Privacy Policy

The short version

Your photos, videos and journal entries never leave your device. We cannot see them, we do not store them, and there is no account to sign into that would let anyone else reach them.

What we do collect is small and named in full below: anonymous usage statistics, a record of your subscription, and — if you used one — an invite or creator code. Nothing on this page is sold, and none of it is used for advertising.

If you are under 18

This bit is written plainly, because the rest of the page is written for grown-ups and you should not have to wade through it to find out what happens to your stuff.

• Your photos, videos and writing stay on your phone. We never see them. Nobody else using the app can see them either — there is no way to follow anyone or be followed.
• The app knows your birthday because you type it in. It uses it to show your age on the calendar, and to work out whether you are old enough to agree to the next thing on this list.
• We count how the app gets used — which screens people open, that sort of thing. If you are under 13, we do not do this for you at all, even if you tap yes. In the rest of Europe the age is 13 to 16 depending on the country.
• The map only knows where you are while you are looking at it, and only roughly. It is off until you allow it, and you can take that back in your phone's settings whenever you want.
• You can delete everything. Settings, then My Data, then Delete All My Data. It removes what is on your phone, what is in your iCloud backup, and the small amount we hold. It cannot be undone, which is the point.

If any of that is confusing, or you want something removed and it is not working, write to support@lifetabsapp.com and a person will read it. You are allowed to ask a parent or carer to write for you.

Who we are

Quiet Summer LLC ("we", "our", "us") makes the Life Tabs mobile app (the "App") and is the data controller for the information described here. You can reach us at support@lifetabsapp.com.

The person responsible for the protection of personal information at Quiet Summer LLC is its Director, who can be reached at the address above. Write to that address for anything on this page — a privacy question, a request about your data, or a complaint — and it reaches them.

The App is not yet offered on the App Store in the European Economic Area or the United Kingdom. When it is, we will appoint representatives there under Article 27 of the GDPR and list their postal addresses here.

What stays on your device

The following is stored only on your phone and in your own iCloud backup. We have no access to any of it:

• Your photos and videos, and the thumbnails made from them
• Your journal entries, descriptions and activity labels
• Your birthday, your display name, and your notification settings
• The place names shown on your entries

If you turn on iCloud backup, a copy goes to your iCloud account, in a container only this app can read. It is your storage and your Apple account — we cannot open it, and deleting your data in the App deletes that copy too.

Auto-Fill reads your photo library, with your permission, to fill in days you have not logged. It runs entirely on your device: it looks at the dates and the coordinates your photos already carry, copies the ones it uses into the App, and sends nothing anywhere. You can refuse or withdraw photo access at any time in your device settings, and you can undo an import from within the App.

What we collect

Usage analytics

We use Amplitude to understand which parts of the App are used, so we know what to improve. In the EEA, the UK and Switzerland we ask before any of this is collected, and nothing is sent unless you agree. Everywhere else it is on by default and you can switch it off at any time in Settings under Privacy.

What is sent:

• Which screens you open and which features you use, with the time they happened
• Your age as a number, worked out from your birthday. Your actual birthday is never sent
• Your answers to the onboarding questions asked when you first set up the App — how you found it and why you downloaded it
• Whether you turned notifications on, and the reminder time you picked
• Whether you arrived through an invite code, and which pricing group you were shown
• Collected automatically by Amplitude: a random device identifier, your device model, operating system and app version, your language, and an approximate location (typically country and city) worked out from your IP address

There is no account, so none of this is attached to your name or email. It is not used for advertising and is not combined with data from other apps or websites.

Subscriptions and purchases

Purchases are made through Apple, which is the seller. We never see your payment details. We use RevenueCat to keep track of whether a subscription is active, which involves a randomly generated customer identifier, your subscription status and plan, Apple's transaction identifiers, and the country of your App Store account. We also tag that record with which pricing group your install was assigned to when you first opened the App — a label we generate at random to compare prices, not anything about you.

Invite and creator codes

If you share an invite code, enter someone else's, or redeem a creator code, our own server (running on Cloudflare) stores the code, the same random customer identifier described above, and — where a referral has to be counted — Apple's transaction identifier for the subscription. When someone opens an invite link we record that it was opened and which country it was opened from.

Apple's transaction identifier is kept, in a form no longer linked to you, even after you delete your data. It is what stops the same Apple account claiming the same free trial repeatedly, and there is no way to prevent that abuse without it.

Location

If you allow it, the App uses your location for three things: showing where you are on the map, showing the place you are currently exploring, and matching the App's background to sunrise and sunset where you are.

This is not what puts a place on your entries. Those come from the photos' own coordinates, which are already on your device. Your live location is not sent to us and is not stored on our servers. Turning place names into text is done by Apple's geolocation service on your device, and map tiles and place searches are requested from Mapbox, which necessarily reveals to them roughly what part of the world you are looking at. We have turned Mapbox's own analytics off.

You can refuse or withdraw location access at any time in your device settings. The App keeps working; the map and the time-of-day backgrounds simply fall back.

When you contact us

If you email support we keep the email so we can answer it. Support mail is routed through Cloudflare to a Google Workspace inbox.

Why we are allowed to do this

If you are in the EEA or the UK, our legal bases under the GDPR are:

• Consent — for usage analytics and for location. You can withdraw either at any time, and doing so is as easy as giving it
• Performance of a contract — for subscriptions, and for making invite and creator codes work
• Legitimate interests — for keeping the referral programme from being abused, and for keeping our servers up and secure. We use the least data that achieves this
• Legal obligation — for records we are required to keep, such as those relating to tax

Who else receives data

We do not sell personal information and we do not share it for advertising. The companies that process data on our behalf are:

• Amplitude — usage analytics
• RevenueCat — subscription status
• Cloudflare — our invite-code server, our website and our support email routing
• Mapbox — map tiles and place search
• Apple — payments, app distribution, and on-device geolocation. Apple is the seller of any subscription and handles its own data under its own privacy policy
• Google — the inbox that receives support email

Each of these is bound by a data processing agreement. We may also disclose information where the law requires it, or to protect the rights and safety of our users, and we would tell you unless we were legally prevented from doing so.

Where your data goes

We are based in the United States and our service providers are largely American, so information described on this page is transferred to and processed in the US. Where that data comes from the EEA or the UK, those transfers rely on the European Commission's Standard Contractual Clauses, or the UK Addendum, in the agreements we hold with each provider.

How long we keep it

• Usage analytics — kept while the App is in use and deleted on request
• Invite and referral records — kept while the programme runs. On deletion the identifiers are stripped, leaving rows that no longer describe a person
• Purchase records — the subscription record we hold through RevenueCat is deleted when you delete your data. Apple keeps its own record of the sale for as long as tax and accounting law requires, typically seven years; that copy is Apple's, not ours, and we cannot delete it
• Support email — kept for two years after the conversation ends
• Everything on your device — kept until you delete it, which you can do at any time without asking us

Your rights

Depending on where you live you have the right to access your data, correct it, delete it, take a copy of it elsewhere, object to or restrict how we use it, and withdraw consent. We will never treat you differently for exercising any of them.

The fastest way to delete everything is inside the App: Settings → My Data → Manage My Data → Delete All My Data. It erases your entries and media, your iCloud backup, the records our server holds and your subscription record at RevenueCat, and it asks Amplitude to delete your usage history — no email, no waiting on us. Amplitude processes deletion requests within 30 days.

Two honest limits on that. Deleting your subscription record does not cancel a subscription: the purchase belongs to your Apple account, and if you keep using the App a new record is built from Apple's receipt the next time it checks — so you keep what you paid for, and the deletion sticks for good only once you stop using the App. And one line in our invite records survives, stripped of anything that points at you: it is what stops the same Apple account being counted as three different referred friends.

To exercise any right by hand, or to complain, email support@lifetabsapp.com. If you are in the EEA or the UK you also have the right to complain to your national data protection authority.

Children

Life Tabs is not intended for children under 13, and we do not knowingly collect personal information from them. In some countries — India among them — the law treats anyone under 18 as a child and requires a parent's consent. If you are under the age your country sets, please ask a parent or guardian before using the App.

Where the law requires it, the App asks Apple which age group you fall into. Apple decides whether the question applies to your account, so most people are never asked at all. Apple does the checking — against its own records, an ID, or a guardian's confirmation — and tells us only which side of 13 and 18 you are on. We never see your date of birth, your age, or any document, and nothing about the answer is stored on our servers.

If that check says you are under 18, or if it is required and comes back with no answer, we stop collecting usage analytics about you and we delete what we had already collected — your usage history at Amplitude, and your rows in our invite records. You keep the App, everything you have written in it, and any subscription you are paying for. Nothing on your phone is touched.

The birthday you type into the App during setup is a separate thing entirely. It is your own answer rather than a verified one, it exists to show your age on the calendar, and it is not what any of the above is based on.

If you believe a child has provided us with personal information, email us and we will delete it.

Security

The design does most of the work here: the material people care about most — their photos and their writing — never reaches us, so it cannot be taken from us. What we do hold is encrypted in transit and at rest, kept to the minimum described above, and reachable only by us. No system is perfectly secure, and we would notify you and the relevant authority if a breach affecting you occurred.

Changes to this policy

If we change how we handle your data we will update this page and the date at the top. Where a change is significant we will tell you in the App rather than expecting you to notice, and where the law requires fresh consent we will ask for it again.

Contact

Quiet Summer LLC
Email: support@lifetabsapp.com