Authentication and local storage
Ulmio stores authentication session information in browser storage to maintain sign-in. Child login uses a browser-stored session credential and remembered family code. Sign-out removes or invalidates access as implemented; server-side session expiry still applies. Do not share a device while signed in without considering saved access.
Preferences and practice content
The browser can retain theme preference, selected practice profile and local demo conversations until cleared. These are not an approved parental-consent record. Printing uses a temporary local frame; it is not an embedded advertising service.
Visitor analytics
Lovable provides analytics for the published site. Its analytics uses no cookies, stores nothing on the visitor’s device, does not keep IP addresses and does not identify visitors.
It records pages visited, referral sources, country, browser, operating system, device type, time on page, page-load performance, errors and clicks on buttons and links. Clicks are identified by location, not their text. No additional custom product events were identified; application error reporting is included in errors.
There is currently no analytics consent banner. Clicks and the other listed analytics are recorded for every visitor. Page visits, time on page, page speed and errors are recorded without cookies and without identifying anyone. The editor preview is not counted. Detailed data is kept for 90 days; daily summaries for one year.
Lovable’s role
Lovable collects this data for us. Lovable’s privacy policy explains how it handles it. These statements do not mean Ulmio’s accounts and other services store nothing.
Lovable’s privacy policyOther services
Google Fonts receives font requests, including ordinary network request information. Google sign-in can involve Google storage and identity processing when selected. Lovable Cloud handles application sign-in and data. The audit identified no installed advertising pixel or marketing embed. No advertising or child behavioral-profiling provider was added.
Choices and unfinished controls
There is no optional-tracking preference banner currently connected to Google Consent Mode. No new tracker or consent mechanism is introduced by this draft. Browser storage can be cleared, which may sign you out or remove local practice content. A jurisdiction-specific review is needed before public family launch.
Company roles and responsible entity
Ulmio — Powered by UltriumAI. Ulmio is owned and operated by UltriumAI LLC. Hosting and operations: UltriumAI LLC. UltriumAI LLC is legally separate from Ultrium LLC; no division, brand, DBA or subsidiary relationship is asserted.
Owner-confirmed legal identity: UltriumAI LLC, Virginia Limited Liability Company, United States. Virginia Entity ID: 11865834. Updated business principal office and public operator mailing address, approved by the owner for these drafts: 9413 Hull Street Rd, Ste C2, North Chesterfield, VA 23236-1246, United States. Legal sufficiency for the intended disclosures remains subject to review; owner approval is not a regulatory determination. Public support email, privacy email and telephone remain pending. A postal address does not replace required email and telephone disclosures. Required contact disclosures and consent arrangements must be completed and reviewed before affected policies can become effective; the Children's Privacy Notice remains a draft and public-launch blocker.
Future subscription contracting company and payment recipient: UltriumAI LLC. Intended payment processor: Stripe. No new payment service is activated. External AI processors and infrastructure services are distinct from the legal operator and merchant. Policies remain drafts pending legally sufficient contact information, consent arrangements and legal review.