Privacy Notice

This Privacy Notice explains how Sean Cousins (a sole trader based in the United Kingdom, trading as "LifePins") collects, uses, shares and protects your personal data when you use the LifePins website and application (the "Service"). Sean Cousins is the data controller for personal data processed through the Service.

You can contact us at hello@lifepins.app.

1. Personal data we collect

• Account data — your name, email address, password hash, and authentication identifiers (e.g. Google sign-in ID).
• Family and content data — family group membership, pins, photos, captions, dates, and locations you choose to add.
• Support data — messages you send us and the metadata of those messages.
• Usage and device data — log data, IP address, browser type, device identifiers, pages visited, and timestamps, used for security and to improve the Service.
• Cookies — strictly necessary cookies for sign-in and session management.

Payment card details are collected directly by our payment provider, Paddle, and are not received or stored by us.

2. Purposes and legal bases

• Provide the Service (creating accounts, storing your pins and photos, syncing across family members) — performance of our contract with you.
• Security and fraud prevention (rate limiting, abuse detection, log retention) — legitimate interests in keeping the Service safe.
• Customer support — performance of our contract and legitimate interests in responding to you.
• Product improvement (aggregated usage analysis) — legitimate interests in improving LifePins.
• Legal compliance (responding to lawful requests, tax records) — legal obligation.
• Marketing emails, if any, are sent only with your consent and you can unsubscribe at any time.

3. Who we share data with

• Hosting and infrastructure providers who host the application, database and file storage on our behalf.
• Paddle.com Market Ltd, our Merchant of Record, for processing payments, managing subscriptions, calculating and remitting sales tax, and issuing invoices.
• Email delivery providers for transactional emails such as account, billing and limit notifications.
• Professional advisers (legal, accounting) where strictly necessary.
• Authorities where required by law, court order, or to protect our rights or the safety of users.

We do not sell your personal data and we do not share it with advertisers.

4. International transfers

Some of our subprocessors are located outside the UK and EEA. Where personal data is transferred outside these regions, we rely on adequacy decisions or appropriate safeguards (such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses).

5. Data retention

We retain account, family and content data for as long as your account is active. If you delete your account, we delete or anonymise the associated personal data within 30 days, except where we are required to retain certain records (for example, transaction records for tax purposes) for longer.

6. Your rights

Under the UK GDPR and EU GDPR you have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office at ico.org.uk). We aim to respond to requests within one month.

To exercise your rights, contact hello@lifepins.app.

7. Security

We use appropriate technical and organisational measures to protect your personal data, including encryption in transit, encrypted storage, access controls, and the principle of least privilege for our staff. No system is perfectly secure, but we work continuously to keep yours safe.

8. Cookies

LifePins uses strictly necessary cookies to keep you signed in and to remember session preferences. We do not use advertising cookies. If we introduce analytics cookies in the future, we will request your consent first where required.

9. Children

LifePins is intended for adults to record family memories. Accounts must be created by someone aged 16 or over. Photos and information about children should only be added by a parent or legal guardian.

10. Changes to this notice

We may update this Privacy Notice from time to time. We will post any updated version on this page and, where changes are material, notify you by email.