Privacy Policy

EverLull is built to need as little from you as possible. Every sound is generated on your own device, so your listening never leaves it. Some features — an account, a subscription, or the optional Lull AI companion — do involve data, and this page explains, in plain language, exactly what we collect, why, who we share it with, and the choices you have.

01Who we are

EverLull (“we”, “us”) is a sleep, focus, and relaxation sound studio operated by Lamar Brown, 7219 Amigo Ave, California, United States. We are the data controller for the personal data described here. For any privacy question or request, reach us at privacy@everlull.com.

This policy covers the EverLull website and web app at everlull.com and our iOS and Android apps.

02What we collect

What we collect depends on how you use EverLull:

• Your audio and mixes stay on your device. Sounds are synthesized in your browser with the Web Audio API. There is no recording, upload, or streaming of what you play, and narrated stories are pre-recorded files — your voice and listening are never sent to us.
• Account information. You can use the free app without an account. If you create one, we collect your email address and a securely hashed password. If you sign in with Google instead, Google provides us your email address and basic profile information (name and profile picture) so we can create or match your account; we never receive your Google password.
• Payment & subscription information. If you subscribe to EverLull Plus on the web, Stripe processes your card and we keep only a minimal record (your email, Stripe customer ID, plan, status, and renewal date). If you subscribe through the Apple App Store or Google Play, those stores process the payment and we receive only confirmation that your subscription is active.
• The Lull AI companion. If you choose to chat with Lull, we process the messages you send, a short amount of recent conversation history, and — if you enable it — the wellness preferences and reminder settings you provide (for example free-text notes about stress, sleep, or focus goals). See Section 03.
• Things you create. Saved mixes, journal entries, and shared “rooms”/classroom codes you create are stored so the feature works and, where you’re signed in, synced to your account.
• Basic server logs. Like any website, our host records standard request logs (IP address, browser type, pages requested, timestamps) to keep the service secure and running. These are kept for a short period and are not used to build a marketing profile of you.
• What you send us. If you email us, we keep that correspondence to reply and support you.

We do not collect precise location, we do not use advertising identifiers, and we do not run advertising or cross-site tracking.

03The Lull AI companion & third-party AI

Lull is an optional AI companion for gentle reflection and wind-downs. It is the one part of EverLull where your own words leave your device. We believe in being direct about this:

• Your messages go to a third-party AI provider. To generate a reply, we send the message you type — plus a short window of recent conversation for context — to our AI provider, AIPersonaBuddy (aipersonabuddy.com), through our own server. Your EverLull login and payment details are never sent to them.
• We ask permission first. Before your first chat, EverLull shows a notice explaining this and asks you to agree. No message is sent until you do. Lull’s AI chat is intended for adults (18+).
• Please don’t share sensitive information with Lull — such as your full name, address, passwords, or detailed health or financial information. Lull is a companion for calm, not a place for personal records.
• It is not medical or crisis care. AI replies can be inaccurate and are not professional, medical, or mental-health advice. If you are in danger or thinking of harming yourself, contact your local emergency services or a crisis line.
• Memory is your choice. If you enable it, your Lull preferences and conversation history are stored on our server (in a location outside the public web root, keyed to a one-way hash of your email) so Lull can remember across sessions. You can turn Lull AI off, stop conversation sync, or delete this data entirely at any time in Lull’s settings, or by emailing us.
• The provider’s own handling. AIPersonaBuddy processes the messages we send in order to generate replies. Their handling of that data is governed by their own terms and privacy practices. If you would like us to share the current details of that provider relationship, email privacy@everlull.com.

04How we use your data

We use the limited data we collect only to:

• provide the service you asked for — playing sounds, saving mixes, running Classroom timers;
• create and secure your account and keep you signed in;
• process your subscription and give you the access you paid for;
• generate Lull AI replies and, if you enable it, remember your preferences;
• respond to your support requests;
• keep the service secure, prevent abuse, and meet our legal obligations.

Where the law requires a legal basis (for example under the GDPR), we rely on: performing our contract with you (accounts, subscriptions, Lull replies you request), your consent (the optional Lull AI companion and memory), and our legitimate interests (security and keeping the service running).

05Who we share it with

We do not sell, rent, or share your personal information with anyone for their own marketing. We share data only with the service providers that make EverLull work:

• AIPersonaBuddy — our AI provider, which receives your Lull chat messages (only if you use the Lull AI companion).
• Stripe — payment processing for Plus on the web (Stripe’s Privacy Policy).
• Apple and Google — if you subscribe through the App Store or Google Play, and for sign-in with Google.
• Our hosting provider — serves the site and stores your account, subscription, and any saved data.
• A content delivery network (jsDelivr) — serves one animation library. Fonts are self-hosted, so no font provider sees your visits.

We may also disclose data if required by law, to protect our rights or users’ safety, or as part of a business transfer (with notice to you).

06Stored on your device

EverLull uses your browser’s local storage — not tracking cookies — to remember things that never need to reach us:

• Your saved mixes and the sounds/levels in them
• Display and playback preferences (pitch-black mode, music pace, chosen voice)
• Your Plus status, so the app can unlock premium features locally
• A simple “nights in a row” streak counter (a date and a number)
• A record that you agreed to the Lull AI notice, so we don’t ask every time
• Family profiles you create (a display name and a type such as adult, child or baby, which sets a volume ceiling) — these stay on this device and are never sent to us
• That you’ve seen the cookie notice

You can clear all of it any time by clearing your browser’s site data for everlull.com, or by deleting the app.

Cookie policy

On everlull.com we set only strictly necessary cookies, which is why we show a notice rather than ask you to accept or reject anything. We use no advertising, analytics, or cross-site tracking cookies, and no browser fingerprinting.

• Sign-in session — set only if you sign in; keeps you signed in. Secure, HttpOnly, first-party; removed when you sign out or delete your account.
• Google sign-in check — a short-lived, one-time value set only when you choose “Continue with Google,” used to protect that sign-in from forgery, then cleared.

Stripe may set its own cookies on its checkout pages to prevent fraud; those are governed by Stripe’s privacy policy. Our native apps set no cookies.

07Analytics

We keep a privacy-friendly, anonymous count of which sounds are popular, so we know what to build more of. It records only a sound identifier and the date — for example, “rain, 2026-09-03.” It contains no cookies, no IP addresses, no device identifiers, and nothing that could identify you or link plays together into a session. We do not use Google Analytics or any advertising or cross-site tracking network. In our native apps, no analytics beacon is sent at all.

08How long we keep it

• Account & subscription records — for as long as your account is open, and a short period afterward as needed for legal, tax, and fraud-prevention purposes.
• Lull preferences & conversation history — until you delete them, turn off conversation sync, or close your account.
• Server logs — a short period, then deleted or anonymized.
• Anonymous play counts — kept indefinitely, because they can’t be traced back to you.

09Your rights & choices

Depending on where you live (including under the EU/UK GDPR and California’s CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict processing, and to withdraw consent. Because we hold so little, these are simple for us to honor.

You can act on most of this yourself: turn Lull AI off, stop conversation sync, or delete your Lull data from Lull’s settings; cancel your subscription; and clear device data by signing out or deleting the app. To delete your account, sign in on everlull.com and choose “Delete my account” on the Account card — this removes your account, saved mixes, check-ins and Lull memory, and cancels any web subscription (App Store and Google Play subscriptions are cancelled in your store settings). You can also request deletion, data access, or a copy of your data by emailing privacy@everlull.com and a person will respond. We do not discriminate against you for exercising any of these rights. If you’re in the EU/UK you also have the right to complain to your local data-protection authority.

10Security

Passwords are stored only as secure hashes, never in plain text. Account sessions can be revoked, and sensitive stored data (such as Lull preferences) lives outside the public web root with restricted file permissions. Payment card data is handled entirely by Stripe and the app stores, never by us. No method of storage or transmission is perfectly secure, but we take reasonable measures to protect your information and will notify you and the relevant authorities of a breach where the law requires.

11International transfers

We operate from the United States, and our providers (including our host, Stripe, and our AI provider) may process data in the United States or other countries. If you use EverLull from outside the U.S., you understand your data may be transferred to and processed in the U.S., where data-protection laws may differ from your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

12Children & classrooms

EverLull’s account features and the Lull AI companion are not directed to children under 13, and Lull’s AI chat is for adults (18+). We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, email privacy@everlull.com and we will delete it.

Classroom mode is designed to be run by a teacher on a shared screen: it provides calming scenes, a class timer, and read-aloud “mindful minute” scripts, and it does not require students to create accounts or enter personal information to use those features. Teachers and schools are responsible for their own compliance with laws such as COPPA and FERPA when using EverLull with students, including obtaining any parental or institutional consent their policies require. The Lull AI companion is not intended for classroom or child use.

13Changes

If we update this policy, we’ll change the “last updated” date above and, for material changes, note it in the app. Continued use after an update means you accept the revised policy.

14Contact

Questions, requests, or concerns about privacy? Email privacy@everlull.com and a person will respond.