Lullagram is an independent pregnancy and baby tracking application provided by Lullagram Limited, a private company limited by shares registered in Ireland (company number 828691), registered office 41 Coppenger Fields, Ballincrokig, Dublin Pike, Cork City, Cork, Ireland, T23 PD7H. Lullagram Limited is the "Data Controller" under GDPR.
Lullagram was founded by Christopher O'Callaghan, who ran it as a sole trader until 22 October 2026, when Lullagram Limited, the company he set up to run it, took over as the Data Controller. Nothing changed about what we collect, why we collect it, where it is stored or who it is shared with.
Contact for any privacy question, data access request, or deletion request: hello@lullagram.ie.
The following data is classified as "data concerning health" under GDPR Article 9. We collect and process it only with your explicit consent given at signup.
Carers and childminders (from app version v107). If you create a carer code, the person you give it to can see and add only your baby's care logs (feeds, sleep, nappies and pumping) for the babies in your household. A carer never sees your pregnancy, cycle or IVF information, your notes, check-ins or anything else in your account. You can remove a carer at any time, which ends their access immediately. If you create a professional share link, the person with the link can view the last 7 days of the chosen care logs, read only; the link expires after 7 days and you can stop it sooner at any time.
If you use the pregnancy section, we store the following with your explicit consent. It is shared with the people in your Lullagram household, such as your partner.
When your baby arrives, your pregnancy is kept as Pregnancy memories until you delete it. If a pregnancy ends, you choose whether to keep your notes or delete everything from that pregnancy.
If you use the trying for a baby section, we store the following with your explicit consent: period days and flow, symptoms and mood, cervical fluid, ovulation and pregnancy test results, the days you mark as the day you ovulated, temperature, days you had sex, notes (including notes you add for future days), your cycle settings and your folic acid ticks.
IVF tools. If you turn on the IVF tools, we also store, with your separate explicit consent: your treatment cycles (fresh or frozen, the dates your clinic gives you, egg and embryo numbers, the result and your notes), the medicines you add (name, dose, schedule, supplies and reminder settings), the doses you tick off (time, injection site and any note) and your appointments. Lullagram shows this back to you; it never sets or changes a dose.
This data belongs to you alone, not your household. Other people in your household see nothing unless you turn on sharing, and even then they see only your period and test days, the ovulation days you mark, your predicted fertile days and, if you use the IVF tools, your treatment stage, key dates and results. They never see your medicines, doses, appointments or notes. You can delete all of your cycle data, or only your IVF data, at any time in Cycle settings.
Reminders. If you turn on reminders (for medicines, appointments or key treatment dates), the reminders for the next few days are stored in our EU database so they can reach your phone when the app is closed, and are sent through your phone or browser's own notification service. Unless you choose to show medicine names, a reminder only says that a dose or appointment is due, so nothing private shows on your lock screen.
If you choose "Continue with Google" instead of creating a password, Google shares the following with us so we can create or sign you into your Lullagram account:
We do not receive your Google password. We do not request access to your Gmail, Google Drive, Google Calendar, contacts, photos, or any other Google service or data. The OAuth scope we request is the minimum needed to identify you (openid, email, profile).
You can revoke Lullagram's access to your Google account at any time via myaccount.google.com/permissions. Revoking access does not delete your Lullagram account. To delete the account, use More → Delete account inside the app.
If you answer our optional one-question feedback form, we keep your answer, any comment you write and whether we may reply, linked to your household, so we can improve Lullagram. If you use the pregnancy, trying for a baby or IVF section, the question is asked at most once, after about a week without a visit (three days for IVF). You can ask us to delete it at any time by emailing hello@lullagram.ie.
We do not collect: device location, contact lists, photos (other than bump photos you choose to add), microphone audio, advertising identifiers, or any behavioural analytics tied to you as a person.
| Data type | Purpose | GDPR legal basis |
|---|---|---|
| Account data | Create and operate your account | Contract (Art. 6(1)(b)) |
| Baby health data | Display your tracking history back to you | Explicit consent (Art. 9(2)(a)) |
| Pregnancy data and bump photos | Show your pregnancy week by week, your dates and your logs back to you and your household | Explicit consent (Art. 9(2)(a)) |
| Cycle data | Show your cycle and predicted fertile days back to you, and to your household only if you turn on sharing | Explicit consent (Art. 9(2)(a)) |
| IVF treatment data and reminders | Show your treatment, medicines, doses and appointments back to you, send the reminders you turn on, and show your treatment stage and key dates to your household only if you turn on sharing | Explicit consent (Art. 9(2)(a)) |
| Questions you ask Ask Lulla | Answer your question, using a short summary of the data relevant to it | Explicit consent (Art. 9(2)(a)) for any health data in the question or summary |
| Email address | Send transactional emails (verification, password reset, optional emailed reports you request) | Contract (Art. 6(1)(b)) |
| Email address and the sections you use | Send a short guide to a section when you start it (pregnancy, trying for a baby or IVF), a reminder about an unused partner invite, and at most one feedback question if you stop using Lullagram. Each email has a one-click unsubscribe | Legitimate interest (Art. 6(1)(f)); explicit consent (Art. 9(2)(a)) for the section details you agreed to when you started the section |
| Your due date and pregnancy week | Send the weekly pregnancy email, only if you choose it in the app. It stops when you turn it off, unsubscribe or close the pregnancy section | Explicit consent (Art. 9(2)(a)) |
| Google sign-in data (name, email, Google ID) | Authenticate you when you choose Google sign-in | Contract (Art. 6(1)(b)) |
| Technical data | Keep the app working (sessions, offline queue) | Legitimate interest (Art. 6(1)(f)) |
| Signup checks | Check new accounts for signs of fraud or automated signups, so Lullagram stays safe for real families | Legitimate interest (Art. 6(1)(f)) |
We do not use your data for any other purpose. We do not profile you (apart from the signup check in section 4), do not run analytics on what you log, and do not use it to train any AI model.
Your data is stored in an EU data centre operated by Supabase Inc., our database and authentication processor. Supabase uses Amazon Web Services (AWS) infrastructure in the EU as a sub-processor.
Transactional emails (verification, password reset, and any emailed report you request from the app) are sent via Resend (a US company with EU sending infrastructure). Email content contains only your email address and the email subject and body. Emailed reports include the baby tracking data you chose to include when requesting the report; standard transactional emails do not. The emails about your sections are also sent through Resend. The section guide and the partner invite reminder name the section but no health details. The weekly pregnancy email, if you choose it, contains your pregnancy week and general information about that week. Every one of these emails has a one-click unsubscribe link, and we check the unsubscribe list every time before we send.
If you use "Continue with Google" to sign in, Google LLC processes the sign-in handshake. Google does not receive any of your Lullagram tracking data. Google's own privacy policy applies to their handling of your Google account: policies.google.com/privacy.
If you use Ask Lulla, your question and a short summary of the data relevant to it (for example your baby's first name, age and last 7 days of logs, your pregnancy week or your cycle day) are sent to Anthropic, which provides the AI model, to write the answer. Anthropic processes it only to provide the answer and may not use it to train its models. Your own name and email address are not sent.
Ask Lulla on our website. Anyone can ask Lulla a question on lullagram.ie without an account. Your question, up to four earlier messages in the same chat and the address of the page you asked from are sent to Anthropic to write the answer, which is based on HSE guidance. We keep the question and answer, without your name, email or IP address, to see what parents need and to improve our guides, and delete them after 12 months. To limit use to 5 questions a day, we keep a one-way scrambled code made from your IP address and the date, which cannot be turned back into your IP address and is deleted after 2 days. Please do not include names or other personal details in your question.
Lullagram in ChatGPT. If you use the Lullagram app inside ChatGPT, ChatGPT sends our server only what the tool needs: a baby's date of birth (to work out the Irish vaccine dates), a topic (for example Child Benefit) or the words of a question (to find the right Lullagram guide). We use it only to send back the answer, and we do not store it, log it or link it to a Lullagram account; you do not need an account and we never learn who you are. The server runs on Supabase in the EU, which keeps standard technical request logs (these can include your IP address) for a short time to run and protect the service. Your ChatGPT conversation itself is handled by OpenAI under its own privacy policy: openai.com/policies/privacy-policy. Please do not include names or other personal details in your question.
If you subscribe by card or buy a gift pass, the payment is handled by Stripe, our payment provider. Stripe receives your email address and card details; we never see or store your card number. We keep a record of the subscription (its status and renewal date) so the app knows you have access. If you subscribe in the Android app, Google Play handles the payment under Google's own terms and privacy policy, and we receive only the purchase record and its status.
The website and the app's files are served by Netlify, which processes your IP address and browser details to deliver the pages and protect the service.
All of these processors have signed Data Processing Agreements with us or operate under terms that meet GDPR processor requirements. They process data only on our instructions and may not use it for their own purposes.
Signup checks. When a new account is created, we check it for signs of fraud, fake accounts or automated signups. This uses your IP address, your email address, the type of device and browser you used, where you arrived from and what you set up in your account in your first few minutes (for example a first entry, a baby or a pregnancy). To check the IP address, we send it to ipapi.is and proxycheck.io, which tell us its rough location, network provider and whether it belongs to a VPN, proxy or data centre. We also send your IP address and email address to StopForumSpam, a public list of addresses reported for spamming websites. These services receive only the IP address or email address, never your name or any health data. They are independent of Lullagram, so they handle it under their own terms. The result is a score that only we see. It never decides anything by itself: an account is only suspended after a person has reviewed it. We keep the result for 12 months, or until you delete your account if that is sooner.
Your account and tracking data stays in the EU at rest. Supabase's US-based staff may access EU servers for support and operational reasons under Standard Contractual Clauses (SCCs) approved by the European Commission. Resend and Google both operate under the EU-US Data Privacy Framework. When you use Ask Lulla, in the app or on our website, your question and the information described in section 4 are processed by Anthropic in the United States under Standard Contractual Clauses. The Lullagram app in ChatGPT runs on our EU server; what you type into ChatGPT is handled by OpenAI under its own terms. Stripe and Netlify may also process data in the United States; those transfers are covered by the EU-US Data Privacy Framework or Standard Contractual Clauses. ipapi.is, proxycheck.io and StopForumSpam may process your IP address or email address outside the EU, for the signup check only.
You have the right to:
To exercise any of these rights, email hello@lullagram.ie. We will respond within 30 days.
If you are unhappy with how we handle your data, you can lodge a complaint with the Irish Data Protection Commission:
Lullagram is a tool for parents and guardians, not for children. You must be 18 or over to register a Lullagram account.
The data Lullagram stores about your baby is provided by you, the parent or legal guardian, in exercise of your parental responsibility. You can delete this data at any time. When your child reaches an age where they have data protection rights of their own (generally 16 in Ireland), you should review what is stored and decide whether to retain it.
Lullagram does not use cookies for tracking. We use your browser's localStorage only to keep you signed in and to hold a queue of offline entries until they sync. This is purely functional, not analytical.
We do not use Google Analytics, Facebook Pixel, or any other third-party tracker.
If you try the pregnancy week preview on the sign-up screen, the due date you type stays on your device and is never sent to us. The app also remembers on your device which section you last used (baby tracker, pregnancy or trying for a baby) and a copy of your pregnancy, cycle or IVF data (and the reminders for the next few days) so it works offline; signing out removes these.
Two optional features also use localStorage before you have an account. If you try the baby timeline on the sign-up screen, the name and date of birth you type stay on your device and are never sent to us; they are removed when you add your baby in the app, or after 30 days. If a friend shares a Lullagram link or code with you, the 6-character code is kept on your device for up to 60 days so we can give you the longer free period when you sign up; it is sent to us once, at sign-up, and you can remove it on the sign-up screen before then.
On the lullagram.ie website (not inside the app) we collect anonymous, cookieless usage statistics so we can improve the site: which pages are viewed, how far people scroll, which buttons or links are clicked and roughly where on the page people tap (including on things that are not links), along with the device type, the site you arrived from and whether the device already has the Lullagram app (a yes or no only, so we can tell new visitors from existing users). No cookie is set, no IP address is stored, and nothing identifies you or links a visit to an account. This data stays in our own EU database and is never sold or shared.
Lullagram is an independent application and is not affiliated with, endorsed by, or partnered with the Health Service Executive (HSE) or any other Irish government body. We link to publicly available HSE content as an information source for users. Linking to HSE.ie does not imply HSE has reviewed or approved Lullagram.
Lullagram is a logging tool, not a medical device. Information shown in the app, including content summarised from HSE.ie, is for general guidance only and does not replace advice from your GP, public health nurse, or other qualified healthcare provider.
In a medical emergency, call 112 or 999. For non-emergency health advice in Ireland, call HSE Live on 1800 700 700.
If we change this policy in a material way, we'll notify you by email and inside the app, and require you to accept the new policy before continuing. Minor updates (clarifications, formatting) will be posted here with the updated "Last updated" date.
For any privacy question or to exercise your rights, email hello@lullagram.ie. We respond within 30 days, usually much sooner.