Privacy Policy

Effective August 22, 2026

LullaRoute plans calm driving routes so your baby can sleep. This policy explains exactly what data the app handles. The short version: no accounts, no ads, no trackers, no selling data. Trip coordinates go to our routing server to compute your route, and opening Discover sends where you are so we can look up family events and the weather near you.

What we process

When you plan a trip, the app sends your chosen origin, destination, any intermediate stops, and your routing preferences (slider values, target duration) to our routing server. This is required to calculate routes. These requests are not stored after the route is computed, beyond short-lived technical logs (IP address, timestamp) kept for abuse prevention and deleted on rotation.

Discover

When you open Discover, the app sends the point your trip starts from — your current location, unless you have picked a different start — to our server, so it can find family events near you and fetch current conditions from the US National Weather Service. Two outside services see a location as part of that: weather.gov, and Ticketmaster, which is one of the sources we search for family events. Both receive a COARSENED point — rounded to roughly a 5 km cell, enough to say which town you are near and not enough to say which street — never your exact position, and never anything that identifies you or the device. Library and community event feeds are queried by town, not by coordinates. When you tap a junction to ban a turn there, that junction’s coordinates go to our server so it can read which roads meet at it. None of this carries an account or an identifier, and none of it is kept beyond the same short-lived technical logs described above.

Location

Your device location is used on-device to show where you are on the map and to set trip starting points. Location permission is optional; you can plan trips by searching addresses instead. Background location is used only during an active drive to keep navigation working.

Search and map data

On iPhone, address search, autocomplete, and points of interest are provided by Apple Maps on your device under Apple’s privacy policy; those queries do not go to our servers. That covers the search bar, the autocomplete, the calm places in Discover and the “What’s on my way” results.

On Android there is no equivalent on-device service, so those searches go through our server instead. When you type an address, the text you type — together with a position rounded to about a kilometre, so that the results are near you rather than in another state — goes to our server, which asks two outside geocoders: Photon, run by komoot, and the United States Census Bureau’s address geocoder. The “What’s on my way” list and the calm places in Discover send the route, or that rounded position, to OpenStreetMap’s Overpass service. None of it carries an account or an identifier. We do not keep what you typed: it is held in memory for a few minutes so that repeating a search does not send it out twice, and it is never written to disk and never written to our logs.

The events listed under “What’s happening nearby” are different — those come from our server, as described above. Route calculation uses OpenStreetMap data hosted on our own server.

Route reports and trip ratings you choose to send

If you tap “Report this route”, or rate a drive with stars when it ends, the app sends that trip’s request (coordinates and preferences), the route shown, your star rating if you gave one, and any comment you add. We keep these to fix and improve routing quality. Don’t include personal information in comments. Skipping the rating (“Not now”) sends nothing.

Anonymous trip timing (optional)

To make arrival estimates honest, the app can report, after a drive ends, how long the drive actually took compared with the plan, along with the route it followed and your routing preferences. The first and last 300 metres are removed on your phone before anything is sent, so where you set off from and where you arrived are never uploaded, and drives too short to trim that way are not sent at all. There is no account and no identifier: nothing links a trip to you or your device. This is on by default and can be turned off any time in Settings → “Help improve time estimates”.

The same report also carries how long each stretch of the road took — a handful of “at this distance along the route, this many seconds had passed” readings, trimmed by the same 300 metres at both ends. This is what lets the app learn that a particular road is slow at five on a weekday, so it can plan a drive that really lasts as long as you asked. Our server turns those readings into an average for each road at each hour and keeps only the average: the order you drove them in is never written down, so what is stored describes the road and not your journey. It travels under the same switch, and is not sent when that switch is off.

Reporting a bad route is different, and deliberately so. When you tap the flag to tell us a route was wrong, the exact trip is sent untrimmed, because replaying it against the routing engine is the only way to fix it. That happens only when you choose to report.

Beta signups and feedback you send

You do not have to give us anything to join the beta — the TestFlight link on this site installs the app without an address. If you would rather we emailed it to you, we store the name and email you type, plus anything you write in the optional note, so we can send you the link and know who asked. That is the only place LullaRoute holds personal contact details. We use them for the beta and nothing else: no newsletter, no advertising, never shared or sold. Ask us at hello@lullaroute.com and we will delete your entry.

If you send feedback from inside the app (Settings → Send feedback), we store your message, the app version and your device model. Your email is included only if you choose to type one so we can reply. No location or trip data is attached.

What we don’t do

No user accounts. No advertising or analytics SDKs. We do not sell your data, and we share nothing with anyone for advertising, profiling or any purpose of their own. The one thing that does leave our server is the coarsened ~5 km location described under Discover, sent to weather.gov and Ticketmaster purely to answer “what is on near here” — no identifier travels with it. No storage of your trip history on our servers beyond the route reports and ratings you choose to send, and the trimmed, unidentified trip timings described above — which you can turn off in Settings.

Data on your device

Your settings, home address, and recent searches are stored only on your device and can be removed in the app (or by deleting the app).

Deleting your data

LullaRoute has no account, so there is nothing to close and no profile to erase. Deletion splits by where the data actually sits.

On your phone. Your settings, home address, saved loops, saved events, banned turns, recent searches and the nap log never leave the device. Remove any of them inside the app — the home address has a “Remove home address” button, saved items can be deleted individually — or delete the app, which takes all of it with it. We cannot see any of this and cannot delete it for you.

Things you chose to send us. Route reports, star ratings and the anonymous trip timings carry no account and no device identifier, so they cannot be traced back to a person — not by us and not by anyone reading them. That is deliberate, and it does mean we cannot find “your” reports on request. If you want a specific report removed, email us the approximate date and route and we will find and delete it.

Things with your name on them. If you signed up for the beta, we hold the name and email you typed and anything in the optional note. If you sent feedback from inside the app, we hold your message, the app version, your device model, and your email only if you typed one. Email hello@lullaroute.com from that address, ask for deletion, and we will delete it and confirm. There is no form to fill in and no waiting period beyond the time it takes us to read the message.

Short-lived technical logs (IP address and timestamp, kept for abuse prevention) are deleted on rotation and are not searchable by person.

Contact

Questions or deletion requests: hello@lullaroute.com