Privacy Policy

1. Who we are

This Privacy Policy explains how the Lullaby mobile app for iOS and Android (the “app”) and this website handle personal information. The app is published by Nikiforos Pertselis (“we”, “us”), based in Greece, who is the data controller for the processing described here. You can contact us at npertselis@gmail.com.

2. Information that stays on your device

To work, the app saves a small amount of information in its private storage on your phone or tablet:

• your preferences: language, sleep timer and fade-out settings, haptic feedback;
• favourite sounds, recently played sounds, your last mix and the mixes you save;
• whether you have Premium (a local copy of your purchase status);
• simple counters used to space out ads — for example, when the last full-screen ad was shown — and how many times the app has been opened.

This information is not sent to us. It is deleted when you uninstall the app or clear its data. Depending on your device settings, it may be included in your device’s own backups (iCloud or Google), which Apple or Google manage, not us.

3. What we don’t collect

We don’t ask for or collect your name, email address, phone number, contacts, photos, precise location or health information. The app doesn’t use your microphone or camera, and there is no account or login. To understand how the app is used and to fix crashes, we use Google Firebase (see section 4.6); it doesn’t receive your name, email address or other contact details.

4. Services provided by others

The app relies on a few services from Google and Apple. They process data under their own privacy policies, described below.

4.1 Advertising — Google AdMob

If you use the free version, the app shows ads provided by Google AdMob (Google Ireland Limited if you are in the European Economic Area, the UK or Switzerland, and Google LLC elsewhere). To deliver, measure and protect these ads, the Google Mobile Ads SDK built into the app collects and shares with Google:

• device identifiers — your device’s advertising ID (the Android advertising ID, or Apple’s IDFA if you allow it), the app set ID and similar identifiers;
• your IP address, which may be used to estimate your general, not precise, location;
• ad and app interactions — for example which ads you see, taps, video views and app launches;
• device and diagnostic information — for example device model, operating system, language, app version, crash logs, launch time and performance data.

Google uses this data to show ads, limit how often you see them, measure their performance, detect fraud and abuse and — only with your consent where consent is required — to personalise them. Google may work with other advertising partners; where consent is required, you can see and choose them in the consent form. Learn more in How Google uses information from sites or apps that use its services and the Google Privacy Policy.

Because the app is used around sleeping babies, ads are muted and limited to content suitable for general audiences (rated G). If you have Premium, the app doesn’t request ads.

4.2 Your consent and privacy choices

If you are in the European Economic Area, the United Kingdom or Switzerland, the app uses Google’s User Messaging Platform to ask for your consent — following the IAB Transparency & Consent Framework — before ads are personalised and before information is stored on or read from your device for advertising. To decide whether to show this form, the consent tool processes limited technical data, such as your approximate location based on your IP address. You can change or withdraw your choices at any time in the app under Settings → Privacy options. If you don’t consent, you may still see ads that are not personalised.

On iPhone and iPad, the app can only use your device’s advertising identifier (IDFA) if you allow it through Apple’s App Tracking Transparency prompt. You can change this at any time in Settings → Privacy & Security → Tracking.

On Android, you can delete or reset your advertising ID in your device settings (Settings → Privacy → Ads, or Settings → Google → Ads).

4.3 In-app purchases

Premium subscriptions and the lifetime unlock are sold through the Apple App Store and Google Play. Apple or Google process your payment; we never receive your card or payment details. The app receives only a confirmation of which product you bought, with a transaction reference, so it can unlock Premium on your device, and it keeps that status locally. We don’t send it to any server of ours. See the Apple Privacy Policy and the Google Privacy Policy.

4.4 Notifications and background audio

While sounds are playing, the app shows a media notification with playback controls. It never uses notifications for marketing messages. Background playback and lock-screen controls are provided by your device’s operating system.

4.5 Updates and ratings

To tell you about new versions, the app asks the App Store or Google Play whether an update exists; on Android, Google Play can download and install it for you. If you rate the app, Apple’s or Google’s own rating window appears. Like any request to a store, these reveal your IP address and basic device information to Apple or Google, who handle them under their own privacy policies. We receive no personal data from them.

4.6 Usage statistics, crash reports and remote settings — Google Firebase

We use three Google Firebase services. Google Analytics for Firebase records how the app is used — for example which screens are opened, which sounds and mixes are played and whether onboarding was completed — together with an app-instance identifier, your device model and operating system, the app version, country and language; where consent is required, it only stores this with your consent, which you give and change in the same consent form as for ads. Firebase Crashlytics sends a report when the app crashes or hits a serious error: the error and its stack trace, your device model and operating system and the app version, with an installation identifier. Firebase Remote Config lets us adjust settings, such as how often ads may appear, without releasing an update; the app downloads these settings from Google. Google processes this data on our behalf; see Privacy and Security in Firebase. We don’t use these services to identify you.

5. Why we are allowed to use data (legal bases)

Where the EU General Data Protection Regulation (GDPR) or the UK GDPR applies, we rely on:

• your consent — for personalised advertising and for storing or accessing information on your device for advertising, and for usage statistics (Google Analytics for Firebase). You can withdraw it at any time; this doesn’t affect processing that happened before;
• our legitimate interests — to show non-personalised ads that keep the free version free, to limit how often ads appear, to prevent fraud and keep the app secure, and to find and fix crashes and adjust app settings remotely (Firebase Crashlytics and Remote Config);
• the performance of a contract — to provide Premium when you buy it;
• legal obligations — where the law requires us to keep or disclose information.

6. How long data is kept

• Information stored on your device stays there until you delete it, clear the app’s data or uninstall the app.
• Data collected by Google for advertising is kept according to Google’s retention policies.
• Usage statistics are kept by Google Analytics for Firebase for 2 months (aggregated reports may be kept longer); crash reports are kept by Firebase Crashlytics for 90 days.
• Records of your purchases are kept by Apple or Google in your store account.
• If you email us, we keep your messages only as long as we need them to help you and answer follow-up questions, and then delete them. You can ask us to delete them sooner.

7. Your choices and deleting your data

• Delete everything the app stores: uninstall the app. On Android you can also use Settings → Apps → Lullaby → Storage → Clear storage.
• Change your consent for ads and usage statistics: in the app, Settings → Privacy options (shown where consent is required).
• Stop tracking on iPhone: Settings → Privacy & Security → Tracking.
• Reset or delete your advertising ID on Android: Settings → Privacy → Ads (or Settings → Google → Ads).
• No ads at all: Premium removes every ad.
• Data held by Google: Google offers its own tools to review and control ad data, such as My Ad Center.
• Emails you sent us: ask us and we’ll delete our correspondence.

Because the app has no accounts and we don’t keep a copy of your data on any server, there is no account for us to delete. If you have questions, write to npertselis@gmail.com.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete or port your personal data, to restrict or object to its processing, and to withdraw your consent at any time. Since we don’t hold personal data about you on our own systems (apart from emails you send us), many requests are best handled with the tools above or directly with Google or Apple — but we are always happy to help: write to npertselis@gmail.com.

If you are in the EEA or the UK, you also have the right to lodge a complaint with a data protection authority — in Greece, the Hellenic Data Protection Authority — or with the authority where you live or work.

California and other US states: we don’t sell personal information for money. However, some US state laws may treat the use of advertising identifiers for personalised ads as “selling” or “sharing” personal information. You can opt out by limiting ad tracking on your device (see section 7) or through the privacy options in the app, where available. We won’t treat you differently for exercising your rights.

9. Children

Lullaby is made for parents and caregivers to use for their babies; it is not meant to be used by children themselves. The app is not directed at children under 13 (or the equivalent minimum age in your country), and we don’t knowingly collect personal information from children. Ads are limited to content suitable for general audiences. If you believe a child has given us personal information, contact us and we will delete it.

10. Security

Data sent by the Google SDKs is encrypted in transit (TLS). Information stored by the app is kept in its private storage, protected by your device’s operating system, and we don’t operate servers that store your data. No method of transmission or storage is completely secure, but we use well-established providers and keep the data involved to a minimum.

11. International transfers

Google and Apple may process data in countries other than your own, including the United States. For transfers from the EEA, the UK and Switzerland, they rely on appropriate safeguards such as the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

12. This website

This website is a static site. It doesn’t use cookies, analytics or advertising, and it doesn’t load content from other companies. Our hosting provider processes technical data, such as your IP address and browser type, in server logs to deliver the site and keep it secure. If you close the language suggestion on a page, your browser remembers that for the current session only; this information never leaves your device.

13. Changes to this policy

We may update this policy when the app or the law changes. We will change the “Last updated” date at the top and, for significant changes, let you know in the app or on this website.

14. Contact

Questions or requests about privacy? Contact Nikiforos Pertselis at npertselis@gmail.com.

Back to top ↑