Lullashelf

Privacy Policy

Lullashelf Privacy Policy

Effective date: 10 May 2026. Legal version: lullashelf-legal-v1.

Legal hub Contact support

Effective date: 10 May 2026

Legal version: lullashelf-legal-v1

Lullashelf is operated by Four & More Limited, NZBN 9429053619358, New Zealand.

This Privacy Policy explains how Lullashelf handles personal information when you use the Lullashelf iPhone and iPad app, website, account sign-in, storybook import, reader audio, sharing, and purchase features.

This document is written to reflect the current Lullashelf codebase as at 10 May 2026. If the app changes, this policy and the App Store privacy answers must be reviewed and updated.

1. Summary

Lullashelf is designed for private family storybook creation and reading.

2. Who is responsible for your information

The agency/controller responsible for Lullashelf is:

Four & More Limited

NZBN: 9429053619358

Country: New Zealand

Support and privacy contact: support@lullashelf.com

For privacy requests, include "Privacy Request" in the email subject line.

Four & More Limited will maintain at least one privacy officer for Lullashelf. Until a named privacy officer is published, privacy officer requests should be sent to support@lullashelf.com with "Privacy Officer" in the subject line.

3. Personal information Lullashelf handles

Depending on how you use the app, Lullashelf may handle the following information.

Account information

You can use Lullashelf as a guest on your device. If you choose to sign in, Lullashelf may receive and store:

Legal acceptance records

Lullashelf records:

Storybook information

Lullashelf stores storybook information you add or import, including:

This storybook content is primarily stored locally on your device or, where available, in your own iCloud storage. It is not uploaded to a Four & More Limited story-content server by the current app.

Because Four & More Limited does not keep a server copy of your books or recordings, Four & More Limited usually cannot recover storybook content if your device copy or iCloud copy is deleted, unavailable, corrupted, or no longer linked to your Apple ID.

Purchase information

Lullashelf uses Apple StoreKit to sell book-space packs, an audio-recording unlock, and a full app unlock. Apple processes payment information. Lullashelf receives StoreKit transaction results needed to unlock purchased book spaces, recording features, full app access, and future included features in the app. Lullashelf does not receive your full payment card number.

The current app stores purchase state locally and can ask StoreKit to restore verified purchase history. Restore-after-reinstall behaviour should still be tested in the production App Store environment before public paid launch claims are final.

Device permissions and local app data

The app may access:

Lullashelf does not request location access in the current codebase.

Support information

If you contact support, Four & More Limited may receive the information you choose to send, such as your email address, message content, screenshots, device details, purchase issue details, or diagnostic information.

4. How information is collected

Lullashelf collects information:

Where information is received from another person, such as a shared storybook, the sender is responsible for having the right to share that content with you.

5. Why information is used

Lullashelf uses information to:

Lullashelf does not use your storybook content for advertising, third-party marketing, or AI model training in the current codebase.

6. Legal bases and NZ Privacy Act alignment

Four & More Limited is based in New Zealand and aims to handle personal information consistently with the Privacy Act 2020 and its Information Privacy Principles.

The main reasons for handling information are:

For users in regions with similar privacy laws, such as the European Economic Area or the United Kingdom, the equivalent legal bases may include contract, consent, legitimate interests, and legal obligation, depending on the feature.

If Lullashelf receives personal information from someone other than the individual, such as where one user sends another person a .lullashelfbook containing names, images, voice recordings, or other personal information, Four & More Limited will take reasonable steps appropriate to the circumstances to make this policy available and explain the handling of that information.

7. Sharing and disclosure

Lullashelf does not sell personal information.

Lullashelf may disclose information to:

When you share a .lullashelfbook file, the attachment can include the story pages, page words, metadata, reader names, and narration audio contained in that book. Only share books with people who should receive that content.

8. Overseas storage and service providers

Some service providers may process or store information outside New Zealand. For example, Firebase, Google, Apple, App Store, iCloud, and email services may operate internationally.

Four & More Limited will take reasonable steps to use reputable providers and to disclose overseas transfers in this policy. Users should also review Apple, Google, Firebase, and iCloud privacy information because those providers control parts of their own services.

9. Children and family use

Lullashelf is made for family storybook creation and reading, and storybooks may be about or for children. The app should be used by a parent, guardian, or responsible adult where children are involved.

Do not add, record, import, or share a child’s image, voice, name, story, or other personal information unless you have the right and authority to do so.

Lullashelf does not knowingly operate a public child profile system, public chat, targeted advertising system, or child-directed social feed. If Four & More Limited learns that a child has provided account information without appropriate parent or guardian involvement where required, Four & More Limited may delete or disable the relevant account information.

International child privacy laws vary. For example, some countries require parent or guardian consent before processing children’s personal data online. If you make Lullashelf available in jurisdictions with specific child privacy rules, including the United States, European Union, or United Kingdom, the app flow and disclosures should be reviewed for those markets before launch.

10. User content and copyright

You are responsible for the storybook content you add, import, record, export, or share through Lullashelf.

Do not use Lullashelf to store or share content that you do not have the right to use, including copyrighted images, text, audio, names, likenesses, or other protected material.

Four & More Limited does not claim ownership of your storybook content. You give Four & More Limited only the rights needed to operate the app features you choose, such as storing app account records and allowing local import/export/share workflows.

11. Security

Lullashelf uses Apple platform protections, iOS permission prompts, local app storage, iCloud where available, Firebase Authentication, and Firestore security rules for account/legal records.

No app or storage system is perfectly secure. You should protect your device, Apple ID, Google account, and email/Messages accounts, and you should only share storybook files with trusted recipients.

12. Retention

Lullashelf keeps information for as long as reasonably needed for the purposes described in this policy.

13. Access, correction, deletion, and privacy choices

You may request access to, correction of, or deletion of personal information held by Four & More Limited by emailing support@lullashelf.com.

Because most storybook content is stored on your own device or iCloud storage, you can usually delete that content directly in the app, by deleting the app, or through your device/iCloud controls.

If Lullashelf offers account creation or account sign-in, the app should also provide an in-app way to start account deletion. Until that feature is implemented, account deletion requests can be made by emailing support@lullashelf.com, but the in-app deletion flow should be treated as a launch requirement for App Store review.

You can also:

Four & More Limited may need to verify your identity before responding to privacy requests.

Four & More Limited will respond to privacy requests within the time required by applicable law. In New Zealand, access and correction requests are generally expected to be handled as soon as reasonably practicable and no later than 20 working days unless an extension is available under the Privacy Act.

14. Privacy breaches

If Four & More Limited becomes aware of a privacy breach that has caused, or is likely to cause, serious harm, it will assess notification obligations under applicable law, including New Zealand’s notifiable privacy breach rules. Where required, Four & More Limited will notify the Office of the Privacy Commissioner and affected people as soon as practicable.

15. Changes to this policy

Four & More Limited may update this Privacy Policy when Lullashelf changes or when legal, operational, or App Store requirements change.

If a change is material, Lullashelf should update the legal version, refresh the in-app legal text, and request renewed acceptance where appropriate.

16. Contact

For privacy questions, support, access requests, correction requests, deletion requests, or complaints:

support@lullashelf.com

If you are in New Zealand and are not satisfied with the response, you may contact the Office of the Privacy Commissioner.