Consumer Health Data Privacy Policy

Last updated 10 November 2026

This policy explains how Lula Labs Ltd ("Lula", "we", "us") handles "consumer health data" as defined by US state laws such as Washington's My Health My Data Act and Nevada's consumer health data law. It adds to our Privacy Policy, which covers all other personal information.

1. Consumer health data we collect

We do not collect precise location, biometric data, or any data from wearables or other apps.

2. Where it comes from

Only from you, through your choices and activity in the Lula app.

3. Why we collect and use it

Only to personalize Lula for you: recommending meditations, choosing Today's Meditation and showing your progress. We collect it only with your consent, which you give on the screen that explains this when you choose these topics.

4. Who we share it with

We do not sell your consumer health data, and we do not share it with third parties. It is stored and processed only by our service provider Supabase, which hosts our database and acts only on our instructions under a written contract.

If this ever changes, we will ask for your separate consent first, and we will never sell your consumer health data without your signed authorization.

5. Your rights

You have the right to:

6. How to use your rights

Email hello@lulameditation.com from the address on your account. We will respond within 45 days, and may extend this by 45 more days where necessary, telling you why.

If we decline your request, you can appeal by replying to our decision. We will respond to your appeal within 45 days. If you are still unhappy, you can contact your state Attorney General (in Washington: atg.wa.gov).

7. Contact us

Lula Labs Ltd, hello@lulameditation.com