Privacy Policy

1. Who We Are

LilDream is operated by an individual based in Brazil. Throughout this policy, “we”, “us”, and “our” refer to the operator of LilDream.

2. Data We Collect

When you use LilDream, we collect:

• Account data: name, email address, and hashed password.
• Baby profile: baby’s name, birth date, and timezone.
• Activity logs: sleep, feed, and diaper entries you create.
• Usage data: pages visited, feature interactions, browser type, IP address, and device type (collected automatically).
• Payment data: processed and stored exclusively by Stripe. We receive your Stripe customer ID and subscription status but never your card number or banking details.

3. How We Use Your Data

• To provide and personalise the LilDream service (wake windows, plans, summaries).
• To process payments and manage your subscription via Stripe.
• To send service-related communications (e.g., trial expiry reminders).
• To improve the product through aggregated, anonymised usage analytics.
• To measure advertising effectiveness via the Meta Pixel and Conversions API (see section 6).

4. Payment Processing

We use Stripe to process all payments. Stripe operates as an independent data controller for payment data. Our Stripe account is based in Brazil; payments are processed in US Dollars (USD) with automatic currency conversion handled by Stripe and your card issuer. Your financial institution may apply additional conversion fees.

For more information, see Stripe’s Privacy Policy.

5. Cookies

We use essential cookies for authentication (session tokens) and optional analytics cookies from the Meta Pixel (_fbp, _fbc) to measure ad performance. You can block analytics cookies in your browser settings without affecting core functionality.

6. Meta Pixel & Conversions API

When configured, LilDream uses the Meta Pixel (client-side) and the Meta Conversions API (server-side) to track conversion events (e.g., sign-up, trial start, purchase). Data sent to Meta includes hashed email address, IP address, browser user-agent, and event details. This data is governed by Meta’s Privacy Policy.

7. Data Storage & Security

Your data is stored in a hosted PostgreSQL database with encrypted connections. Passwords are hashed using bcrypt. We use HTTPS for all communications. While we take reasonable measures to protect your data, no method of transmission or storage is 100% secure.

8. Data Retention

We retain your account and activity data as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymised, aggregated data may be retained indefinitely for product improvement.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (“right to be forgotten”).
• Export your data in a portable format.
• Object to or restrict processing of your data.
• Withdraw consent for analytics tracking at any time.

Brazilian users: your rights under the LGPD (Lei Geral de Proteção de Dados) are fully respected. EU/EEA users: your GDPR rights apply. To exercise any right, contact us at the email below.

10. Children’s Privacy

LilDream is designed for parents and caregivers, not for use by children. We do not knowingly collect data directly from children under 13. The baby profile data (name, birth date) is entered by the parent or guardian and is used solely to calculate age-appropriate sleep guidance.

11. Third-Party Services

We use the following third-party services that may process your data:

• Stripe — payment processing
• Meta (Facebook) — advertising analytics (Pixel & Conversions API)

Each operates under its own privacy policy.

12. Changes to This Policy

We may update this policy periodically. Material changes will be communicated via the app. The “Last updated” date at the top reflects the most recent revision.

13. Contact

Questions about your privacy? Email us at [email protected].