We don't know who you are.

01Who we are

Lalai ("we", "us") is responsible for the personal information described in this policy. It covers the Lalai app on iPhone, iPad and Android, and the website at lalai.app. You can write to us about anything in it at support@lalai.app.

02At a glance

This is all the information about you or your device that leaves your phone or browser, and nothing else does.

03What we don't do

• We don't ask for your name, email address, phone number or date of birth.
• There are no advertisements in the app or on the website, and no advertising networks.
• There is no analytics or crash-reporting service in the app or on the website. We don't measure which stories you play, how long you listen, or when you open the app.
• We don't track you across other apps or websites, and we ask for no permission to.
• We don't sell or share personal information, as those words are used in California and other US state privacy laws, and we don't use it for targeted advertising.
• We collect no health information. Lalai doesn't measure your sleep, and it doesn't use your microphone, camera, location, contacts or health data.

04The customer id

Paid stories, sounds and music are kept on our servers rather than inside the app, so our server has to know that a request comes from a subscriber. When the app first starts, RevenueCat's software on your device creates a random customer id. It isn't made from your name, email, phone number or hardware, and we can't tell whose Apple ID or Google account it belongs to. When you subscribe, your subscription is recorded against it.

The app sends this id with each request for a paid file. Our server asks RevenueCat whether the id has an active subscription and remembers the yes-or-no answer for up to 10 minutes, so it doesn't have to ask every time. That answer is all it learns.

05Purchases

You buy and manage a subscription through the App Store or Google Play. Apple or Google take the payment and handle your payment details under their own privacy policies. We never see them.

RevenueCat checks store receipts for us, so the app knows when a trial, purchase or renewal is valid. It receives the customer id, the store receipt and purchase history, the device type and operating system, the device's language and currency settings, and when the app last checked in. If the store doesn't say which country you are in, RevenueCat works it out from your IP address and then discards the address. It doesn't receive your name or email, because Lalai doesn't have them, and it collects no location or advertising data. See revenuecat.com/privacy.

06Delivering the app's content

Lalai's audio and artwork, and this website, are delivered through Cloudflare's network. Like any network provider, Cloudflare processes your IP address and technical details of each request, such as the time and the file requested, to deliver it and to protect the service from attacks. We don't keep request logs of our own. See cloudflare.com/privacypolicy.

07App updates

The app can receive small updates over the air from Expo. When it checks for one, it sends the platform, the app's version and release channel, the ids of the updates it has, and a random installation id that Expo's software creates on your device. That id isn't taken from your hardware or any account; Expo uses it to count installations, and it changes if you reinstall the app. If the app closed because of an error the last time it ran, the check also carries a short technical description of that error. Like any request, it reaches Expo from your IP address. Nothing about you or what you listen to is included. See expo.dev/privacy.

08This website

The website sets no cookies and stores nothing in your browser. It has no analytics, advertising or tracking code, and no content embedded from other companies. Its fonts, pictures and sounds are served from our own site, so visiting it doesn't send your IP address to Google or anyone else. The sample stories, the mixer and the music play inside your browser and report nothing back. Because nothing on the site tracks you, there is nothing for a Do Not Track or Global Privacy Control signal to switch off.

09When you write to us

Mail to support@lalai.app passes through Cloudflare Email Routing to our mailbox. Cloudflare doesn't store the messages it forwards, but keeps a log of each one's sender, recipient and subject for up to 30 days. We use your address and your message only to answer you, and we delete them once they are no longer needed for that.

10What stays on your device

Your settings, your saved mixes, your place in a story and the audio kept for offline listening are stored only on your device and are never uploaded. Deleting the app removes all of them, and Settings → Clear downloaded sounds removes the downloaded audio at any time.

11Children

Lalai is made for adults and is not directed at children under 13. We don't knowingly collect personal information from children. If you believe a child has sent us personal information, for example by email, write to us and we will delete it.

12Legal bases

Where the EU or UK General Data Protection Regulation applies, we rely on:

• performing our contract with you, to check your subscription and deliver paid content with the customer id and receipt checks; and
• our legitimate interests in keeping Lalai secure, working and free of abuse, in delivering app updates, and in answering you when you write to us.

13International transfers

RevenueCat, Cloudflare and Expo are based in the United States and may process information there and in other countries. Where the law requires it, information sent from the EU, the EEA, the UK or Switzerland is protected by safeguards the law recognises. RevenueCat relies on the European Commission's Standard Contractual Clauses. Cloudflare and Expo are certified under the EU-US Data Privacy Framework and its UK and Swiss extensions.

14How long we keep it

We keep information only for as long as it's needed for the purposes above. The table in At a glance gives each period. Subscription records can be kept longer where the law requires it, for example for tax and accounting, and only as long as it requires.

15Security

Everything Lalai sends travels encrypted over HTTPS, and access to subscription records is limited to the people who run Lalai.

16Your rights

Depending on where you live, you may have the right to know what personal information we hold about you, and to get a copy of it, correct it or delete it. You may also have the right to restrict or object to how we use it. We hold nothing that tells us who you are, so in practice this concerns the subscription record linked to your customer id.

To use any of these rights, write to support@lalai.app. So that we can find the right record, we may ask for the order number from your Apple or Google receipt. We will answer within one month, and we will never treat you differently for asking.

If you are in the EU, the EEA or the UK, you can also complain to your data protection authority. In the UK, that's the Information Commissioner's Office.

17Changes

If this policy changes, we will update this page and the date at the top of it. We will also announce material changes in the app.

18Contact

Questions about privacy go to support@lalai.app.