Privacy Policy
Last updated: May 31, 2026
This Privacy Policy explains how Lull Sleep ("Lull," "we," "us," or "our") collects, uses, discloses, and protects information when you use our mobile application, websites, subscriptions, paywalls, and related services (collectively, the "Service").
Lull is designed to be local-first where practical. Some information stays on your device. Some limited information is sent to service providers so we can operate subscriptions, understand product usage, improve the app, and maintain the Service.
1. Important Health and Safety Note
Lull is a general wellness and sleep routine app. It is not a medical device, health care provider, clinical service, diagnosis tool, treatment, therapy, or substitute for professional medical advice. Do not use Lull for emergencies or to make medical decisions.
Although sleep-related information can be sensitive, Lull is not intended to create, receive, maintain, or transmit protected health information on behalf of a covered entity or business associate under HIPAA.
2. Information You Provide or Create
Depending on how you use the Service, you may provide or create information such as:
- your first name or display name inside the app;
- onboarding answers about sleep problems, wake factors, routines, bedtime, wake time, and sleep preferences;
- sleep logs, subjective sleep scores, notes, sleep duration, morning check-ins, routine completion, and experiment history;
- routine steps, settings, app-blocking selections, reminders, and preferences;
- voice recordings or voice notes if you choose to use recording features;
- support requests or messages you send to us.
3. Information Collected Automatically
We may collect or generate certain technical and usage information, including:
- a random per-install identifier;
- app version, build number, platform, general app events, feature usage, and subscription tier;
- routine step events, completion status, duration buckets, sleep score buckets, chronotype or sleep pattern categories, and other product analytics;
- purchase and entitlement status from Apple and RevenueCat;
- diagnostic information such as network errors or failed requests.
We do not use this information to track you across apps or websites for third-party advertising.
4. Camera, Microphone, Audio, Notifications, and App Blocking
Camera
If you allow camera access, Lull may briefly use the camera to estimate ambient light level during wind-down. The app reads exposure-related sensor values to derive a light-level bucket. Lull does not display, save, upload, or record camera images or video for this feature.
Microphone and Recordings
If you allow microphone access and choose to record a brain dump or voice note, the recording is saved locally on your device. Lull's product analytics may record that a recording exists and its approximate duration, but the audio file itself is not uploaded by the app's standard recording flow.
Audio
Lull may play sleep sounds, breathing audio, or other audio content. We may collect usage events such as whether an audio session started, completed, or how long it played.
Notifications and Live Activities
If enabled, Lull uses notifications and Live Activities to remind you about routines, check-ins, and sleep-related actions. You can manage notification permissions in iOS settings.
App Blocking
If you use app-blocking features, Lull uses Apple's Family Controls and Managed Settings frameworks to apply your selections on device. Your blocked app/category selections are stored for the app's functionality and may be synced between the app and its extension through Apple's app group storage.
5. Research and Analytics Data
Lull may send limited event data to analytics and research infrastructure so we can understand whether the app is working, improve routines, debug features, and evaluate aggregate sleep-pattern insights. This may include sleep scores, hours slept, routine steps, step attempts, light-level buckets, perceived temperature, media-session metadata, onboarding categories, and a random install identifier.
We do not intentionally send raw voice recordings, camera images, video, or free-text journal contents to analytics or research systems in the normal app flow. Avoid entering information that you do not want processed as described in this policy.
6. Purchases and Subscriptions
Purchases are processed by Apple. We use RevenueCat to manage subscription status, products, offerings, paywalls, restore purchases, and entitlements. We receive information from Apple and RevenueCat such as product identifiers, entitlement status, transaction state, renewal state, and related purchase metadata. We do not receive your full payment card number from Apple.
7. How We Use Information
We use information to:
- provide, maintain, personalize, and improve the Service;
- generate routines, experiments, reminders, and app experiences;
- store your preferences, sleep logs, notes, and progress;
- process subscriptions, purchases, restores, and premium entitlements;
- send notifications if you enable them;
- analyze app performance, feature usage, and aggregate trends;
- debug, secure, and prevent misuse of the Service;
- respond to support requests;
- comply with legal obligations and platform requirements.
8. How We Share Information
We do not sell your personal information. We may share information with:
- Service providers that help us operate the Service, such as hosting, analytics, purchase management, app infrastructure, customer support, and debugging providers;
- Apple for App Store purchases, subscriptions, refunds, notifications, device permissions, and platform functionality;
- RevenueCat for purchases, subscriptions, entitlements, paywalls, and customer center functionality;
- Analytics providers to understand product usage and improve the app;
- AI or content providers if a feature you use requires generating app content through a third-party provider;
- Legal, safety, or compliance recipients if we believe disclosure is required by law, legal process, security needs, fraud prevention, or to protect rights, safety, and property;
- Business transfer recipients in connection with a merger, acquisition, financing, reorganization, asset sale, or similar transaction.
9. Data Summary
| Category | Examples | Primary purpose |
|---|---|---|
| Sleep and routine data | Bedtime, wake time, sleep scores, routine steps, check-ins | Provide core app features and personalization |
| Audio recordings | Optional brain dump or voice note recordings | Stored locally for user access |
| Sensor-derived data | Ambient light bucket from camera exposure values | Support wind-down checks |
| Analytics and research events | Feature usage, duration buckets, score buckets, install ID | Improve, debug, and evaluate the app |
| Purchase data | Product ID, entitlement status, renewal state | Manage subscriptions and premium access |
| Support communications | Email address, message content, screenshots you send | Respond to requests and resolve issues |
10. Data Retention
Information stored locally remains on your device until you delete it, delete the app, or clear it through available app or device controls. Analytics, research, purchase, and support records may be retained for as long as reasonably necessary for the purposes described in this policy, including security, compliance, dispute resolution, tax, accounting, and business records.
11. Security
We use reasonable administrative, technical, and organizational measures intended to protect information. However, no app, device, network, or storage system is completely secure. We cannot guarantee absolute security.
12. Your Choices
You can:
- decline or revoke camera, microphone, notifications, and other permissions in iOS settings;
- delete local recordings or app data where the app provides controls, or delete the app from your device;
- manage or cancel subscriptions through your Apple account settings;
- contact us to request access, correction, deletion, or other privacy assistance, subject to legal and technical limits.
13. International Use
The Service may be operated from the United States or other countries. If you use the Service from outside your country, information may be transferred to, stored in, or processed in jurisdictions that may have different privacy laws than your location.
14. Children
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information to us, contact us and we will take appropriate steps to delete it.
15. Region-Specific Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of certain personal information. You may also have the right to complain to a privacy regulator. To make a request, contact us at the email below. We may need to verify your request before responding.
16. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date shows when it was last revised. If we make material changes, we may provide notice in the app, on our website, or by other reasonable means.
17. Contact
Questions or requests about this Privacy Policy can be sent to hello@trylull.com.