Privacy Policy - Lightly App

This is the privacy policy for the Lightly app. You can find the website’s privacy policy under Privacy Policy.

Information We Collect

We only collect information when you explicitly provide it through contacting us or when you consent to share crash data.

Information You Provide to Us

Email address: Only when you explicitly contact us via email.

Telephone number: Only when you explicitly contact us via Telegram.

Information We Collect Automatically

Crash Data: With your consent, we collect crash reports using Google Crashlytics to diagnose and fix issues. This data may include device type, operating system version, and error logs.

Information We Collect from Other Sources

Beta Testing Platforms: If you participate in beta testing through services like TestFlight or are added via a Google Group, we may receive limited information associated with your Apple ID or Google account (such as your email address and device type) to manage participation and communicate updates. This information is used solely for testing purposes.

How and Why We Use Information

We use information about you solely for the following purposes:

To respond to your inquiries:
Your email or phone number will only be used to reply to your direct messages. We will never use this data to send marketing content, updates, or any unrelated communications.

To fix problems in our app:
For example, by monitoring, debugging, repairing, and preventing issues.

Legal Bases for Collecting and Using Information

  1. The use is necessary in order to fulfill our commitments to you; or
  2. The use is necessary for compliance with a legal obligation; or
  3. The use is necessary in order to protect your vital interests or those of another person; or
  4. We have a legitimate interest in using your information — for example to understand and fix app crashes (where crash data is collected only if you consent).
  5. You have given us your consent — for example, when you opt in to share crash reports.

Sharing Information

We share information about you only in limited circumstances, and with appropriate safeguards on your privacy.

Crash Reports via Google Crashlytics:
If you opt in to crash reporting, crash data (such as device information, OS version, and error logs) is collected and processed by Google Crashlytics, a service provided by Google LLC, to help us identify and fix issues in the app. Google is bound by strict data protection and security obligations and may process this data on infrastructure located outside the EU with appropriate safeguards.

Legal and regulatory requirements:
We may disclose information about you if required by law, such as in response to a subpoena, court order, or other governmental request.

We use service providers such as Supabase to deliver content. These providers do not receive or process any personal information about you.

How Long We Keep Information

We retain personal information only as long as necessary to respond to your communications. All messages and contact details are deleted upon request.

Crash data is retained for a limited time to help us diagnose and fix issues and is automatically deleted after a short period.

Security

We take reasonable measures to protect your information.

  • All communication data remains within the communication apps (email, Telegram) and is not stored elsewhere.
  • Crash data is securely handled by Google Crashlytics.
  • Supabase is used only to support essential app functionality (e.g., content delivery) and does not store personal or crash-related data.

Choices

Control what you share:
You choose whether or not to contact us via email or Telegram.

Crash Reporting:
You can opt in or out of crash reporting at any time. If you opt out, no crash data will be collected or sent.

Export Control: App data (like diary entries and thoughts) is only ever transferred when you manually export it. You choose the destination.

Delete your data:
You can delete app data by removing the app or its data from your device. Nothing leaves your phone unless you choose to export it.

Your Rights

European General Data Protection Regulation (GDPR)

If you are located in a country that falls under the scope of the GDPR, data protection laws give you certain rights with respect to your personal data, subject to any exemptions provided by the law, including the rights to:

  • Request access to your personal data;
  • Request correction or deletion of your personal data;
  • Object to our use and processing of your personal data;
  • Request that we limit our use and processing of your personal data; and
  • Request portability of your personal data.

US Privacy Laws

Laws in some US states require us to provide residents with additional information about the categories of personal information we collect and share, where we get that personal information, and how and why we use it. You’ll find that information in this section (if you are a California resident, please note that this is the Notice at Collection we are required to provide you under California law).

In the last 12 months, we collected the following categories of personal information, depending on the Services used:

  • Identifiers: Such as your name and email address, only when you contact us directly for support or inquiries.
  • Internet or other electronic network activity information: Such as device type, operating system version, and crash-related technical logs — but only if you have explicitly consented to share crash reports.

You can find more information about what we collect and sources of that information in the Information we collect section above. We collect personal information for the purposes described in the How and Why we Use Information section. And we share this information with the categories of third parties described in the sharing information section. We retain this information for the length of time described in our How Long We Keep Information section.

In some US states you have additional rights subject to any exemptions provided by your state’s respective law, including the right to:

  • Request a copy of the specific pieces of information we collect about you and, if you’re in California, to know the categories of personal information we collect, the categories of business or commercial purpose for collecting and using it, the categories of sources from which the information came, and the categories of third parties we share it with;
  • Request deletion of personal information we collect or maintain;
  • Request correction of personal information we collect or maintain;
  • Opt out of the sale or sharing of personal information;
  • Receive a copy of your information in a readily portable format; and
  • Not receive discriminatory treatment for exercising your rights.

Right to Opt Out

We never sell your personal information. We may share your information as necessary with our third-party service providers to provide our services to you. We do not collect or process your sensitive (and potentially sensitive) personal information except where it is strictly necessary to provide you with our service, where the processing is not for the purpose of inferring characteristics about you, or for other purposes that do not require an option to limit under California law. We don’t knowingly sell or share personal information of those under 16.

Your Information & Personalized Advertising

We do not sell or share your personal information for targeted advertising. We do not use cookies or tracking technologies for advertising purposes, and we do not disclose user data to advertising partners.

Contacting Us About These Rights If you would like to contact us, scroll down to “How to reach us” to find out how to reach us.

Requested Permissions

The app uses the following permissions for core functionality:

  • WAKE_LOCK: To keep the screen on during breathing or meditation exercises
  • VIBRATE: To vibrate the device for alarms
  • RECEIVE_BOOT_COMPLETED: To resume tasks after device restart
  • SCHEDULE_EXACT_ALARM: To schedule alarms
  • WRITE_EXTERNAL_STORAGE: To import/export files at your request

Controllers

Data Controller:

How to Reach Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
[email protected]