Privacy Policy

The Short Version

• We collect what Lulu needs to work: your sign-in email, your learning settings and your progress.
• We do not sell your personal information, show ads, or track you across other apps and websites.
• Lulu has no third-party analytics or advertising tools.
• Lulu does not use your location, contacts, photos, camera or microphone.
• You can delete your account and its data from inside the app at any time.
• If you join the Android waitlist, we keep only your email, and only to tell you when Lulu comes to Android.

Information We Collect

Account information

When you create an account we receive your email address. If you sign in with a magic link, that is the email you type. If you use Sign in with Apple, Apple shares your email (or a private relay address if you choose to hide it) and, if you allow it, your name. If you use Sign in with Google, Google shares your email and basic profile details such as your name. We never see your Apple or Google password.

Your learning profile

The answers you give when you set Lulu up and the settings you change later: the dialect or dialects you are learning, your level, your daily goal, the kinds of videos you like, why you are learning, whether you have studied Arabic before, whether you read Arabic script, display preferences (vowel marks, transliteration, English, transcript size, slow playback) and whether daily reminders are on and at what time.

Your answer to why you are learning (for example, family and heritage) is used only to tailor Lulu for you, and we do not use it to infer anything else about you. We do not ask for sensitive information such as health, religion, government ID numbers or precise location.

Your learning activity

• Words you save, with the sentence and clip you saved them from.
• Your review schedule for each saved word (when it is next due and how well you know it).
• Clips you have watched, how far you got, and clips you bookmarked.
• Daily activity used for your streak and goal: minutes listened, words saved and reviewed, clips and lessons completed.
• Alphabet and vowel-mark lessons you have finished, and channels you follow.

Things you send us

• Feedback board posts and likes. Other Lulu users see your post without your name or email; only the dialect you are learning is shown next to it. We can see which account wrote each post, and we may remove posts that break our Terms of Service.
• Problem reports about a clip or a translation, including the reason you picked.
• Searches you type in Explore, which we use to find matching videos.
• Your email address if you join the Android waitlist on learnlulu.com (see below).
• Emails you send to support@learnlulu.com.

Purchases

Subscriptions are sold through Apple’s App Store. Apple processes the payment; we never receive your card details. We use RevenueCat to confirm which subscription is active on your account. RevenueCat receives an anonymous app user ID, your purchase receipts and history, and basic device information such as the device model, operating system version, app version and country.

Technical information

Like any online service, our servers and providers process technical data needed to deliver the app, such as your IP address, device and app version, and request logs. We also count how many clips, word lookups and word pronunciations each account requests per day so we can apply fair-use limits.

Stored only on your device

Lulu keeps some data on your phone so it works quickly and offline: your signed-in session, your answers during setup before you create an account, cached captions and cached word audio, and the time of your daily reminder. Reminders are scheduled on your device; we do not send push notifications from a server and do not collect a push token.

How We Use Information

• To run Lulu: sign you in, sync your words and progress, and show your streak and stats.
• To shape your feed around your dialect, level and interests.
• To schedule reviews of the words you save.
• To manage subscriptions and restore purchases.
• To answer support requests and act on feedback and problem reports.
• To keep Lulu secure, prevent abuse and control costs (for example the daily fair-use limits).
• To meet legal obligations.

We do not use your information for advertising, and we do not use it to train AI models.

Messages we send you

• Sign-in emails with your magic link, sent by Supabase on our behalf.
• Replies when you contact support.
• Important notices about your account, your subscription or changes to this policy.
• One email when Lulu comes to Android, if you joined the Android waitlist.
• Daily practice reminders, if you turn them on. These are scheduled on your phone, and you can switch them off in Lulu or in your iPhone settings.

We do not send marketing emails or newsletters.

Aggregated information

We may combine information from many learners into totals that cannot identify anyone, such as how many people watched a clip, and use them to improve Lulu, for example to show popular clips.

Automated decisions

Lulu chooses which clips to show you based on your dialect, level and interests. We do not make decisions about you by automated means that have legal or similarly significant effects.

Who We Share It With

We share information only with the service providers that help us run Lulu, and only what each one needs:

• Supabase hosts our database, sign-in and server functions. Your account, profile, activity and feedback are stored there.
• Apple provides Sign in with Apple and App Store payments.
• Google provides Sign in with Google, the YouTube player, YouTube search (the searches you type in Explore are sent to it to find videos; see below), and the Gemini AI models we use to prepare transcripts, translations and word explanations. Gemini receives video captions and words from our catalog, not your account details.
• ElevenLabs creates the spoken audio for words. It receives only the Arabic word or sentence being voiced, never information about you.
• RevenueCat manages subscription status, as described above.
• Vercel hosts learnlulu.com and processes the technical data of your visit, such as your IP address, to deliver the site.

We may also disclose information if the law requires it, to protect the rights, safety or property of our users or others, or as part of a sale or transfer of Lulu, in which case this policy will continue to apply to your information. We do not sell or “share” your personal information as those terms are defined under California law.

YouTube

Lulu plays videos with YouTube’s embedded player and uses YouTube API Services to find videos. When you watch a clip, your device connects to YouTube directly to load the player, thumbnails and captions, so Google receives your IP address and device information and may set cookies, as described in the Google Privacy Policy. By using Lulu you also agree to the YouTube Terms of Service. Lulu does not access your YouTube or Google account data. If you signed in with Google, you can remove Lulu’s access at any time from your Google account settings.

The videos in Lulu are made by independent creators, not by us. Lulu only shows videos that are publicly available on YouTube and that YouTube allows to be embedded in other apps, so they are subject to YouTube’s own content rules. We cannot review every video ourselves, and you may still come across something you find offensive or inappropriate. Every clip has a report button (the flag under the video): tap it and choose a reason, and we will look at the clip and remove it from Lulu if it should not be there. Your report is stored with your account so we can follow up, as described under “Things you send us”.

Cookies and Tracking

learnlulu.com does not use cookies, analytics or advertising trackers. The Lulu app does not use your device’s advertising identifier and does not track you across other companies’ apps or websites, so it never asks for tracking permission. The YouTube player inside the app may use cookies or similar technology under Google’s policies, as described above. Because we do not track you, Lulu does not change its behavior in response to “Do Not Track” browser signals.

Android Waitlist

If you join the Android waitlist on learnlulu.com, we store your email address, the time you signed up and the page you signed up on, in our Supabase database. We use it only to email you when Lulu is available on Android. We do not add you to a newsletter, and we do not share the list with anyone. The website briefly uses your IP address to stop repeated sign-up attempts and does not store it. To be removed from the list at any time, email support@learnlulu.com.

How Long We Keep It

We keep your information for as long as your account exists. When you delete your account, we delete your profile, saved words, review progress, watch history, streak, lesson progress, followed channels, problem reports, and feedback posts and likes from our database immediately. Copies may remain in encrypted backups for a short period until they are overwritten. We keep usage and cost records (for example, that a clip was transcribed) with the link to your account removed. Server logs are kept only for a limited time. We delete the Android waitlist once we have sent the Android launch email.

Your Choices and Rights

• Change your settings at any time in the app’s Profile and Settings screens.
• Turn reminders off in Lulu or in your iPhone’s notification settings.
• Delete your account in the app: open Profile and tap Delete account. You can also email us from the address on your account.
• Get a copy of your data, or ask us to correct it, by emailing support@learnlulu.com.

We respond to requests within 30 days and will not treat you differently for using your rights. We may need to confirm that a request comes from the account owner. These rights have limits: we may decline a request where the law allows, for example if we cannot verify who is asking or if it would affect someone else’s rights, and we will tell you why.

California residents

Under the California Consumer Privacy Act you have the right to know what personal information we collect and how we use and disclose it, to delete it, to correct it, and to opt out of its sale or sharing. We collect the categories described above (identifiers such as your email, commercial information such as subscription status, internet activity such as your use of the app, and inferences such as your level). We use them for the business purposes listed in this policy and do not sell or share them. We get this information from you, from your device, and from Apple or Google if you sign in with them, and we keep it for the periods described in “How Long We Keep It”. We do not collect sensitive personal information as defined by California law. We do not share personal information with third parties for their own direct marketing (California’s “Shine the Light” law). You or an authorized agent can make a request at support@learnlulu.com.

Residents of other US states

If you live in a state with its own consumer privacy law, such as Colorado, Connecticut, Oregon, Texas, Utah or Virginia, you have similar rights to access, correct, delete and get a copy of your information, and to opt out of targeted advertising, sale and profiling. We do not do any of those three. If we decline your request, you can appeal by replying to our answer with “Appeal” in the subject line. If you disagree with the outcome of your appeal, you can contact your state attorney general.

Users in the EU, UK and similar regions

We process your information to provide the service you asked for (performance of a contract), for our legitimate interests in keeping Lulu secure and improving it, with your consent where we ask for it (such as notifications), and to meet legal obligations. You have the right to access, correct, delete, restrict or object to processing of your information, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority.

Where Your Data Is Processed

Lulu is run from the United States, and our providers may process information in the United States and other countries. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses offered by our providers.

Security

Data is encrypted in transit, and access to your account data is restricted to your own account by the database itself. No system is perfectly secure, but we work to protect your information and will notify you if a breach affects you as the law requires.

Children

Lulu is not directed to children under 13, and we do not knowingly collect information from them. In the EU, UK and other places where the age of digital consent is higher (up to 16), users below that age need a parent or guardian’s consent to use Lulu. If you believe a child under 13, or under the age of digital consent where you live, has created an account without that consent, contact us and we will delete it.

Links to Other Websites

Lulu links to other services, such as YouTube and the App Store. Their own privacy policies apply when you use them, and we are not responsible for how they handle your information.

Changes to This Policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Contact

Yasser Boutarf, the publisher of Lulu, is the controller of your personal information for the purposes of the GDPR and similar laws. For any privacy question or request, email support@learnlulu.com.