Privacy Policy

Lullawood creates personalized bedtime stories for children, set up and controlled by a parent or guardian. We take the privacy of families — and especially children — seriously. This policy explains what we collect, why, and the choices you have.

Who we are

Lullawood (“we”, “us”) is the data controller for the information described here. You can reach us at [email protected].

Information we collect

• Parent account details — your email address and login information.
• Child profile — the details you choose to provide so we can write your child's stories: a first name (or nickname), an age range, and preferences such as favourite animals, colours and interests.
• Story content — the stories we generate, and a short summary of past adventures so characters and storylines can recur.
• Billing information — handled by our payment processor (Stripe). We do not store your full card number.
• Technical and usage data — basic information such as device type and pages visited, used to operate and improve the service.

A note on children's data

Lullawood is intended to be set up and operated by an adult. We do not knowingly allow children to create their own accounts. A child's profile is provided and controlled by their parent or guardian, and is used only to generate that child's stories. We never sell children's data, never use it for advertising, and never build advertising profiles of children. We collect the minimum needed to personalize a story — you do not need to provide a surname, address, photo, or birth date.

How we use information

• To generate and deliver your child's personalized stories and audio.
• To run your account, process payments, and provide support.
• To keep the service safe and to improve it (using aggregated, non-identifying data where possible).
• To meet legal obligations.

AI and how stories are made

Stories are generated using trusted third-party AI providers. Your child's profile is sent to those providers solely to write that story. We use providers under terms that do not permit using your content to train their public models. Stories pass through safety checks designed to keep content gentle and age-appropriate (see our Child Safety page).

Who we share with

We share data only with service providers who help us run Lullawood — for example hosting, AI generation, email delivery, audio narration, payments, and (if you choose a printed plan) printing and postage. They may only use the data to provide their service to us. We do not sell your or your child's personal information. We may disclose information if required by law, or in connection with a business transfer, in which case this policy continues to apply.

Keeping and deleting data

We keep information while your account is active. You can ask us to delete a child's profile, or your whole account and everything tied to it, at any time by emailing [email protected]. We will action deletion promptly, subject to any legal retention we are required to keep.

Your rights

Depending on where you live (including under UK/EU GDPR and California's CCPA), you may have the right to access, correct, delete, or export your information, and to object to or restrict certain processing. To exercise any right, contact us at the address above.

Security and international transfers

We use reasonable technical and organizational measures to protect your data. Our providers may process data in other countries; where they do, we rely on appropriate safeguards.

Changes

If we update this policy we will revise the date above and, for material changes, let you know.