LuLuMe
Back to home

Privacy Policy

Last updated: February 2026

1. Introduction

LuLuMe ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

2. Information We Collect

Personal Information

  • Account information (name, email address)
  • Profile information (city, neighborhood, profile photo)
  • Children's information (name, age, interests, sensitivities)
  • Location data (when you grant permission)
  • Usage data and preferences

Children's Data

Our Service is designed for parents and guardians. We collect information about children only as provided by their parents/guardians for the purpose of personalizing family activity recommendations. We comply with COPPA (Children's Online Privacy Protection Act) and do not knowingly collect data directly from children under 13.

Children's Data Retention: Children's data is retained only while the parent account is active. Parents may view, edit, or delete their children's information at any time from the Family screen in the app (Settings → Family). Upon account deletion, all associated children's data is permanently removed.

3. How We Use Your Information

  • Provide personalized activity and venue recommendations
  • Facilitate bookings and class registrations
  • Enable community features (groups, messaging)
  • Send notifications about events and activities
  • Improve our Service and develop new features
  • Process payments and subscriptions

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers who assist in operating our platform
  • Activity providers when you make a booking
  • Other users within groups you join (limited to your profile information)
  • Law enforcement when required by law

5. Analytics and Tracking

We use analytics services to understand how our Service is used. On iOS devices, we will request your permission before enabling analytics tracking (App Tracking Transparency). You can opt out of analytics at any time in the app's Privacy Settings.

6. Data Security

We implement industry-standard security measures including encryption in transit (HTTPS/TLS), encryption at rest, and secure authentication. However, no method of transmission over the Internet is 100% secure.

7. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your account and data
  • Export your data in a portable format
  • Opt out of analytics tracking
  • Withdraw consent at any time

8. GDPR Compliance (European Users)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Right of Access: Request a copy of your personal data
  • Right to Rectification: Request correction of inaccurate personal data
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten")
  • Right to Restrict Processing: Request limitation of how we use your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests
  • Right to Withdraw Consent: Withdraw consent at any time where we rely on consent

Legal Basis for Processing: We process your data based on: (a) your consent, (b) performance of our contract with you (providing the Service), (c) compliance with legal obligations, and (d) our legitimate interests (improving the Service, fraud prevention).

Data Transfers: Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place for such transfers.

To exercise your GDPR rights, contact us at privacy@lulume.app. You also have the right to lodge a complaint with your local data protection authority.

9. Account Deletion

You can request account deletion through the app (Settings → Privacy & Data → Delete Account) or through our web deletion page. After confirmation, your account will be scheduled for deletion with a 7-day grace period.

10. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. After account deletion, we may retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention).

11. Third-Party Services

Our Service uses the following third-party services:

  • Firebase (authentication, analytics, crash reporting)
  • Mapbox (maps and location services)
  • Stripe (payment processing)
  • RevenueCat (subscription and in-app purchase management)
  • GetStream (messaging)

Each of these services has their own privacy policies governing their use of your data.

11a. Google Play Data Safety

For transparency, here is a summary of data we collect and share:

  • Data collected: Name, email, phone number, children's names and ages, location, payment information, usage data
  • Data shared: Payment data with Stripe for transaction processing; booking data with activity providers
  • Data retention: Personal data retained while account is active; deleted within 30 days of account deletion request (7-day grace period + processing)
  • Security: Data encrypted in transit (TLS) and at rest; access restricted to authorized personnel

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us at:

Email: privacy@lulume.app