Who can listen, where files are stored, what we do with your data, and what we don’t.
Lullavo is built around a small promise: voice recordings of people you love should be private by default, available to the people you share with, and under your control.
Who can hear your recordings
- Anyone with the physical sticker.
- Anyone with the listen link.
- You, from My recordings.
That’s it. Lullavo recordings are not indexed on the public web.
How we store recordings
- Audio files live in a private storage bucket. No public access.
- Listener pages fetch audio via short-lived signed URLs that rotate every 30 days.
- Files are encrypted at rest by our storage provider.
Authentication
We use passwordless magic links. No passwords to leak, reuse, or reset.
What we collect
- Your email.
- Your chosen display name, the listener name, book title, occasion.
- The audio file.
- Basic technical logs for abuse prevention. Kept 30–90 days.
We don’t sell data. We don’t run ads. We don’t build profiles.
Who we share with
- Supabase (database + storage + auth).
- Vercel (hosting).
- Resend (transactional email).
- Klaviyo (analytics event tracking).
- Cloudflare (Turnstile on the transfer-request form).
What we never do
- Sell your data.
- Run tracking pixels on the listener page.
- Post or index recordings publicly.
- Allow password-based logins.
See our formal Privacy Policy for legal language.
More in help
← All help topics · Still stuck? Email hello@lullavo.com.
Lullavo 