Privacy Policy
Last updated: 1 September 2026
The short version. Lullwren stores everything you log on your own device. If you create an account, your data is also synced to our server so you can restore it and share it with your household. We do not sell your data, and we do not use your health or family data to target advertising. You can export or permanently delete everything from inside the app.
Who we are
Lullwren ("we", "us") is a parenting and health tracking app for Android. This policy explains what the app collects, why, who it is shared with, and the control you have over it. It applies to the Lullwren mobile app and to this website.
For any privacy question, contact privacy@lullwren.com.
What we collect
Information you give us
| Category | Examples | Why |
|---|---|---|
| Account details | Email address, password, display name, role label (for example "Mum", "Dad", "Caregiver"). If you sign in with Google, we receive your Google account email and identifier. | To create your account, sign you in, and link you to your household. |
| Baby & child data | Feeding sessions, nappy/diaper logs, sleep sessions, growth measurements, milestones, vaccinations, health logs, and the children's names and dates of birth you enter. | To provide the tracking features and charts that are the purpose of the app. |
| Pregnancy data | Due dates, contractions, kick counts, symptoms, appointments. | Same as above. |
| Cycle data | Period logs and related symptoms. | Same as above. |
| Fitness & body data | BMI logs, body measurements, workouts, sets, cardio logs, health goals. | Same as above. |
| Household sharing | Households you create or join, member lists, invite codes. | To let the people you invite see and add to the same records. |
Health data. Much of the above is health information about you and your family, including data about children. We treat it as sensitive: it is never sold, never used to target ads, and never shared with anyone outside the household you choose.
Your profile photo
If you add a profile picture, the image stays on your device. Only a reference to its location is stored in your profile — the picture itself is not uploaded to our servers.
Information collected automatically
Lullwren does not include analytics or crash-reporting services. We do not track your behaviour in the app, and we do not build advertising profiles from anything you log.
Advertising
The Android app shows banner advertisements supplied by Google AdMob. Because Lullwren is available to people aged 13 and over, we request non-personalized ads only. This means ads are chosen from general context rather than from a profile of your interests.
To serve these ads, Google receives technical information such as your device's advertising identifier, device type, operating system, approximate location derived from your IP address, and the fact that an ad was requested. Google's handling of that data is governed by the Google Privacy & Terms. Nothing you log in Lullwren — no health, pregnancy, cycle, child or fitness data — is ever passed to Google or any advertiser.
Where required by law, you will be asked for your advertising choices when you first open the app, and you can change them later from the app's settings.
Where your data is stored
Everything you log is written first to a database on your own device, which is why the app works offline.
If you are signed in, your records are also synced to our hosted backend, provided by Supabase, which stores them on our behalf. Data is encrypted in transit, and access rules ensure that only you and the members of your household can read your rows.
If you use the app without an account, your data never leaves your device — and it is not recoverable if you lose or reset the device.
Who we share it with
- People you invite. Members of your household can see and edit the records in that household. That is the purpose of the sharing feature. Remove a member to end their access.
- Supabase, our hosting and authentication provider, processes data on our instructions.
- Google, for Google Sign-In (if you use it) and for serving advertisements as described above.
- Legal requirements. We may disclose data if we are legally required to.
We do not sell personal data, and we do not share it with data brokers or advertisers for their own purposes.
How long we keep it
We keep your data until you delete it. Deleting your account removes your records from our servers and wipes the copy stored on your device. Backups are cycled out within 30 days.
Your choices and rights
- Export. Settings → Export data produces a JSON file containing your records, which you can save or send anywhere you like.
- Correction. Any entry can be edited or removed in the app.
- Deletion. Settings → Delete account permanently removes your account and data. Instructions for requesting deletion without the app are on our account deletion page.
- Log out. Signing out clears the data cached on that device.
Depending on where you live, you may also have the right to access, restrict, or object to our processing, to data portability, and to complain to your local data protection authority. Contact us and we will action it.
Children
Lullwren is intended for people aged 13 and over. The app is designed for parents and caregivers to record information about their children; those children are not our users and do not have accounts. We do not knowingly collect data from a child under 13 as a user. If you believe a child under 13 has created an account, contact us and we will remove it.
Security
Data is encrypted in transit, access to your rows is restricted by row-level security rules, and passwords are stored hashed by our authentication provider — we never see them. No system is perfectly secure, so please use a strong, unique password.
Changes to this policy
If we change this policy we will update the date at the top of this page, and for significant changes we will notify you in the app.