Privacy Policy
Effective: 2 May 2026
Lifebits is a private gift-leaving app. This policy explains exactly what we collect, why, and what you can do about it. We're a small team — what's written here is what we actually do.
What we collect
- Account identity. When you sign in with Apple, we receive a stable user identifier and (if you choose to share it) your name and email. We never get your real Apple ID password.
- Profile. The display name and avatar you set in the app.
- Location. The latitude/longitude of the drops you place. While the app is open, your current location is used to compute distances and unlock eligibility — we store the most recent coordinate so the server can decide when to notify you. We do not store a location history.
- Content you create. Photos, videos, audio recordings, and text you place as drops or reactions. These are readable only by you and the recipients you choose.
- Push token. An anonymous device token from Apple used to send you notifications. You can revoke this in iOS Settings at any time.
- Diagnostics. Anonymous error logs and product events (drop placed, drop unlocked, etc.) so we can fix bugs and understand which features are useful. We do not sell or share this data.
What we do NOT collect
- Contacts. The "suggest recent recipients" feature reads your contacts on-device to autocomplete names — those names never leave your phone.
- Browsing history, third-party tracker data, or device identifiers beyond the push token.
- Background location when the app is closed — only when you grant always-on permission specifically to receive geofence-based drop notifications.
Where it lives
All data is stored in our backend on Supabase (US region). Media files are encrypted at rest and accessible only via short-lived signed URLs. We have not shared, sold, or transferred user data to any third party.
How long we keep it
- Drops, claims, unlocks, reactions: until you or the sender delete them.
- Diagnostic logs: 30 days.
- Last-known location: overwritten on each update; we don't keep a history.
- Account: until you delete your account (see below).
Deleting your account
You can permanently delete your account and all associated data from inside the app: Profile → Delete account. This wipes your drops, claims, reactions, location, devices, and auth record. There is no soft-delete or recovery period.
If you can't access the app, email hello@lifebits.app from the address you signed up with and we'll do it manually within 7 days.
Children
Lifebits is not directed at children under 13. If we learn we've collected data from a child under 13, we delete it.
Changes
We'll update this page when our practices change. The "Effective" date at the top reflects the current version.