Privacy Policy

Effective 5 November 2026 · Last updated 5 November 2026

1. Who we are

Lavendell (拉文戴尔) is developed and run by Anzhi Lu, an individual developer based in Beijing, China. "LifeLullaby" is a brand name we use. It is not a registered company.

In this policy, "we", "us" and "our" mean Anzhi Lu. Under data protection law, we are the controller of the personal data described here (the "personal information handler" under China's Personal Information Protection Law).

Contact: lawlietlu@outlook.com

This policy covers the Lavendell iPhone app and this website.

2. What stays on your iPhone

The app keeps the following on your iPhone, in its own storage:

• Sign in with Apple. Apple confirms the sign-in and gives the app an identifier for your Apple Account that is used only for Lavendell, plus a short-lived sign-in token. The app doesn't ask Apple for your name or email address, so it doesn't receive them. The app doesn't read or keep the token. It saves only the identifier, to keep you signed in and to check with Apple whether you have stopped using Sign in with Apple for Lavendell.
• Your profile. The name you choose (1–12 characters), your gender (male, female or private), and an 8-digit UID that the app picks at random.
• Your studying. Each focus session (start and end time, minutes, whether you completed it or ended it early, the course, the entry and the tag), your course progress and magic book, your medals, your focus settings and the tags you create.
• Your character. The look you save in the wardrobe, and a picture of your character's face made from it, which is your avatar.
• Settings. Reminders and the reminder time, graphics level, sound on or off, and "Help Improve".

In this version, these records stay on your iPhone and are never uploaded as a whole. But the usage events in section 3 include some of the same details (the course, stage and entry, minutes, and whether a session was completed or interrupted), without your name, UID or tag names. Your data doesn't sync between devices. If you back up your iPhone to iCloud or a computer, the backup may include it; Apple's terms cover those backups.

Signing out leaves this data on your iPhone. Deleting your account erases it (section 8).

To use the app you need Sign in with Apple and a name (gender is optional). They stay on your iPhone. Once you sign in, the App Store and TestFlight versions send the usage events in section 3 (you can turn this off in Settings). You don't have to give us anything else.

3. Usage analytics

The App Store and TestFlight versions of Lavendell send usage events to PostHog, an analytics service run by PostHog, Inc. in the USA. They send them only while an account is signed in on this iPhone and "Help Improve" is on: nothing is sent before you sign in with Apple (signing in means you agree to the Terms of Use and this policy), and sending stops when you sign out or delete your account, until you sign in again. We use them to understand which parts of the app people use, where they get stuck and whether membership works, so we can fix and improve Lavendell.

What is sent

• Events:
  • app installed, updated, opened and moved to the background;
  • enrolment completed, and whether this iPhone already had study records;
  • study started: course, stage, entry, entry level and whether you have mastered the entry, whether it's a member course, and where you started it from;
  • focus started, completed or interrupted: course and entry, planned and actual minutes, timer type, strictness, your break settings (short and long break lengths, and how often a long break comes), how the session began, and which of the three default tags or a tag you made it used (never the tag's name); for a completed session also your progress level before and after it, and your streak length (days in a row);
  • stage unlocked: course and stage;
  • membership page shown: what opened it, which benefit it pointed to, whether a free trial was offered, and whether the App Store could be reached;
  • purchase started, completed or failed: plan, what opened the membership page, whether it's a free trial, and for a failure whether it was cancelled, is pending or failed;
  • purchases restored, and whether you are a member afterwards;
  • member features used: viewing the week, month or year or earlier periods in the statistics, and saving a look in the wardrobe (not the look itself);
  • signed out (by you, or because Sign in with Apple was stopped); account deleted.
• Device and app details added by the PostHog software, for example: device type, model and maker, a generic device name (such as "iPhone"), iOS version, the app's name, bundle ID, version and build, whether it's a TestFlight build, a simulator or installed outside the App Store, language and region settings, time zone, screen size, network type (Wi-Fi or mobile data) and the version of that software.
• Added by us to every event: your App Store country or region, the app's language, whether you are a member and your plan (free trial, yearly, monthly or lifetime), and the build type.
• Random IDs: an analytics ID and a device ID that the PostHog software creates at random on your iPhone (the first time sending starts), and a session ID. The analytics ID is sent with every event. The device ID is not in the events, but after you sign out or delete your account (or, if "Help Improve" was off then, the next time sending starts) the PostHog software sends it to PostHog once together with the new analytics ID (for that software's feature flags, which we don't use). Signing out and deleting your account don't change it; it only changes when you reinstall the app.

What is not sent

Your Apple Account identifier, your name, UID or gender, your tag names, or anything else you type. We don't link the analytics ID to who you are.

We have set PostHog to discard IP addresses and not to look up your location. There is no screen recording (session replay) and no automatic capture of your taps. We don't use the advertising identifier (IDFA), we don't track you across other companies' apps or websites, and we don't sell your data or share it for advertising.

How long

Event data is kept for at most 12 months, then deleted.

Your choices

You have the right to object to the usage analytics. You can:

• Turn off the switch in Dormitory › Settings › Help Improve in the app. The app stops sending at once; a few events recorded just before (from about the last half minute) may still be waiting to go out and be sent. The switch is on by default and belongs to this iPhone: signing out and deleting your account don't change it, and while it's off the app doesn't start the analytics at all when you open it, until you turn it on again.
• Sign out or delete your account. The app sends that one event ("signed out" or "account deleted") and then stops sending until you sign in again; events after the next sign-in use a new analytics ID, and we don't link the new ID to the old one. The device ID is not reset (see above), so this doesn't mean PostHog could never connect them; only reinstalling the app replaces the device ID.
• Email us to object or to ask questions. But the analytics ID isn't linked to you and the app doesn't show it, so we can't pick out events you have already sent to delete them. Events already sent are deleted automatically within 12 months.

4. Purchases

Apple sells and bills memberships through your Apple Account. We never see your card or payment details. On your iPhone, Apple's StoreKit tells the app which membership you have and the status of your transactions, so the app can unlock membership. Apple also gives us sales reports, which don't include your name or contact details. What Apple collects is covered by Apple's Privacy Policy.

5. Permissions and sensors

• Notifications. Asked for only when you turn on Daily reminder in Settings. The reminder is set on your iPhone; it doesn't come from a server. You can turn it off in the app or in iPhone Settings.
• Motion sensors. While a scene is on screen, the app reads how your iPhone is tilted, to move the view slightly. This is used only on your iPhone, in real time. It is never stored or sent.
• Screen Time. This version doesn't use it. If a later version offers stricter focus modes that lock other apps during a session, iOS will ask your permission first. iOS then gives the app the apps you pick as tokens that don't show which apps they are, and the app keeps these tokens only on your iPhone. We can't see which apps you have or use, and this data doesn't leave your iPhone.

The app doesn't use your location, contacts, photos, camera or microphone.

6. Emails and Apple's reports

• If you email us, we get your email address and what you write. We use it only to answer you and fix problems. Our mailbox is hosted by Microsoft (Outlook.com).
• Apple's reports. If you have chosen in iOS to share analytics with app developers, Apple may give us crash reports and usage statistics. Apple also gives us App Store statistics. These don't tell us who you are.
• TestFlight. If you test Lavendell through TestFlight, Apple shares with us the name and email address we invited you with (if we invited you by email), install and usage counts for each build, and the feedback, screenshots and crash reports you send through TestFlight, with details of your device such as its model and iOS version. We use them only to fix and improve Lavendell.

7. Who receives data

• Apple: Sign in with Apple, the App Store, TestFlight and payments. Apple acts on its own behalf, under its own privacy policy.
• PostHog, Inc.: usage analytics, on our behalf. 2261 Market Street #4008, San Francisco, CA 94114, USA · privacy@posthog.com. PostHog uses the data only to provide its service to us, under its data processing terms, which require it to protect the data at least as well as this policy does. It may use its own service providers, such as cloud hosting.
• Microsoft: hosts our email.
• GitHub: hosts this website (section 15).

We don't sell personal data and we don't share it for advertising. We don't give it to anyone else unless the law requires it (for example, a valid order from a court or an authority) or it's needed to protect someone's safety.

8. Deleting your account

In the app, go to Dormitory › Settings (top right) › Delete account and tap Delete.

This erases from your iPhone at once: your account, name, gender, UID, avatar and character look, course progress and magic book, focus records and statistics, medals, focus settings and tags, friends list, reminders and other account settings. The sound switch, the graphics level and "Help Improve" stay, because they belong to the phone. If "Help Improve" is on, the app first sends an "account deleted" event and then stops sending usage analytics until you sign in again; the analytics ID is reset (the device ID only changes when you reinstall the app, see section 3). In this version there is no server copy to delete.

• Deleting your account doesn't cancel a subscription. Cancel it in iPhone Settings › your name (Apple Account) › Subscriptions. Purchases stay with your Apple Account and can be restored.
• To also stop using Sign in with Apple for Lavendell, open iPhone Settings, tap your name, and find Lavendell in the Sign in with Apple list.
• Uninstalling the app also removes its data from your iPhone. Older iCloud or computer backups may still contain it until they are replaced.
• Usage events already sent are deleted within 12 months (section 3).

9. How long we keep data

• On your iPhone: until you delete your account or uninstall the app.
• Usage events at PostHog: up to 12 months.
• Emails: as long as we need them to help you, and no longer than 12 months after the conversation ends, unless we need them to deal with a legal claim.
• Purchase records: kept by Apple under its own policy.

10. Your rights

Wherever you live, you can ask us to tell you what personal data we have about you and how we use it, give you a copy (or send it to another service, where the law gives you that right), correct it, delete it, or stop using it. You can object to the analytics (turn it off in Dormitory › Settings › Help Improve, section 3), and withdraw any consent you have given. If a user has died, their close relatives may use some of these rights where the law allows.

Most of your data is only on your iPhone, so you can see, change and delete it yourself in the app.

To make a request, email lawlietlu@outlook.com. It's free. We'll reply within 30 days, and we may ask for information to confirm the request is yours. Because we don't keep your account on a server, there may be no data of yours that we can find. If so, we'll tell you.

You can also complain to a data protection authority: in mainland China, the cyberspace administration or another authority in charge of personal information protection; in the UK, the Information Commissioner's Office (ICO); in the EU, Norway, Iceland or Liechtenstein, the authority where you live (list of authorities); in Switzerland, the Federal Data Protection and Information Commissioner (FDPIC).

11. Legal bases (EEA, UK and Switzerland)

• Providing the app, your account and purchases: to perform our contract with you (the Terms of Use).
• Usage analytics: our legitimate interests in understanding how Lavendell is used and making it better. We keep it limited (no IP addresses, no link to who you are, 12 months at most), and you can object (section 3 and section 10).
• Answering emails: our legitimate interests in helping you, or our contract with you when it's about your membership.
• When the law requires us to keep or disclose data: our legal obligations.

12. International transfers

We are based in China. PostHog stores usage events in the USA. Apple and Microsoft may handle data in many countries. Emails you send us are read in China.

EEA, UK and Switzerland: PostHog, Inc. is certified under the EU-U.S. Data Privacy Framework, its UK Extension, and the Swiss-U.S. Data Privacy Framework.

For users in mainland China

The usage events in section 3 go from your iPhone directly to PostHog's servers in the USA. This is a transfer of personal information outside mainland China. These are the details:

Overseas recipient

PostHog, Inc.

Contact

2261 Market Street #4008, San Francisco, CA 94114, USA · privacy@posthog.com

Purpose

Usage analytics, to fix and improve Lavendell

How

On our behalf, PostHog stores and aggregates the events on its servers in the USA. The app sends them over an encrypted (HTTPS) connection.

What

The events, device and app details, and random IDs listed in section 3

How long

Up to 12 months

When it's sent

Only after you sign in, and only while "Help Improve" is on; it stops when you sign out or delete your account, until you sign in again

To stop it

Turn off Dormitory › Settings › Help Improve; it takes effect at once

Your rights

Contact us and we'll handle it with PostHog, or contact PostHog at privacy@posthog.com

13. Children

Lavendell is not directed at children under 13 (under 14 in mainland China), and we don't knowingly collect their personal information. If you're a parent and think your child has used Lavendell, you can delete the account in the app, or email us.

14. Security

Data on your iPhone is protected by iOS, including your passcode and device encryption. Usage events are sent over encrypted connections. No system is perfectly secure. If a data breach affects you, we'll tell you and the authorities as the law requires.

15. This website

This website uses no cookies, no analytics, and no outside fonts or scripts. It is hosted on GitHub Pages. GitHub may log visitors' IP addresses for security, under GitHub's privacy statement.

16. Changes to this policy

Online features we plan, such as friends and the list of who's studying now, will need a server. Before any of them starts, we'll update this policy and tell you in the app.

If Lavendell is ever run by a company instead of Anzhi Lu, we'll tell you in advance, with the new operator's name and contact details.

For other changes, we'll update the date at the top. For important changes, we'll also tell you in the app.

17. Languages

This policy is in English and Chinese, and both say the same thing. If they ever differ, the English version applies, except where consumer protection law lets you rely on the version in your own language.

18. Contact

Anzhi Lu, Beijing, China · lawlietlu@outlook.com