Who can listen, where files are stored, what we do with your data, and what we don’t.
Lullavo is built around a small promise: voice recordings of people you love should be private by default, available to the people you share with, and under your control.
Who can hear your recordings
- Anyone with the physical sticker.
- Anyone with the listen link.
- You, from My recordings.
- And us, only in the narrow cases set out in our Terms: support you ask for, a report of abuse, or a legal requirement. We do not listen otherwise.
Lullavo recordings are not indexed on the public web.
How we store recordings
- Audio files live in a private storage bucket. No public access.
- Listener pages fetch audio through short-lived signed links that expire after 7 days. A link that leaks stops working on its own.
- Files are encrypted at rest by our storage provider.
- Every recording is backed up each night to a separate, secure place.
Signing in
Sign in uses a 6-digit code we email you. No passwords to leak, reuse, or reset.
What we collect
- Your email.
- Your chosen display name, the listener name, book title, occasion.
- The audio file.
- Basic technical logs for abuse prevention. Kept 30 to 90 days.
We don’t sell data. We don’t run ads. We don’t build profiles.
Who we share with
- Supabase (database, storage, and sign-in).
- Vercel (hosting).
- Resend (account and sign-in email).
- Klaviyo (marketing email for customers who opt in, order details from our store, and a few activity events such as a first listen).
- Cloudflare (spam protection on the transfer-request form).
What we never do
- Sell your data.
- Use your recordings for ads or to train AI.
- Run tracking pixels on the listener page.
- Post or index recordings publicly.
- Allow password-based logins.
See our formal Privacy Policy for legal language.
More in help
← All help topics · Still stuck? Send us a note.
