This policy applies to the Lullashelf iPhone and iPad app. It is separate from the Website Privacy Policy, which covers the website's accounts, AI book creation, Stripe payment, newsletter and organisation management pages.
Four & More Limited, NZBN 9429053619358, New Zealand, operates Lullashelf and is responsible for the personal information described in this policy. The app is distributed on the App Store through Luke Paul Furborough's individual Apple Developer account on behalf of Four & More Limited. Privacy enquiries can be sent to fourandmorenz@gmail.com with the subject "Privacy Request".
1. App summary
- Personal books you create or import in the app are stored on your device or in your own iCloud storage when iCloud is available.
- The app can use Photos, Files, the clipboard and the microphone only through the app features you choose.
- You can share a book file through destinations you choose, such as Messages or Mail.
- Optional app sign-in uses Apple or Google authentication with Firebase, and may maintain an app profile and legal acceptance record.
- In-app purchases are processed by Apple through StoreKit.
- If you join an organisation Private Library, the app communicates with Lullashelf's protected library service to list and download books available to that membership.
- A rating you submit for a Lulla Library book is sent to Lullashelf and added to that book's aggregate rating.
The app has no third-party advertising and does not use data for cross-app tracking.
2. Information the app handles
Personal shelf and reading data
Books may include a title, description, creator name, page images, page text, page order, cover selection, reader names, narration audio, favourites, reading progress and library organisation. Personal shelf content is stored locally on your device or in your own iCloud storage when available. Lulla Library searches, filters, recommendation preferences, downloaded-book history and your copy of a rating are also stored locally.
Device permissions and files
The app may access photos or files you select for import, book files you open in the app, clipboard items when you choose a paste action, and microphone audio only when you choose to record narration. The app does not request precise-location, Contacts, Health or Fitness access.
Optional sign-in and acceptance
If you choose app sign-in, Firebase may process a user identifier, display name, email address, sign-in provider, app profile information and records of legal acceptance. Google Sign-In's current privacy manifest also identifies phone number, coarse location, device identifier, usage data and other data that Google may process for sign-in functionality or analytics. Coarse location may be inferred without the app requesting iOS location permission. Firebase Auth and Firestore may process non-linked diagnostic data.
Private Library membership
If you enter a Private Library join code, Lullashelf processes the member name and code you enter, a library and member identifier, membership status, join/access times, and the metadata and access requests needed to list and deliver authorised books. Membership credentials are also stored in the device Keychain. Downloaded copies then become part of your personal shelf.
Organisation account-holder uploads are website services governed by the Website Privacy Policy, not uploads made by this app.
Ratings, purchases and support
When you rate a Lulla Library book, Lullashelf stores the book identifier, rating and aggregate statistics without attaching your app account identifier. Service infrastructure may temporarily process IP address and request information for security, rate limiting and operational logs.
Apple processes App Store payments. The app receives StoreKit transaction and entitlement information on the device to unlock or restore eligible features; Four & More Limited does not receive your full payment-card number. If you contact support, we receive the information you choose to send.
3. How information is used
- to create, save, display, read, record, import, export and share the books you choose to use in the app
- to provide optional app sign-in, profile management and account deletion
- to record acceptance of app legal documents where that flow is used
- to provide membership access to an organisation Private Library
- to calculate aggregate Lulla Library ratings
- to confirm and restore app entitlements through StoreKit
- to provide support, protect service security, comply with legal obligations and respond to privacy requests
Lullashelf does not operate a public social feed or advertising network in the app, does not sell your personal storybook content, and does not submit personal shelf books for AI generation merely because they are stored or read in the app.
4. Disclosure and service providers
Relevant information may be processed by Apple for iOS, iCloud, App Store, StoreKit, Sign in with Apple and user-selected sharing; Google and Firebase for optional sign-in, Firebase Authentication, Firestore and associated diagnostics; Vercel, Cloudflare and other protected hosting or delivery infrastructure for Private Libraries and Lulla Library services; recipients you select when sharing; and support or email providers when you contact us.
Providers may process information outside New Zealand. Four & More Limited takes reasonable steps required under New Zealand privacy law for overseas disclosures where it controls the disclosure.
When you share a .lullashelfbook file, it may include book images, words, metadata, reader names and recorded narration. The recipient controls what happens to a copy after you share it.
5. Children and family use
Lullashelf is made for family story reading and may contain material about or for children. A parent, guardian or responsible adult should supervise use where appropriate. Do not add, record, import, download or share a child's image, voice, name or personal information unless you have authority to do so.
Where Four & More Limited receives personal information about another person from a sender, family member or organisation, it will take the notification and other steps required by applicable New Zealand privacy law unless an exception applies.
6. Retention, deletion and control
- Personal shelf content remains on your device or in your own iCloud storage until you delete it or change those storage settings.
- Deleting a downloaded local copy of a Private Library book does not necessarily delete the organisation's protected source copy.
- Private Library membership data is kept while access remains active and until removed by you, the organisation or Lullashelf, subject to limited security, backup or legal retention.
- Aggregate ratings may remain after a device removes its local rating because they are not linked to an app account.
- Purchase records are also subject to Apple's StoreKit and App Store record handling.
The Profile screen can delete a signed-in Firebase Authentication account, Firestore profile, legal-acceptance records and hosted membership records when deletion completes. It also clears Private Library credentials held by the app. Local or iCloud books are not deleted by account deletion. A recent sign-in may be required.
Email support to request access, correction, deletion assistance, withdrawal of consent where applicable, or to complain. We may need to verify your identity or authority, and may retain information where law permits or requires it.
7. Security, updates and contact
We use reasonable measures appropriate to app account and protected Private Library functions. Protect your device, Apple ID, sign-in account and any Private Library access code. No storage or transmission method is completely secure. We assess privacy incidents and notify the New Zealand Privacy Commissioner and affected people where required by law.
We may update this App Privacy Policy when the app, app providers or applicable requirements change. App Store privacy disclosures should be read with this policy and updated when app data handling changes.
Four & More Limited
NZBN 9429053619358
New Zealand
fourandmorenz@gmail.com
New Zealand users may contact the Office of the Privacy Commissioner if a privacy concern is not resolved.