LALOULI PRIVACY POLICY

Last Updated: October 19, 2026

This Privacy Policy explains how Lalouli LLC (“Lalouli,” “we,” “us,” or “our”) collects, uses, shares, and protects personal information through its website, app, and related products and services, as made available from time to time (the “Service”). Lalouli is a planning service for parents that helps families plan special moments, such as holidays, seasonal occasions, and everyday activities. Parents and guardians create the account and tell us about their family; children do not use the Service. The Service is available through web browsers and, if and as made available, the Lalouli app on one or more mobile platforms. Capitalized terms used but not defined in this Privacy Policy have the meanings given to them in the Terms of Service (the “Terms”), which incorporate this Privacy Policy by reference.

Lalouli is designed with the privacy of families as a foundational principle. The Service is directed to adults 18 and older and is not directed to children. We do not knowingly collect information directly from children. Parents and guardians may choose to share information about their children so we can personalize their plans, and we apply heightened protections to that information as described in this policy. Features that allow content to be added (e.g., Memory Bank photos, household member invitations, and printables or tickets) are designed for use by the adult Account Holder, and any information about a child is provided by that adult.

THE SERVICE PROVIDES IDEAS FOR FAMILY ACTIVITIES, RECIPES, SETUPS, PRODUCTS, AND FILMS FOR INFORMATIONAL AND PLANNING PURPOSES ONLY. NOTHING AVAILABLE THROUGH THE SERVICE, INCLUDING KITCHEN RULES, INGREDIENT SUBSTITUTIONS, AGE RANGES, AI OUTPUT, OR ANY INFORMATION YOU PROVIDE ABOUT YOUR HOUSEHOLD OR CHILDREN, CONSTITUTES MEDICAL, HEALTH, NUTRITIONAL, DIETARY, ALLERGY, PSYCHOLOGICAL, CHILD DEVELOPMENT, SAFETY, OR OTHER PROFESSIONAL ADVICE, DIAGNOSIS, OR TREATMENT. LALOULI IS NOT A HEALTHCARE PROVIDER AND DOES NOT SCREEN FOOD OR PRODUCTS FOR ALLERGENS. KITCHEN RULES AND SIMILAR SETTINGS ARE HOUSEHOLD PREFERENCES ONLY AND ARE NOT A MEDICAL OR ALLERGY SCREENING TOOL. ALWAYS READ LABELS, CONSULT A PHYSICIAN, PEDIATRICIAN, ALLERGIST, DIETITIAN, OR OTHER QUALIFIED PROFESSIONAL ABOUT ANY HEALTH QUESTION, AND NEVER DISREGARD OR DELAY SEEKING PROFESSIONAL ADVICE BECAUSE OF THE SERVICE. IN A MEDICAL EMERGENCY, INCLUDING AN ALLERGIC REACTION, CALL 911 IMMEDIATELY. PLEASE SEE THE TERMS FOR ADDITIONAL DISCLAIMERS AND LIMITATIONS OF LIABILITY.

1. WHAT DOES THIS POLICY COVER?

This policy covers personal information collected through the Lalouli website, app, communications, cookies, analytics, and similar technologies. The Service is used by parents, guardians, and other adults in the household.

The Service has the following account types:

Account Holder: A parent or guardian, 18 or older, who creates the account, purchases a membership, provides information about the household and children, and plans Moments.
Household Member: If and when Lalouli makes this feature available, another adult, 18 or older, invited by the Account Holder to view and help plan the household’s Moments. Account Holders may not invite a minor.

2. WHAT INFORMATION DO WE COLLECT?

We collect information needed to provide, secure, improve, develop, and administer the Service and to comply with applicable law. The categories of information we collect are described below and may include other information you choose to provide or that we describe to you at the time of collection.

A. Information You Provide Directly

You may provide the following information when creating an account or using the Service:

Name: Your name and family name, if you choose to provide them.
Email Address: An email address used for authentication, account recovery, service communications, and marketing communications.
Household Preferences: Information about your household provided during onboarding or in settings, such as your planning style (Keep it simple, A little extra, Go all out), prep time and spending, craft, kitchen, and mess comfort, kitchen rules (such as nut-free, gluten-free, or dairy-free), screen and movie settings, streaming services, where you shop, whether you have a printer, and the holidays you celebrate. Kitchen rules and holidays celebrated are optional settings. Kitchen rules are household food preferences only; they are not a medical or allergy scanning tool, and we do not use them to infer any health condition.
Zip Code: If you provide it, your postal zip code, used to tailor suggestions and for regional analytics.
Account Credentials: Your login email and password.
Plans and Activity: Details about Moments you plan, choices and swaps you make, films you pick, items you mark as bought or owned, and nights you complete.
Payment Information: Your membership plan and billing history. Card details are submitted directly to our payment processors; we do not see or store your full card number.
Messages: Emails or comments you send us and your survey responses.
User Content: As defined in the Terms, including all content you upload, submit, or otherwise make available through the Service, such as photos, notes, free-text entries, and other materials you add to your Moments or Memory Bank.

B. Information Collected Automatically

We automatically collect limited device, technical, cookie, and usage information to operate and secure the Service.

Device Information: Device type, operating system, model, identifiers where permitted, screen resolution, and language settings.
IP Address: Your IP address, used for approximate location, security monitoring, and fraud prevention.
Cookies and Similar Technologies: Cookies, pixels, local storage, software development kits, and similar tools, set by us and by third parties such as analytics providers, support sessions, preferences, essential features, product analytics, affiliate attribution, and the purposes described in Section 6.B. We do not currently permit Retail Partners to place cookies or pixels on the Service. You may be able to set your browser or device to reject certain cookies, but some features may not work properly.
Advertising Pixels: We use the Meta Pixel on the Service to measure how our advertising on Facebook and Instagram performs and to show Lalouli ads to people who have visited the Service. The pixel may collect device and browser information, the pages you visit, and actions such as signing up or becoming a member, and Meta may associate this information with your Meta account. We do not send Meta your children's names, ages, birthdays, or photos, or the details of your plans. You can opt out as described in Section 9.
Usage Data: Information about features used, screens viewed, actions taken, interaction times, session duration, and navigation.

C. Information About Your Children Provided by Parents

Parents and guardians may choose to provide the following information about their children so we can personalize their Moments:

First Names: Your children’s first names, used to personalize Moments, printables, and communications.
Ages and Birthdays: Your children’s ages or birthdays, used to suggest age-appropriate activities and birthday Moments.
Interests and “The Little Things”: Your children’s interests and any other details you choose to share in free text (for example, “scared of clowns”). Please do not enter health, medical, or other sensitive information in free text fields.
Photos: If and when available, photos you choose to add to your Memory Bank, which may include images of your children.

D. Information We Do NOT Collect

Biometric identifiers: We do not collect fingerprints, facial geometry, voiceprints, genetic data, or similar biometric information.
Government-issued identifiers: We do not collect Social Security numbers, passport numbers, driver’s license numbers, or other government-issued identifiers.
Information directly from children: We do not intentionally or knowingly collect information directly from children, and the Service is not intended for use by children.

3. HOW DO WE USE INFORMATION?

We may use personal information for the purposes described below, for any other purpose disclosed to you when the information is collected, and as otherwise permitted by applicable law.

Provide and Maintain the Service: Operate accounts, authentication, synchronization, Moment planning, and related features.
Plan and Personalize Your Moments: Use your household preferences, User Content, and information about your children to generate and tailor Moments, for example, putting your children’s names on their tickets or keeping every treat consistent with your kitchen rules.
Save Plans and Memories: Save your Moments, choices, swaps, and completed nights, and maintain your Memory Bank.
Facilitate Shopping: Provide product links to Retail Partners (as defined in Section 6.B), including affiliate links, send your shopping list to a Retail Partner when you direct us, attribute purchases and commissions, and measure the performance of our recommendations.
Process Memberships and Payments: Use your contact and billing information to process payments, manage memberships and renewals, and support billing; payment cards are processed by a third party.
Communicate with You: Send account, billing, renewal reminder, security, service, plan-related (e.g., “tonight’s the night”), policy communications, tips, new Moments, and offers. These communications may include your children’s first names.
Improve and Develop the Service: Use personal information, User Content, usage data, and aggregated analytics to diagnose issues, improve features, develop new products and services, and guide product development.
Operate, Develop, and Improve AI Features: Use User Content, your inputs, household preferences, and information about your use of the Service to operate, personalize, develop, train, test, and improve features that rely on artificial intelligence, machine learning, large language models, or similar technologies, whether developed by Lalouli or provided by third parties (“AI Features”), e.g., to generate Moments, recipes, printables, images, film suggestions, and shopping lists. We may introduce, change, or discontinue AI Features at any time. We do not currently send your household’s or children’s information to third-party AI providers; if that changes, we will tell you before it does.
Ensure Safety and Security: Use technical and usage information to detect fraud, prevent unauthorized access, investigate incidents, and enforce platform rules.
Retail Partner Offers and Marketing: Use information as described in Section 6.B so that Lalouli may provide you with offers, promotions, and recommendations, including for Retail Partner products, subject to any opt out rights available to you.
Comply with Legal Obligations: Use personal information to comply with law, legal process, governmental requests, and reporting obligations.
Create and Use Aggregated and Deidentified Data: Collect, derive, and compile, manually or automatically, aggregated, anonymized, or deidentified data from or relating to the Service, including information about Moments, preferences, purchases, and User Content, in a form that does not reasonably identify you, your household, or any child (“Statistical Information”). Lalouli owns Statistical Information and may use, disclose, license, and otherwise exploit it for any lawful purpose, including analytics, research, product development, training AI Features, marketing, and sharing with Retail Partners and other third parties. We maintain deidentified data in deidentified form and do not attempt to reidentify it, except as permitted by law.

Lalouli does not use children’s information for targeted, behavioral, or interest-based advertising, build advertising profiles about children, or sell children’s information. We do not sell personal information for money, and we do not display third-party advertisements within the Service. Our use of the Meta Pixel, described in Section 2.B, may be considered "sharing" for cross-context behavioral advertising or "targeted advertising" under applicable state laws. It never includes children's information. You can opt out at any time as described in Section 9.

4. INFORMATION ABOUT YOUR CHILDREN

Lalouli is a planning service for parents and guardians. The Service is directed to adults 18 and older and is not directed to children. Children do not use the Service, and we do not intentionally or knowingly collect personal information directly from children. Parents and guardians may choose to share information about their children so we can personalize their Moments, and we apply the heightened protections described in this Section to that information.

A. Service Directed to Adults

Only adults 18 and older may create an account or, if enabled, join a household as a Household Member. By creating an account, you confirm that you are at least 18 years old.

Children cannot have accounts, and the Service does not offer features for children to submit information to us. Information about children is provided only by the parent or guardian who holds the account.

If we learn that we have collected personal information directly from a child under 13 without verifiable parental consent, we will delete that information as soon as reasonably practicable. If you believe a child has provided us with personal information, please contact us at privacy@lalouli.com.

B. What Information Do Parents Provide About Their Children?

Parents and guardians may choose to provide their children’s first names, ages or birthdays, interests, “the little things,” and, if and when available, photos, as described in Section 2.C. Providing this information is optional, and we ask only for information that helps us plan your family’s Moments.

C. How Do We Use Children’s Information?

We use children’s information only for the following purposes and to create Statistical Information:

Personalizing Moments. Tailor activities, recipes, printables, tickets, and other Moment content to your children’s names, ages, and interests.
Personalized Communications to Parents. Include your children’s first names in plan-related messages and in other emails we send you, including marketing emails (for example, “Ava and Theo’s night is ready”).
Saving Memories. Store photos and other content you add about your children in your Memory Bank.
Communication with Parents. Use the parent’s email for notices, policy updates, and responses to privacy requests.
Internal Operations. Use limited device and usage information for security, troubleshooting, functionality, and Service improvements, and, if we use AI Features in the future, process children’s information through them solely to provide and personalize your Moments.

We do not use children’s information for targeted, behavioral, or interest-based advertising, marketing profiles, or sale, rental, or leasing. We do not use children’s names, ages, birthdays, or photos to train any artificial intelligence model, and service providers may process children’s information only to provide services to Lalouli.

D. Who Can See Children’s Information?

Information about your children is visible only to you and, if enabled, Household Members you invite. It is not displayed to other members or the public. We share it only with service providers that help us operate the Service, as needed to complete an action you direct, and as otherwise described in Section 6.

E. What are my Parental Rights?

Right to Review. You may review the information you have provided about your children in your account settings or request a copy from us.
Right to Request Deletion. You may edit or delete information about your children at any time in your account settings or by contacting us; deletion removes that information from your Moments and Memory Bank.
Right to Limit Further Use. You may choose not to provide, or to remove, any optional information about your children, and we will stop using it to personalize your Moments.

How to Exercise These Rights. Parents may email privacy@lalouli.com to request review or deletion of their children’s information. We use reasonable efforts to verify the requester’s identity and respond to verified requests as soon as is practicable.

5. WHO CAN ACCESS YOUR HOUSEHOLD’S INFORMATION?

A. Account Holder Access Rights

The Account Holder may access and manage all information associated with the household account, including:

Account, membership, and billing information.
Household preferences.
Information about the household’s children.
Moments, plans, and activity.
User Content, including Memory Bank photos.
Household Member invitations and access, if enabled.

B. Household Member Access Rights

Household Members invited by the Account Holder may view and help plan the household’s Moments, including information about the household’s children, but may not access billing information, change the membership, or invite or remove other Household Members. The Account Holder may remove a Household Member at any time.

6. HOW DO WE SHARE INFORMATION?

We share personal information in the circumstances below and as required or permitted by law. We do not share children’s information for marketing or advertising.

A. Service Providers

We use service providers to operate the Service; they process information on our behalf under contracts requiring confidentiality, security, and limited use. Our service providers include:

Cloud Hosting and Database Providers: Store and process account, household, and planning data for the Service.
Payment Processors: Process membership transactions; Lalouli does not store full payment card or financial account numbers.
Analytics Providers: Help us understand usage trends and improve the Service using aggregated or pseudonymized data where possible.
Advertising Partners: Meta receives limited device and activity information through the Meta Pixel, as described in Section 2.B, to measure our ads and show Lalouli ads to people who have visited the Service. Meta uses this information under its own terms and privacy policy.
Email Services: Deliver account, plan-related, and marketing emails using only information needed for delivery, which may include your children’s first names.
AI Providers: If and when we use them, provide the models and technology that power AI Features, using the information needed to generate and personalize content for you.

B. Retail Partners and Affiliate Links

Lalouli works with retailers, brands, and affiliate program operators, such as Target, Amazon, Michaels, Etsy, Walmart, and Instacart (collectively, “Retail Partners”). When you click a product link, you leave the Service and go to the Retail Partner’s site, and the Retail Partner or affiliate program may receive information about that visit (e.g., that you were referred by Lalouli) so that purchases and commissions can be attributed. When you direct us, we send your shopping list to the Retail Partner you choose. We do not currently share your contact information, device identifiers, or household preferences with Retail Partners for their own marketing or to enable them to provide you with offers, and we do not currently permit Retail Partner cookies or pixels on the Service. If that changes, we will update this policy and provide the opt out choices described in Section 9 before we do. We do not share children’s names, ages, birthdays, or photos with Retail Partners except as needed to complete an action you direct. We may also share Statistical Information with Retail Partners. Retail Partners use information they receive under their own terms and privacy policies, and Lalouli is not responsible for their practices.

C. Legal Obligations and Protection of Rights

We may disclose information when reasonably necessary to:

Comply with law, legal process, court orders, subpoenas, or lawful governmental requests;
Enforce our agreements or investigate potential violations;
Detect, prevent, or address fraud, security issues, or technical problems;
Protect Lalouli, users, or the public from harm, as permitted by law.

D. Business Transfers

If Lalouli is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale or transfer of some or all of its assets, or any related due diligence, personal information may be disclosed or transferred as part of the transaction, subject to applicable law.

E. Aggregated and De-Identified Data

We may share Statistical Information with Retail Partners, business partners, advertisers, researchers, and other third parties for any lawful purpose. Statistical Information is not personal information and is not governed by this policy. We take reasonable measures to ensure that de-identified data cannot be associated with an individual or household, we maintain and use de-identified data only in de-identified form, we will not attempt to re-identify de-identified data, and we contractually require any recipients of de-identified data to comply with these same obligations.

F. Offerings You Choose

If you choose to use an optional offering, such as concierge services, shipped products, events, gift memberships, or partner offers, we share the information needed to provide it (for example, a shipping address with a fulfillment provider or a gift recipient’s name and email address to deliver a gift membership) with the providers or partners involved.

7. DATA RETENTION AND DELETION

We retain personal information for as long as reasonably necessary for the purposes described in this policy, legal obligations, disputes, and enforcement. The periods below are general guidelines and may be extended where needed for these purposes.

A. Account Data

Account data is retained while the account is open and generally deleted within thirty (30) days after you close your account, except where we must retain it for legal, dispute, fraud, or security needs. It is then deleted or irreversibly de-identified.

B. Household, Planning, and User Content

Household preferences, Moments, plans, activity, and User Content (including Memory Bank photos) are retained while the account is open and generally deleted within thirty (30) days after you close your account. Backup copies may remain for a limited period for disaster recovery only.

C. Children’s Data

Information about your children is generally deleted within thirty (30) days after you close your account, and you may edit or delete any child’s details at any time in your account settings or by contacting us. We review children’s information at least annually for necessity, and information no longer needed is deleted or de-identified.

D. Automatically Collected Data

Device, IP, cookie, and usage data is retained for up to twenty-four (24) months, then deleted or de-identified.

E. Payment Data

Billing records are retained as required by tax and financial laws. Full payment card details remain with our payment processor.

8. DATA SECURITY

Lalouli maintains reasonable administrative, technical, and physical safeguards designed to protect personal information. We review and update safeguards based on identified risks and rely on service providers that maintain their own security safeguards. Our safeguards may include:

A. Administrative Safeguards

Role-based access controls limiting access to personnel who need it.
Annual review of security policies and procedures.
Onboarding and offboarding procedures with prompt access revocation.

B. Technical Safeguards

Data transmitted between users and Lalouli is encrypted using TLS.
Stored personal information is encrypted using industry-standard methods.
User accounts use secure authentication and hashed, salted passwords.
We log and periodically review access to personal information.

C. Incident Response

We will notify affected users and authorities as required by law, including if your data is involved in a security incident. We use commercially reasonable safeguards, but no transmission or storage method is completely secure. Protect your credentials and contact us if you suspect compromise.

9. YOUR RIGHTS AND CHOICES

Depending on your jurisdiction, you may exercise the rights below by contacting privacy@lalouli.com; requests about information you have provided about your children may be made by the Account Holder, as described in Section 4. Certain rights apply only to residents of jurisdictions whose laws provide them.

A. General Rights Available to All Users

Right of Access. You may see much of the personal information we hold about you in your account settings (currently labeled “Our family”), or request a copy from us, along with information about its sources, uses, and disclosures.
Right to Correction. You may request correction of inaccurate or incomplete personal information and update certain information in your account settings.
Right to Deletion. You may delete your account and your family’s information at any time, or request deletion of your personal information, subject to legal exceptions (such as payment records we must keep) as described in Section 7.
Right to Opt Out of Non-Essential Communications. You may turn off tips, new Moments, and offers at any time using the link in each email or in your settings, but you will still receive messages your plans need, such as receipts, renewal reminders, and security or policy communications.
Do Not Track. Some web browsers transmit “Do Not Track” signals. Because there is no common industry standard for these signals, the Service does not currently respond to them. We do, however, honor Global Privacy Control signals as described in Section 9.B.
Ad Tracking: You can turn off the Meta Pixel at any time with the button below or, if you have an account, in Our family. We also treat a Global Privacy Control signal from your browser as a request to turn it off.

B. Rights of California Residents Under the CCPA/CPRA

California residents may request access, deletion, or correction; opt out of sale or sharing for cross-context behavioral advertising; limit certain uses of sensitive personal information, where applicable; and receive equal service. Lalouli does not sell personal information for money. Our use of the Meta Pixel may be considered "sharing" for cross-context behavioral advertising. You may opt out at any time as described under "Ad Tracking" in Section 9.A, in your account settings, or by contacting us, and we honor Global Privacy Control signals as a valid opt out request. We use kitchen rules and holidays celebrated only to provide and personalize the Service and not to infer characteristics about you.

California residents may also request, once per year and free of charge, information about any disclosure of personal information to third parties for their own direct marketing purposes under California’s “Shine the Light” law (Cal. Civ. Code § 1798.83). Lalouli will not discriminate against you for exercising any of your privacy rights.

C. Residents of Other States

Residents of Colorado, Connecticut, Delaware, Oregon, Texas, Virginia, and other states with comprehensive privacy laws may have the right to confirm whether we process their personal data; access, correct, delete, or obtain a portable copy of it; and opt out of targeted advertising, the sale of personal data, and profiling in furtherance of decisions that produce legal or similarly significant effects. Lalouli does not engage in such profiling. You may opt out of targeted advertising as described under "Ad Tracking" in Section 9.A or in your account settings. Where required, we obtain consent before processing sensitive data.

D. How to Exercise Your Rights

Email privacy@lalouli.com with the subject line “Privacy Rights Request,” identify the right requested, and provide enough information to verify your identity. You may use an authorized agent to submit a request on your behalf, and we may require written proof of the agent’s authority and verification of your identity. We will respond within the time required by applicable law. If we decline to act on your request, you may appeal by emailing privacy@lalouli.com with the subject line “Privacy Rights Appeal.” We will respond to your appeal in writing within the time required by applicable law, and if your appeal is denied, you may contact your state attorney general.

10. THIRD-PARTY LINKS AND SERVICES

The Service may link to third-party websites or services that Lalouli does not control, including Retail Partners and streaming services suggested for your Moments. This policy does not apply once you leave the Service, and Lalouli is not responsible for third-party privacy or security practices. Review the third party’s privacy policy before providing information.

11. CHANGES TO THIS PRIVACY POLICY

We may update this policy to reflect changes in our practices, legal requirements, or the Service and will revise the Last Updated date. If we make material changes, we will notify you by email or through the Service and, where required by law, obtain your consent before applying them to personal information collected before the change. Continued use after the effective date constitutes acceptance; prior versions are available from privacy@lalouli.com.

12. CONTACT US

For privacy requests, including requests about your children’s information, email privacy@lalouli.com. For general support, email hello@lalouli.com. You may also write to us at Lalouli LLC, 5 Greenwich Office Park, Suite 100, Greenwich, CT 06831.