Privacy Policy

Effective 31 May 2026 · Last updated 30 August 2026

Lullula ("Lullula", "we", "us") is a browser extension and companion web service that reads web pages, PDFs, and EPUB documents aloud using text-to-speech, with optional AI-generated summaries. This policy explains what data we collect, how it is used, and the choices you have.

Lullula is an independent software project operated by a sole developer — the "we" in this policy and the controller of the personal data it describes. For any privacy question or request, contact support@lullula.io.

1. Data we collect

We collect only what is needed to read content aloud and to operate your account:

• Document content you choose to have read. When you start narration or request a summary, the text extracted from the current web page, PDF, or EPUB is sent to our service to generate speech audio and, if you enable summaries, an AI-generated summary. We only process the page you actively ask us to read — we do not read pages in the background or collect your browsing history.
• Account and authentication data. If you sign in, we process your email address and an authentication token issued for your Lullula account.
• Settings and preferences. Your selected voice, reading speed, theme, and feature toggles are stored locally and synced to your account so they persist across devices and sessions.
• Anonymous trial identifier. Before you sign in, we generate a random identifier to provide a limited free trial. It is not linked to your identity.

We do not collect health data, payment card data (see §5), personal communications, precise location, or browsing history. The Lullula browser extension and web app contain no third-party analytics or tracking SDKs; our marketing site uses consent-gated analytics, described in §4.

2. How we use data

• To convert the content you select into spoken audio.
• To generate optional summaries of that content.
• To authenticate you and provide subscription features.
• To save and sync your preferences.

We do not use your data to build advertising profiles, and we do not sell or rent your data to third parties. We also do not use the text or documents you submit to train AI models — ours or anyone else's — and we choose providers whose terms state the same for the data we send them (see §3).

3. Sharing and sub-processors

We share data only with service providers that help us deliver the product, and only as needed to provide it:

• Microsoft Azure (Azure AI Speech) — the text you choose to have read is sent to Azure's text-to-speech service to generate the audio. Microsoft processes it to synthesize speech and does not use it to train its models.
• DeepSeek — when you request an AI summary, the text is processed by DeepSeek's API. Per DeepSeek's policy, paid API inputs are not used for model training and are retained by DeepSeek for up to about 30 days; DeepSeek processes and stores data in the People's Republic of China, so summary text is transferred there.
• Amazon Web Services — our backend, database, and the cached audio files generated from your text are hosted on AWS in the United States.
• Resend — sends our transactional email (sign-in verification, receipts, feedback notifications).
• ImprovMX — forwards email you send to our support address to the developer's mailbox.
• Payment processor (Stripe) — subscription payments are handled by Stripe in the Lullula web app. The extension itself does not collect or process payment card details.
• Website analytics — our marketing site (lullula.io) uses Google Analytics 4 (cookie-based, loaded only after consent) to understand site usage. The Lullula web app itself contains no analytics service. See §4.

These providers process data on our behalf. We do not transfer your data to anyone for their independent use.

4. Cookies and analytics

Our marketing site (lullula.io) uses one analytics service to understand how the site is used. This applies to the marketing site only — the Lullula web app and the browser extension contain no analytics or tracking SDKs.

• Google Analytics 4 — uses cookies, but only after you opt in via our cookie banner. We use Google Consent Mode v2: until you accept, Google Analytics stores no analytics data on your device and sets no cookies (it may send anonymous, cookie-less signals). We enable analytics storage only; advertising signals stay disabled, so we build no advertising profiles.
• First-party attribution cookie (vm_src) — set by the marketing site only after you opt in, when you click an install or sign-up link. It holds the page you were on (and campaign name, if any) — no identifiers — and expires after 30 days. If you then create an account, that page name is stored with the account so we know which of our pages convince people to sign up. It is never shared with third parties.

Your control. A banner asks for your choice on your first visit to the marketing site. You can change or withdraw your choice at any time using the "Cookie preferences" link in the site footer. If you decline, Google Analytics sets no cookies, no vm_src cookie is set, and no analytics data is stored on your device.

5. Payments

Subscriptions are purchased through the Lullula web app using Stripe. Card numbers and payment details are entered into and handled by Stripe directly; the extension never receives or stores them.

6. Data retention

• Narrated text and audio. The text you play is processed transiently to generate speech. Generated audio files are cached so repeat plays don't re-synthesize, and are deleted automatically after at most 90 days.
• Summary text. Text sent for summarization is retained by DeepSeek for up to about 30 days under their policy (see §3); we keep the generated summary with your reading history while your account is active.
• Account data is retained while your account is active. When you delete your account, associated personal data is deleted or anonymized.
• Locally stored settings remain on your device until you remove the extension or clear its storage.

7. Your choices and rights

• Access/deletion. You may request access to or deletion of your account data by contacting us at support@lullula.io.
• Sign out. Signing out removes the stored authentication token from your device.
• Uninstall. Removing the extension deletes its locally stored data.
• Depending on your location, you may have additional rights (e.g., under GDPR or CCPA), including the right to access, correct, delete, or restrict processing of your personal data.

8. Security

We use industry-standard measures, including encryption in transit (HTTPS), to protect your data. No method of transmission or storage is completely secure, but we work to protect your information against unauthorized access.

9. Children

Lullula is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect personal data from them.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above and, where appropriate, through in-product notice.

11. Contact

Questions or requests: support@lullula.io.