Privacy Policy

Last updated: August 28, 2026

Lisibl is a private memory space. This policy explains the data processed by the mobile app and web service, why it is used, the service providers involved, and the choices available to you.

1. Data we process

Account and profile: display name, email address, hashed password when applicable, account ID, optional social sign-in provider and account identifier, language, time zone, approximate country, and preferences.
Maps and family: names, birthdates, map type, family relationships, roles, invitations, and invited people’s email addresses.
Memories: photos, videos, voice recordings, notes, titles, dates, tags, reactions, replies, and precise or approximate places you choose to save.
Purchases: plan, purchase history, product and transaction identifiers, status, and renewal date. Lisibl does not receive payment card numbers.
Device and usage: platform, notification token if notifications are enabled and, only with your permission, limited usage events and technical errors scrubbed of emails and URLs.
Optional services: media selected from Google Photos, content sent to an AI feature, gift or sharing messages, and support requests.

2. Why we use it

Create and secure the account, display maps, and synchronize and back up memories.
Personalize ages, dates, language, locations, reminders, and requested suggestions.
Process subscriptions, purchases, restorations, gifts, and storage entitlements.
Send verification, invitations, receipts, security alerts, requested reminders, and notifications.
Enable private sharing configured by the user and answer support requests.
Measure use and diagnose errors only when optional analytics are allowed.

3. Legal bases

We process data needed to perform the requested service and manage the account. Security and abuse prevention rely on our legitimate interests. Accounting and regulatory obligations rely on law. Optional analytics, photo, microphone, camera, location, notification, and Google Photos access rely on your choice or permission when using the feature.

4. Service providers and recipients

Floot: application hosting, database, push delivery, and AI feature orchestration.
Cloudinary: storage, transformation, and delivery of photos, videos, and audio.
Mapbox: maps, tiles, place search, and geocoding.
Stripe: web payments and gifts; Apple App Store and Google Play: in-app purchases, subscriptions, and transaction validation.
Resend: transactional email; Google Photos: optional import of selected media.
Google and Apple: optional account authentication when you choose their sign-in button.
Anthropic and Google, through Floot AI: one-time processing of content supplied to the selected AI feature.

These providers process data to deliver their service. Lisibl does not sell data, show ads, share data with data brokers, or track users across apps or websites owned by other companies. Data is shared with a trusted person only when you initiate that sharing.

5. Artificial intelligence

AI features are optional. Only content needed for the request is sent to the selected model, such as one photo for a suggested caption or a year of notes for a generated story. Lisibl does not use your memories to train its own models and never runs these features in the background.

6. Retention and deletion

The account and memories are kept while the account is active, then deleted when you request account deletion in Settings.
Drafts, temporary links, and security tokens expire according to their functional lifetime or are removed when revoked.
Records required for fraud prevention, disputes, or accounting obligations may be retained or anonymized for the legally necessary period.
Residual technical copies disappear through service providers’ secure backup rotation cycles and are not restored to active use.

Account deletion cancels subscriptions billed directly by Stripe. An Apple App Store or Google Play subscription must be canceled separately in the Store: deleting the Lisibl account does not by itself stop Store billing. When a map has an accepted co-manager, it may be transferred to them instead of deleted.

7. Security and transfers

Data is sent over HTTPS/TLS, passwords are hashed, and access is role-controlled. Some providers may process data outside the European Economic Area; applicable contractual safeguards and transfer mechanisms are used. No online service can guarantee absolute security.

8. Children’s data

Lisibl is designed for parents and other responsible adults, not as a public service directed to children. The adult account holder provides and controls a child’s data. If child access is enabled, the child may view their map and use allowed features, such as a reply, under the account holder’s control. The parent can remove access and request deletion.

9. Your choices and rights

Export account data from Settings > Account.
Correct information, unlink Google or Apple, revoke a share, disconnect Google Photos, or disable notifications.
Allow or refuse optional analytics at any time in Settings > Privacy.
Delete a memory, a map, or the entire account.
Request access, correction, erasure, restriction, objection, or portability where provided by law.

View account deletion steps and privacy choices

10. Cookies and local storage

The service uses cookies or local storage strictly needed for sign-in, security, and preferences. Optional usage analytics remain off until accepted. Refusing analytics does not prevent you from using Lisibl.

11. Changes and contact

We will notify users of material changes to this policy. For any privacy question or request: privacy@lisibl.com or our contact page.

Contact Lisibl