Privacy Policy

1. Introduction

Welcome to Lyfestori (the "App"), owned and operated by Duck Pond Ventures (business ID 3509941-8, incorporated in Finland).

Duck Pond Ventures is the controller of your personal data where applicable laws (such as the EU/EEA General Data Protection Regulation – "GDPR") apply.

This Privacy Policy explains how we collect, use, store, and share your data when you use our App and related services. By using Lyfestori, you agree to the practices described in this Policy.

2. Data We Collect

2.1 Account Information

• The App can be used without creating an account. If you choose to sign in via Apple Sign-In or Google Sign-In, we may receive your email address and name (unless you choose to hide them via Apple). In some cases, Apple or Google may provide only a unique, anonymized identifier.
• We store your name and email address only if they are shared with us by Apple or Google, together with an internal user ID that we generate. This data is linked to your identity within our services.
• We do not collect any other personal information in the App. The App does not allow you to enter or edit a user profile.

2.2 Analytics and Usage Data

• We use Firebase Analytics (provided by Google) to gather information about how you use the App, such as which screens you visit, how often you use certain features, and general interaction events.
• For this purpose, we collect an internal user ID that we generate, a device identifier (such as the Firebase Installation ID), and technical data about your device and App usage (including device model, operating system version, App version, and general interaction events).
• Analytics and usage data may be associated with your internal user ID to help us understand how individual users interact with the App.
• We do not track you across other apps or websites.
• We do not use analytics data to build profiles for advertising or for targeted advertising outside of our App.

2.3 Subscription and Purchase Data

• We use RevenueCat to manage subscriptions and in-app purchases. RevenueCat may receive an identifier that we generate to track your subscription status and purchase history. This data is linked to your identity within our services.
• We do not directly store your payment information. Payments are handled by the app store on your device (such as Apple App Store or Google Play).

2.4 Crash and Diagnostic Data

• We use Firebase Crashlytics (provided by Google) to collect crash logs, performance data, and related diagnostic information.
• This may include device identifiers (such as the Firebase Installation ID), device model, operating system version, App version, crash traces, error logs, and performance metrics.
• Crash and diagnostic data may be associated with your internal user ID to help us identify and resolve issues affecting specific users.

2.5 Communication Data

• If you contact us by email or through other communication channels, we process the information you provide (such as your name, email address, and the content of your message) and our responses for the purpose of handling your request.

3. How We Use Your Data

We may use the information we collect for the following purposes:

• Service Delivery: To provide, operate, and maintain our App and its features, including account management, authentication, and subscription management.
• Analytics: To understand how users engage with our App, identify trends, troubleshoot issues, and improve user experience.
• Diagnostics: To detect, diagnose, and fix crashes, errors, and performance issues.
• Customer Support: To respond to your inquiries, address technical issues, and provide support services.
• Security and Abuse Prevention: To protect the App and our users from fraud, abuse, or misuse.
• Compliance: To comply with legal obligations, resolve disputes, and enforce our Terms of Service.

3A. Legal Basis for Processing (EEA/UK Users)

Where GDPR or similar laws apply, we process your personal data on the following legal bases:

• Performance of a contract: To provide the App and your subscription, and to manage your account.
• Legitimate interests: To maintain and improve the App, perform analytics, ensure security, and prevent abuse, in a way that does not override your rights and freedoms.
• Legal obligations: To comply with applicable laws, regulations, and legal processes.

4. Third-Party Service Providers

We use the following third-party services to operate the App. These providers only process your data on our behalf and according to our instructions.

For more information about how these providers handle data, please refer to their respective privacy policies:

• Google Privacy Policy: https://policies.google.com/privacy
• RevenueCat Privacy Policy: https://www.revenuecat.com/privacy

5. Data Sharing and Transfers

• We do not sell your personal data.
• We do not share your personal data with third parties for their own marketing or advertising purposes.
• We share limited data with the service providers listed in Section 4 solely to operate the App and deliver our services.
• If required by law, we may disclose certain data to law enforcement or other authorities when we are legally obliged to do so.

We do not use third-party advertising networks or social media trackers in the App. We do not track you across other apps or websites.

6. Data Storage and Security

• We store user data (including email addresses, if provided, and internal user IDs) in a secure cloud database provided by a third-party hosting provider.
• We take reasonable measures to protect your data using industry-standard security practices, such as encryption in transit (HTTPS), access controls, and secure password handling where applicable.
• No method of electronic storage or transmission is completely secure, but we continuously work to protect your data and regularly review our security procedures.

7. Data Retention and Deletion

• We keep your account-related data for as long as your account is active and as long as we have a legitimate reason to retain it (for example, to comply with legal obligations, maintain accurate records, or resolve disputes).
• When you request deletion of your account, we will delete or irreversibly anonymize your personal information within a reasonable time, unless we are legally required to keep certain information for longer. We will also request deletion of your data from our third-party service providers where applicable.

You can request deletion of your account and associated data in either of the following ways:

• Using the account deletion option available within the App; or
• Contacting us at support@lyfestori.com.

8. Your Rights (GDPR and Other Jurisdictions)

Depending on your location and applicable law, you may have the right to:

• Access: Request details about the personal data we hold about you.
• Rectify: Correct inaccurate or incomplete personal data.
• Erase: Request the deletion of your personal data.
• Restrict or Object to Processing: In certain situations, ask us to limit or stop our use of your data.
• Data Portability: Request a copy of your data in a structured, commonly used, machine-readable format where technically feasible.
• Lodge a Complaint: File a complaint with a supervisory authority. In Finland, this is the Office of the Data Protection Ombudsman (tietosuoja.fi).

You can also initiate deletion of your account directly from within the App.

To exercise any of these rights, or if you have questions about them, contact us at support@lyfestori.com. We will respond in accordance with applicable laws.

9. Children's Privacy

Our services are not intended for individuals under the age of 13 (or 16 in certain jurisdictions). We do not knowingly collect personal information from children.

If you believe that a child under the relevant age has provided us with personal data, please contact us at support@lyfestori.com, and we will promptly review the situation and delete the information if required.

10. International Data Transfers

Because we are located in Finland and use third-party service providers that may have servers worldwide (including in the United States), your information may be transferred to and stored on servers in other countries.

Where such transfers occur, we take appropriate measures to ensure that they comply with applicable data protection laws and that your information remains protected to standards comparable to those under GDPR.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will post the new policy here and update the "Effective Date" at the top. We encourage you to review this Policy periodically to stay informed about how we handle your data.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Email: support@lyfestori.com
Website: https://lyfestori.com/
Company: Duck Pond Ventures (business ID 3509941-8, Finland)