Privacy Policy

Last updated 10 November 2026

This policy explains what personal information Lula Labs Ltd ("Lula", "we", "us") collects when you use the Lula app, why we collect it, and the choices you have. We are the data controller for this information under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We keep things simple: we only collect what we need to run Lula and make it feel personal to you. We do not sell your data, and we do not show ads.

1. Information we collect

When you create an account and use Lula, we collect:

• Account details: your name, email address and password (stored securely in encrypted form; we can never see it).
• Your welcome answers: what you would like help with, when you like to meditate and how long you prefer. These are optional, and you can skip them or change them at any time in Settings.
• Your activity in Lula: the meditations you finish (with the date and length), the meditations you save, and your app settings such as light or night mode.
• Subscription status: whether you have Lula Premium, your plan and when it renews or ends. Payments are handled entirely by Apple or Google; we never receive your card details.
• Basic technical information needed to deliver the app securely, such as your device type and the time of requests to our servers.

2. Information about your health

Some of the topics you can choose, such as your cycle, menopause, pregnancy and motherhood, or grief, may reveal information about your health. Under UK GDPR this is "special category" data.

We only use it with your explicit consent, which you give by choosing these topics on the screen that explains this, and only to recommend meditations for you. Choosing them is optional. You can withdraw your consent at any time by removing them in Settings → "Change what you'd like help with". We never share it with anyone for marketing.

3. How we use your information

• To create and run your account and keep you signed in (to perform our contract with you).
• To play meditations, unlock Premium content you have paid for and restore purchases (contract).
• To personalize Lula, such as "Meditations For You" and Today's Meditation (our legitimate interest in giving you a useful app, and your explicit consent for any health-related choices).
• To show your calm calendar and progress (contract).
• To keep Lula secure, prevent misuse and fix problems (legitimate interests).
• To reply when you contact us (legitimate interests).
• To meet our legal obligations, such as keeping records for tax (legal obligation).

4. Who we share it with

We use a small number of trusted service providers who process data on our behalf and only as we instruct:

• Supabase: hosts our database, sign-in system and audio files.
• Apple App Store and Google Play: process your subscription payments under their own privacy policies.
• RevenueCat: manages subscription status across Apple and Google (once Premium is on sale).

5. International transfers

Our database is hosted by Supabase in the United States. When your information is transferred outside the UK, we rely on appropriate safeguards such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK-US "Data Bridge" where it applies.

6. How long we keep it

We keep your information for as long as you have a Lula account. If you delete your account, we delete your personal information within 30 days, except where we must keep limited records by law (for example, for tax).

7. Your rights

Under UK data protection law you have the right to:

• Access the personal information we hold about you.
• Correct anything that is wrong.
• Delete your information (you can delete your account in Settings).
• Restrict or object to how we use it.
• Receive a copy of it in a portable format.
• Withdraw consent at any time, for example by removing health-related topics in Settings.

8. Complaints

If you have a concern, please contact us first at hello@lulameditation.com. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.

9. Children

Lula is for people aged 16 and over. We do not knowingly collect information from anyone under 16. If you believe a child has created an account, please contact us and we will delete it.

10. Storage on your device

Lula stores a few small preferences on your device, such as light or night mode and whether you have seen certain messages. We do not use advertising trackers.

11. Your US state privacy rights

We do not sell your personal information, and we do not share it for targeted advertising. We do not use it to make decisions about you that have legal or similarly significant effects.

Depending on the US state you live in (for example California, Colorado, Connecticut, Virginia, Texas or Oregon), you may have the right to:

• Know what personal information we have about you and get a copy of it.
• Correct information that is wrong.
• Delete your information.
• Opt out of any sale, sharing for advertising or profiling (we do not do these).
• Appeal if we decline your request: reply to our decision and we will review it, and if you are still unhappy you can contact your state Attorney General.

How to use these rights

Email hello@lulameditation.com from the address on your account, or use the options in Settings. We will respond within 45 days. We will never treat you differently, or charge you more, for using your privacy rights.

If you live in Washington, Nevada or another state with consumer health data laws, please also read our Consumer Health Data Privacy Policy, available here and in Settings.

12. Changes to this policy

If we make important changes, we will let you know in the app before they take effect. The date at the top shows when this policy was last updated.

13. Contact us

Lula Labs Ltd, hello@lulameditation.com