Privacy Policy

Effective date: March 17, 2026

Introduction

Lulia ("we," "our," or "us") is a voice-first AI personal assistant. This Privacy Policy explains how we collect, use, and protect your information when you use Lulia on iOS, the web, or any other platform we support.

By using Lulia, you agree to the collection and use of information as described in this policy.

Information We Collect

We collect the following types of information to provide and improve the service:

• Account information — your email address and password when you sign up. Passwords are never stored in plaintext — they are securely hashed by Supabase Auth using bcrypt.
• Voice and text input — what you say or type when interacting with Lulia. Voice input is transcribed to text for processing.
• Calendar data — events from Google Calendar and/or Apple Calendar when you connect these services.
• Reminders data — tasks from Apple Reminders when you connect this service on iOS.
• Memory and preferences — things you ask Lulia to remember, your preferences, and details about people in your life that Lulia learns from conversation.
• Scheduled notifications — reminders and scheduled tasks you create through Lulia.
• Device information — device type, operating system, and push notification tokens for delivering notifications.

How We Use Your Information

Your information is used solely to provide and improve Lulia:

• Processing your voice and text input to generate responses.
• Managing your calendar, reminders, and scheduled notifications.
• Remembering your preferences and personal context to provide more relevant assistance.
• Sending push notifications for reminders you create.
• Improving the quality and reliability of the service.

We do not sell your data. Your information is never sold, rented, or shared for advertising purposes.

Data Storage and Security

Your data is stored in Supabase, a hosted PostgreSQL database with Row Level Security (RLS) enabled. This means your data is isolated per user — each person can only access their own data. Our server infrastructure runs on Google Cloud.

We use industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication, and access controls.

Third-Party Services

Lulia integrates with the following third-party services to provide its functionality:

• OpenAI — your conversations are processed by OpenAI's language models to generate responses. OpenAI's usage policies apply to this processing.
• Google Calendar API — when you connect your Google account, Lulia reads and creates calendar events on your behalf.
• Apple services — on iOS, Lulia accesses Apple Calendar and Apple Reminders through on-device APIs when you grant permission. Push notifications are delivered through Apple Push Notification service (APNs).
• Supabase — provides authentication and database services.

Data Retention

Your data is retained for as long as your account is active. You can request deletion of your account and associated data at any time by contacting us.

Your Rights

You have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and data.
• Disconnect third-party services (Google Calendar, Apple Calendar, Apple Reminders) at any time through the app's Settings.

Children's Privacy

Lulia is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of Lulia after changes constitutes acceptance of the updated policy.

Contact

If you have questions about this Privacy Policy or your data, please contact:

Jiaxin Lin
Email: privacy@lulia.ai