Last Updated: 05.08.2025
Effective: 05.08.2025

Introduction

Welcome to Lula Bedtime Stories. This Privacy Policy applies to the Lula Bedtime Stories website and its services, and any other platform that links to this Privacy Policy (hereinafter referred collectively as “the Services”). This Privacy Policy also explains how we collect, use, share, and otherwise process the personal information of users and other individuals in connection with our Services.
The Services are provided and controlled by Tangotwo sp. z o.o. with its registered address at Aleja Zwycięstwa 241/13 81-521 Gdynia (“we” “us” or “our”).

1. What Information We Collect

We collect the following information:

Information You Provide

Account Information. You give us information when you register on the Services, such as your date of birth, your email address and the corresponding password you set for your account, your phone number, your accounts on other social network services (where applicable), and other information you choose to disclose in your user profile.

User Content. We may collect the content you create, upload, generate, or access through the Services (“User Content”). When you create User Content, we may upload or import it to the Services before you save or post the User Content (also known as pre-uploading). Additionally, we collect Information, including text, images, and videos, found in your device’s clipboard, with your permission. For example, if you choose to initiate information sharing with a third-party platform, or choose to paste content from the clipboard onto the Services, we access this information stored in your clipboard in order to fulfill your request. We may also collect information about you where you choose to use the Services without creating an account, as otherwise described in this Privacy Policy.

Your Email Contacts. Where available, if you are a registered user on our website and you choose to sign-up or log-in to the Services using Google and expressly agree to synchronize your Google contacts, we will collect the Gmail addresses of your contacts.

Information When You Contact Us. When you contact us, we collect the information you send us, such as proof of identity or age, feedback or inquiries about your use of the Services or information about possible violations of our Terms of Use, or other policies.

Purchase Information. If you decide to purchase a paid membership, we and/or our service providers or business partners, such as payment providers, may collect information about the purchase or payment transaction, such as payment card information, billing, delivery, and contact information, and what you purchased, where required for the purpose of payment.

Other Information. We may also collect your feedback about the Services if you choose to provide it, such as information you share through surveys or your participation in challenges, research, promotions, marketing campaigns, events, or contests such as your gender, age, likeness, and preferences.

Automatically Collected Information

Technical Information. We automatically collect certain information from you when you use the Services. Such information includes your IP address, unique device identifiers, advertising identifiers, network type and connections, mobile or device model, device manufacturer, country calling codes, application version number, app and file names and types, operating system, device resolution, system language and region, and battery information. Where you log-in from multiple devices, we will be able to use your profile information to identify your activity across devices.

Cookies. Depending on the jurisdiction from which you access the Services, we and our service providers and business partners use cookies to collect data and recognize you and your device(s) on the Services and elsewhere across your different devices. We use cookies and similar tracking technologies to operate and provide the Services. For example, we use cookies to remember your language preferences, to measure website traffic and functionality, and for security purposes. We may also use these technologies for marketing purposes. We will obtain your consent to our use of cookies where required by law. You have the option to change your browser’s cookie settings, usually through your browser's "options" or "preferences" menu. However, please note that if you choose to refuse, disable, or delete cookies, some of the functionality of the Services may no longer be available to you.

Information From Other Sources
We may receive the information described in this Privacy Policy from other sources, such as:

Third-Party Services. Where available, and if you choose to sign-up or log-in to the Services using a third-party service such Google, such services provide us with information such as your profile information, including your username, email, and profile picture. Depending on the service provided, these third party services may also share your contact list, and information about your use of that service.

Others. We may receive information about you from others, for example, where you are included or mentioned in User Content, in a complaint, appeal, request or feedback submitted by a user or third party, or if your contact information is provided to us by a user.

2. How we use Personal Data

We may use Personal Data for the following purposes:

  • Verify your age and identity;

  • Administer and provide you with the Services, including to enable you to create, edit, modify and share User Content and to allow you to participate in interactive features of the Services, when you choose to do so;

  • To improve and develop our Services and conduct research, for example to develop new product features;

  • To communicate with you, including to send you information about our Services and events, for example about changes or improvements to the Services;

  • To prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services;

  • To comply with legal obligations and to protect the rights, privacy, safety.

We may also use your information for any other purposes disclosed to you at the time we collect your information, with your consent, or as otherwise permitted by applicable law.

3. Disclosure of Personal Data

This section sets out how we may share your information, including Information You Provide, Automatically Collected Information, and Information From Other Sources, with third parties.

Service Providers and Business Partners

We may share the categories of personal information listed above, with our service providers and business partners in order to provide you with the Services for the purposes as set out in this Policy. They provide services such as cloud hosting, content delivery, customer and technical support, content moderation, marketing, analytics, and online payment.

Without limitation on the foregoing, note that features on Lula Bedtime Stories are developed based on integration with Chat GPT API services (the “Chat GPT API Services”). If you choose to use the Services, you agree to be bound by the Chat GPT Terms of Use - Terms of use | OpenAI.

Our Services are hosted on Amazon Web Services (AWS), which provides the underlying cloud infrastructure. The provider of this service is the American company Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA. By using the Services, you acknowledge that your information may be processed and stored by AWS in accordance with their terms and privacy practices available under https://aws.amazon.com/privacy/?nc1=h_ls.

We may disclose your Personal Data in the following circumstances:

  • Vendors and Service Providers: To assist us in meeting business operations needs and to perform certain services and functions, we may disclose Personal Data to vendors and service providers, including providers of hosting services, customer service vendors, cloud services, content delivery services, support and safety monitoring services, email communication software, web analytics services, payment and transaction processors, and other information technology providers. Pursuant to our instructions, these parties will access, process, or store Personal Data only in the course of performing their duties to us.

  • Business Transfers: If we are involved in strategic transactions, reorganization, bankruptcy, receivership, or transition of service to another provider (collectively, a “Transaction”), your Personal Data may be disclosed in the diligence process with counterparties and others assisting with the Transaction and transferred to a successor or affiliate as part of that Transaction along with other assets.

  • Government Authorities or Other Third Parties: We may share your Personal Data, including information about your interaction with our Services, with government authorities, industry peers, or other third parties in compliance with the law (i) if required to do so to comply with a legal obligation, or in the good faith belief that such action is necessary to comply with a legal obligation, (ii) to protect and defend our rights or property, (iii) if we determine, in our sole discretion, that there is a violation of our terms, policies, or the law; (iv) to detect or prevent fraud or other illegal activity; (v) to protect the safety, security, and integrity of our products, employees, users, or the public, or (vi) to protect against legal liability.

4. Retention

We’ll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data will depend on a number of factors, such as:

  • Our purpose for processing the data (such as whether we need to retain the data to provide our Services);

  • The amount, nature, and sensitivity of the information; 

  • The potential risk of harm from unauthorized use or disclosure;

  • Any legal requirements that we are subject to.

5. Your rights

Depending on where you live, you may have certain statutory rights in relation to your Personal Data. For example, you may have the right to:

  • Access your Personal Data and information relating to how it is processed.

  • Delete your Personal Data from our records.

  • Update or correct your Personal Data.

  • Transfer your Personal Data to a third party (right to data portability).

  • Restrict how we process your Personal Data.

  • Withdraw your consent—where we rely on consent as the legal basis for processing at any time. 

  • Object to how we process your Personal Data.

  • Lodge a complaint with your local data protection authority.

If you are unable to exercise your rights through your account, please contact us via e-mail.

6. Children

Our Services are not directed to, or intended for, children under 13. We do not knowingly collect Personal Data from children under 13. If you have reason to believe that a child under 13 has provided Personal Data through the Services, please contact us via e-mail . We will investigate any notification and, if appropriate, delete the Personal Data from our systems. Users under 18 must have permission from their parent or guardian to use our Services.

7. Security

We implement commercially reasonable technical, administrative, and organizational measures designed to protect Personal Data from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, no Internet or email transmission is ever fully secure or error free. Therefore, you should take special care in deciding what information you provide to the Services. In addition, we are not responsible for circumvention of any privacy settings or security measures contained on the Service, or third-party websites.

8. Additional U.S. state disclosures

Some U.S. state privacy laws require specific disclosures. The following table provides additional information about the categories of Personal Data we collect and how we use and disclose that information.

| Category of Personal Data | Use of Personal Data | Disclosure of Personal Data | | :---- | :---- | :---- | | We collect the following information, as described above: Identifiers, such as your name, contact details, IP address, and other device identifiers Commercial information, such as your transaction history Network activity information, such as Content and how you interact with our Services Communication information, such as your contact information when you send us email Geolocation data, such as the general area from which your device accesses our Services based on information like its IP address, or precise location information you choose to provide Your account credentials and payment information | We use this information for the following purposes, as described above: Provide, analyze, and maintain our Services Improve and develop our Services and conduct research Communicate with you, including to send you information about our Services and events Prevent fraud, illegal activity, or misuses of our Services, and to protect the security of our systems and Services Comply with legal obligations and protect the rights, privacy, safety, or property of our users, ours or third parties | We may disclose this information in the following circumstances, as described above: Vendors, service providers, and affiliates to process in accordance with our instructions Government authorities or other third parties for the legal reasons described above Parties involved in Transactions Business account administrators for the reasons described above Other users and third parties you interact or share information with |

Depending on where you live and subject to applicable exceptions, you may have the following privacy rights in relation to your Personal Data:

  • The right to know information about our processing of your Personal Data, including the right to access your Personal Data, often in a portable format;

  • The right to request deletion of your Personal Data;

  • The right to correct your Personal Data; and

  • The right to be free from discrimination relating to the exercise of any of your privacy rights.

We don’t “sell” Personal Data or “share” Personal Data for cross-contextual behavioral advertising, and we do not process Personal Data for “targeted advertising” purposes (as those terms are defined under state privacy laws). We also don’t process sensitive Personal Data for the purposes of inferring characteristics about a consumer.

Exercising Your Rights. You can exercise privacy rights described in this section by submitting a request through our Contact Us box.

Verification. In order to protect your Personal Data from unauthorized access, change, or deletion, we may require you to verify your credentials before you can submit a request to know, correct, or delete Personal Data. If you do not have an account with us, or if we suspect fraudulent or malicious activity, we may ask you to provide additional Personal Data for verification. If we cannot verify your identity, we will not be able to honor your request.

Authorized Agents. You may also submit a rights request through an authorized agent. If you do so, the agent must present signed written permission to act on your behalf and you may also be required to independently verify your identity with us. Authorized agent requests can be submitted through via e-mails.

Appeals. Depending on where you live, you may have the right to appeal a decision we make relating to requests to exercise your rights. To appeal a decision, please send your request via e-mail.

9. Supplemental and Jurisdiction Specific Terms - European Economic Area (“EEA”), Switzerland
If you are using the Services in the EEA, Switzerland or the UK (the “European Region”), the following additional terms apply:
Legal bases for processing. We use your personal data only as permitted by law. Our legal bases for processing your personal data described in this Policy are described in the table below.

| Personal Information categories and processing purpose | Legal Basis | | ----- | ----- | | We use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; when logging in, signing up, or linking to our Services via third party accounts; User Content and other information collected when you use our Services; your location; when contacting us; from other sources; and from your device or app to enable us to administer and provide you with the Services. | Processing is necessary to perform the contract governing our provision of the Services or to take steps that you request prior to signing up for an account to use the Services. If you are under the age of majority (under 18 in most relevant countries), with a limited ability to enter into an enforceable contract only, where we may be unable to process your information on the grounds of contractual necessity, we rely on legitimate interests. Namely, to provide, support, and maintain products and features that enable users who can’t enter into an enforceable contract with us to communicate, discover, and engage with content and express themselves. We also rely on the legitimate interest of our users in being able to access the platform in an easy and intuitive manner. | | We use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; when logging in, signing up, or linking to our Services via third party accounts; User Content and other information collected when you use our Services,including Image and Audio Information and Auto-Caption Text; your location; when contacting us; from other sources; and from your device or app to understand how you use the Services, and to improve and develop the Services, including to train and improve our technology, such as our machine learning models and algorithms. | The processing is necessary for our legitimate interests, namely, to improve and develop the Services. | | The categories of information that we use will depend on the specific circumstances of each request or obligation. Depending on the circumstances, we use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; when logging in, signing up, or linking to our Services via third party accounts; User Content and other information collected when you use our Services; your location; when contacting us; from other sources; and from your device or app to comply with any legal obligation, including where necessary to assist in law enforcement and investigations conducted by any governmental and/or regulatory authority. | This processing is necessary in order to comply with our legal obligations under European Union or Member State law. This includes situations where we have obligations to take measures to ensure the safety of our users or comply with a valid legal request such as an order from law enforcement agencies or courts. Similarly processing may be necessary to respond to regulatory requests requiring the processing of information under Chapters IV and VI of the GDPR. In other circumstances, the processing is necessary for our legitimate interests, namely, to disclose and share information with regulators or other government entities. | | We use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; when contacting us; and from your device or app to communicate with you, on service related matters, respond to and process your queries, requests, applications, complaints, and feedback, and notify you about changes to the Services, including changes to our terms and policies. | The processing is necessary for the performance of a contract with you. If you are under the age of majority (under 18 in most relevant countries), with a limited ability to enter into an enforceable contract only, where we may be unable to process your information on the grounds of contractual necessity, we rely on legitimate interests. Namely, to share meaningful updates with our users who can’t enter into an enforceable contract with us about service-related matters, and process their queries, claims and disputes. | | We use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; User Content and other information collected when you use our Services; your location; and from your device or app. We may use this information to send you marketing communications in accordance with your preferences. | The processing is necessary for our legitimate interests, namely to promote new developments and features of our Services. We will obtain your consent to send you messages where required by law. | | We use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; when logging in, singing up, or linking to our Services via third party accounts; User Content and other information collected when you use our Services; your location; when contacting us; from other sources; and from your device or app to enforce our Terms of Use and other conditions and policies, including to ensure that you are old enough to use the Services. | The processing is necessary for the performance of a contract with you. If you are under the age of majority (under 18 in most relevant countries), with a limited ability to enter into an enforceable contract only, where we may be unable to process your information on the grounds of contractual necessity, we rely on legitimate interests. Namely, to share meaningful updates with our users who can’t enter into an enforceable contract with us about service-related matters, and process their queries, claims and disputes. | | We use the Information You Provide, Automatically Collected Information, and Information From Other Sources, for example: when registering an account; when logging in, singing up, or linking to our Services via third party accounts; User Content and other information collected when you use our Services; your Location; when contacting us; from other sources; and from your device or app to detect abuse, fraud, illegal activity, to ensure your safety and security, including scanning, analysing and reviewing User Content and associated metadata for violations of our Terms of Use and other conditions and policies, if permitted by applicable law. We may also use this information to conduct troubleshooting, data analysis, testing, and research. | The processing is necessary for our legitimate interests, namely, to ensure that the Services are safe and secure, to ensure compliance with our Terms of Use and to identify misuse of the Services; and to ensure the ongoing stability and security of the Services and to ensure it is continuously available and functioning. | | In some cases, we may aggregate or anonymize the Information You Provide, Automatically Collected Information, and Information from Other Sources, and use it in a way that is designed to be unable to identify you, for research, statistical, or other purposes, to the extent allowed by applicable law. | The processing is necessary for our legitimate interests, namely to conduct research and protect personal information through aggregation or anonymization, consistent with data minimization and privacy by design principles. | | We may use the Information You Provide, Automatically Collected Information, and Information From Other Sources, where it is necessary to protect your or someone else’s life, physical integrity, or safety. This could include providing law enforcement agencies or emergency services with information in urgent situations to protect health or life. The specific types of information we use will depend on the specific situation. | The processing is necessary to protect the vital interests of you or other individuals. |

10. Data transfers

Your Personal Data may be processed on servers located outside of the EEA, and the UK for the purposes described in this Privacy Policy. This includes processing and storing your Personal Data in our facilities and servers in the United States. While data protection law varies by country and these countries may not offer the same level of data protection as your home country, we apply the protections described in this policy to your Personal Data regardless of where it is processed. When transferring Personal Data outside of the EEA or the UK, we rely on the following transfer mechanisms to comply with applicable data protection law:

We rely on the European Commission’s adequacy decisions ⁠pursuant to Article 45(1) GDPR when transferring your Personal Data to any country that has been considered to provide an adequate level of protection.

For other jurisdictions, we rely on the Standard Contractual Clauses (“SCCs”) as approved by the European Commission pursuant to Article 46(2)(c) GDPR and on the UK Data Transfer Addendum.

Your rights. You have the following rights:

  • The right to request free of charge (i) confirmation of whether we process your personal data and (ii) access to a copy of the personal data retained;
    The right to request proper rectification or erasure of your personal data or restriction of the processing of your personal data;
  • Where processing of your personal data is either based on your consent or necessary for the performance of a contract with you and processing is carried out by automated means, the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to have your personal data transmitted directly to another company, where technically feasible (data portability);
  • Where the processing of your personal data is based on your consent, the right to withdraw your consent at any time (withdrawal will not impact the lawfulness of data processing activities that have taken place before such withdrawal);
    The right not to be subject to any automatic individual decisions, including profiling, which produces legal effects on you or similarly significantly affects you unless we have your consent, this is authorised by European Union or Member State law or this is necessary for the performance of a contract;
  • The right to object to processing if we are processing your personal data on the basis of our legitimate interest unless we can demonstrate compelling legitimate grounds which may override your right. If you object to such processing, we ask you to state the grounds of your objection in order for us to examine the processing of your personal data and to balance our legitimate interest in processing and your objection to this processing;
  • You have the right to request the restriction of the processing of your information where (a) you are challenging the accuracy of the information, (b) the information has been unlawfully processed, but you are opposing the deletion of that information, (c) where you need the information to be retained for the pursuit or defence of a legal claim, or (d) you have objected to processing and you are awaiting the outcome of that objection request;
  • The right to object to processing your personal data for direct marketing purposes; and The right to lodge complaints before your local data protection authority;

Before we can respond to a request to exercise one or more of the rights listed above, you may be required to verify your identity or your account details. Please contact us via e-mail if you would like to exercise any of your rights.

Cookies

We will, unless exempt, obtain your consent to the use of cookies. For more information about cookies.

10. Changes to the privacy policy

We may update this Privacy Policy from time to time. When we do, we will publish an updated version and effective date on this page, unless another type of notice is required by applicable law.

11. How to contact us

Please contact us via e-mail if you have any questions or concerns.