address, for sign-in via one-time passcode (no passwords).

• Sleep, step, and activity data, read with your permission from Apple Health on iOS or Health Connect on Android. We only read this data; we never write to it.

• Location, for weather and to tag thoughts and dot cam captures, only if you grant permission.

• Mood entries (mood level, energy, optional note, circadian phase).

• Journal entries and dot cam images, stored in your account.

• Device motion, optionally, for sleep estimation.

• SOS contacts, quiet cards, medication reminders, and app preferences, stored only on your device and never uploaded.

On our website (lullogram.app)

• Anonymous, cookieless usage statistics (page views, referrer, country). We do not use tracking cookies or build advertising profiles.

• Whether visitors tap the download link, recorded as an anonymous event.

• When you contact us through the support form, your name, email address, and message, so we can reply.

On the Alexa skill

• Your spoken requests are processed by Amazon to operate the skill, under Amazon's own privacy policy. We receive only what is needed to respond, such as which soundscape you asked for.

• We store an anonymous count of how many times the skill has been opened, to tailor the greeting. It is not linked to your name, email, or any identifying information.

• We do not collect names, emails, recordings, or location through Alexa.

How we use your data

Solely to provide Lullogram's features: circadian tracking, sleep analysis, weather, journaling, mood tracking, soundscapes, breathing, grounding, reminders, and responding to support requests. We do not sell, rent, or share your personal data for advertising or marketing.

Analytics

In-app analytics use Firebase to collect anonymous usage data (features used, device type, OS version), with no personal data included. You can opt out in Settings, and this data expires after 14 months. Our website uses a privacy-friendly, cookieless analytics tool (Umami), and our hosting provider may record aggregate visit statistics. None of this identifies you.

Our processors

We use a small set of trusted providers to run Lullogram:

• Supabase, for account data and image storage.

• Apple and Google, for app distribution, purchases, and on-device health data with your permission.

• Amazon, for operating and hosting the Alexa skill.

• RevenueCat, for managing subscriptions.

• A third-party email provider, for sending your sign-in passcodes.

• Formspark, for handling support form submissions.

• Cloudflare and Framer, for hosting our audio files and website.

Some of these may process data outside the UK or EU, where we rely on appropriate safeguards.

Apple Health and Health Connect

With your explicit permission, we read sleep and activity data from Apple Health (iOS) or Health Connect (Android) to calculate your circadian rhythm and energy profile. We only read it, we never write, and HealthKit data stays on your device.

Data retention and deletion

You can delete your account and all server-side data in the app (Settings, then delete my account), immediately and permanently. You can also email sayhi@rablab.info to request a copy or deletion of your data, and we will respond within 30 days. Local data is cleared when you delete the app or account. Analytics data is anonymous and expires automatically.

Your rights

If you are in the UK or EU, you have the right to access, correct, delete, export, restrict, or object to the processing of your personal data, and to withdraw consent. Email sayhi@rablab.info to exercise these. You may also complain to the UK Information Commissioner's Office (ICO).

Children's privacy

Lullogram is not directed at children under 13, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy. We will change the date above, and continued use of Lullogram constitutes acceptance.

Contact

Questions or requests: sayhi@rablab.info

Governing law

This policy is governed by the laws of the United Kingdom.