Privacy & Your Data

Plain English. No surprises. Last updated 31 October 2026.

This policy covers both lifelight.app and the LifeLight iOS app. Some of it applies only to one of them, and where that is true it says so. The short version: our servers hold your email, your orders and your readings — and, on an iPhone, your birth details are kept on your own phone, in the iOS Keychain, which survives deleting the app. How to clear that is explained below.

Who we are

LifeLight is a product of MoreBetter Studios, a trading name of a sole trader based in the United Kingdom. We are the data controller for the information described here. Questions? Email [email protected]. To delete your data you do not need to email anyone — see Deleting your account and your data.

Trading as MoreBetterStudios is Pramod Botlagudur, a sole trader based in the United Kingdom. Address: Unit 170704, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, United Kingdom. Contact: [email protected]

Your birth details — exactly where they go

This is the most personal thing LifeLight touches, so here is the whole of it, without rounding.

The reading we save contains none of them

Your birth date, time and place are used to compute your chart, and the saved reading keeps only the finished text plus a short jargon-free summary — your archetype, your current age, and the alias or initials you chose, if any. Nothing in that summary can reconstruct your birth details, and no real name is ever required.

Your order record holds them for 30 days, then it doesn't

When you buy, the birth details you submitted are stored on the order, because our server — never your browser or your phone — has to be the authority on what was bought and what is generated from it. That is also what lets us recover a purchase where the reading failed or your browser closed halfway through. But it stops being needed the moment your reading exists, so a daily process removes the birth date, time, place and gender from the order 30 days after it was fulfilled — and the same for any family members on a Family or Couples reading. What is left is the sale itself: what you bought, when, the payment reference, and the Apple transaction identifiers for an in-app purchase. Those are transaction records and are kept for as long as tax and accounting law requires. If you delete your account we delete everything we can and keep only what we are legally required to keep — see below.

An earlier version of this page said birth details were “not stored”; a later one said the order kept them indefinitely. The first was a comforting half-fact and the second was true when we wrote it. Now the order keeps them only for as long as your purchase could still need them, and then it doesn't.

On an iPhone, they are also on your phone — and they outlive the app

The app asks for your birth moment once and then saves it on the device, in the iOS Keychain (via expo-secure-store), together with any family members you saved. That is so it never has to ask twice. It is stored by iOS on your phone; it is not a copy we hold.

Keychain items survive deleting the app. That is how iOS works, not a choice we made: removing LifeLight from your phone does not erase your saved birth profile or your session, and reinstalling brings them back. To actually clear them, do it from inside the app before you delete it — Settings → Sign out erases the birth profile, saved people, cached readings and the session from the device in one go, and deleting your account does the same. If you have already deleted the app, reinstall it, sign out (or delete your account) from Settings, and then remove it.

What we store on our servers

Your account, keyed on your email address in lowercase (so LifeLight treats [email protected] and [email protected] as the same person), plus whether you get LifeLight update emails and your Spark credit balance. Your orders — what you bought, when, the payment reference, and the generation details described above. Your readings — the generated text and the short summary. Your Spark checks — the occasion, the verdict and the text of each check you run. Any feedback you send us — a 1–5 rating and an optional comment, never published unless a human approves it and you ticked the box allowing it. A review shown on the site carries the product it was for and the reviewer's country, taken from the request at country level only — never a name, an email address or a finer location. Any gift vouchers you bought or received. And, for purchases made in the app, the Apple transaction identifiers for the purchase, so the same purchase can never be delivered twice.

We count page visits and checkouts per marketing campaign as aggregate numbers only — no cookies, no identifiers. If you arrived from an advert or another website, your order also records the campaign labels on the link you arrived by and the name of the website that sent you — the site only (for example, instagram.com), never the page, and nothing that identifies you. We also use Vercel Web Analytics, which counts page views in aggregate without cookies or identifiers.

In a little more detail, because it is the one thing on this page we do without asking you first: a row of that table is a date, a campaign name from the link you arrived on, which page it was, and a number. There is nothing in it that is about you — no cookie, no identifier, no IP address, no browser details, not even a session — so two visits by one person and one visit by each of two people are the same number and can never be told apart. That is also why it says visits and not visitors: it counts page loads. We keep it because it is the only way to tell whether an advert we paid for sent anybody, and we keep it this way because the honest version needs nothing from your device and nothing about you.

We never see or store your card number, on either platform.

What the app stores on your phone

In the iOS Keychain: your birth profile and saved family members; and your session — which sign-in method you used, your email address, and (for Sign in with Apple) your Apple user identifier and identity token.

In the app's own file storage: a cached copy of each reading you have generated, so you can reopen it without a connection. Unlike the Keychain, this is removed when you delete the app.

The app contains no analytics, advertising or tracking SDKs of any kind. It does not track you across other apps or websites, and it does not ask for permission to, because it has nothing to do with it.

Sign in with Apple, and “Hide My Email”

You can sign in with Apple. Apple tells us your Apple user identifier and an email address, and gives the app a signed identity token that our server verifies against Apple's public keys before it trusts the email. We never receive your Apple Account password.

If you choose Hide My Email, the address we receive is an Apple private relay address ending in @privaterelay.appleid.com. That is a perfectly good LifeLight account — your readings are emailed to it and Apple forwards them to your real inbox, which we never see. Two things follow:

• If you turn off forwarding for LifeLight (iPhone Settings → [your name] → Sign in with Apple → LifeLight, or under Hide My Email), our emails will simply stop reaching you. Nothing on our side breaks and nothing tells us — the reading is still in your account, we just can no longer deliver it by email.
• If you later want your real address on the account, sign in with Apple again from the app's Settings and choose Share My Email. A fresh sign-in replaces the stored email outright: the address Apple has just given us wins over whatever was cached.

What Apple tells us about a purchase

For an in-app purchase, Apple gives us the product bought, Apple's transaction identifiers, the purchase date, which App Store environment it came from, and an opaque token that ties the purchase to your LifeLight account. That is all. No card details, no billing address, no Apple Account name.

Why we're allowed to (legal bases)

To deliver the reading you paid for and email it to you, we rely on performance of a contract. To keep order and payment records, we rely on our legal obligations (tax and accounting). For occasional LifeLight update emails to customers, we rely on our legitimate interests in telling you about our own readings, under the “soft opt-in” rules for existing customers. You can opt out at checkout or from any email. For Sutra and Signal, and for updates you asked for without buying, we rely on your consent, which you can withdraw at any time. For the aggregate campaign counts described above, we rely on our legitimate interests in knowing whether our own advertising works — which is available to us precisely because those counts hold nothing personal and nothing is stored on your device to produce them.

Who else processes your data

We use a small number of trusted providers, and only for the purposes above: Apple (App Store purchases and Sign in with Apple, for the iOS app), Stripe (payment processing on the website — they handle your card details, we never receive them), Supabase (secure database and sign-in, hosted in the EU), Resend (sending your reading, sign-in and update emails), beehiiv (sending Sutra and Signal, if you subscribe), Anthropic (the AI model that writes your reading from the computed chart), and Vercel (website and API hosting). Where any of these process data outside the UK/EU, transfers are covered by appropriate safeguards such as Standard Contractual Clauses. We never sell your data to anyone.

Emails we send

LifeLight updates. If you buy a reading, we may email you now and then about new LifeLight readings. You can say no at checkout by ticking “Don’t send me LifeLight updates”, and every email has an unsubscribe link. Gift recipients only hear from us if they ask to.

Sutra and Signal. Our weekly letter, which you can subscribe to on the LifeLight blog. We collect your email address, the page you subscribed from and the time. It is sent through beehiiv, our email provider for the letter, and you confirm your address before the first issue arrives. We keep your address until you unsubscribe, using the link in any issue or by emailing us. It is a separate list: subscribing doesn’t link to a LifeLight account or order.

How long we keep it

Saved readings are automatically deleted after 3 months — a daily process removes anything older, on both platforms. Order records are kept longer where tax law requires it — but their birth details are removed after 30 days, as described above. Cached readings on your phone stay until you clear them or delete the app.

Deleting your account and your data

In the app: Settings → Delete account. It is self-service, it takes effect straight away, and you never have to email anyone or wait for us to reply.

What that deletes: your account record and email address, your saved readings, your Spark checks and any remaining Spark credits, and your feedback — and, on the device, your birth profile, saved family members, cached readings and your session. Remaining Spark credits are lost when you delete your account, and they cannot be refunded by us; deleting the account is not a way to get money back.

What we keep, and why: the transaction record for anything you bought — the order, its payment reference, and the Apple transaction identifiers for an in-app purchase. The birth details on those orders are removed, along with your email address, so what survives is the sale and not the person. UK tax and accounting law requires a business to keep records of its sales, so we cannot delete those on request. The Apple identifiers are kept for a second reason, and it is one that protects you: that record is what makes it impossible to deliver the same purchase twice, so removing it would let a replayed receipt claim it all over again. None of it is used to contact you or to build a profile of you.

The aggregate campaign counts are not affected by deleting your account, and there is nothing there to delete: they contain no reference to you, so there is no row that could be found and removed, and no row that says anything about you if it were.

What stays valid for somebody else: gift vouchers. A voucher you bought that the recipient has not yet redeemed, and that has not expired, stays live — the recipient did nothing wrong and must not lose what was bought for them because you left, so we unlink your email address and leave the code working. A voucher somebody sent to you stays redeemable too: redemption is by code, so we simply stop holding your address against it.

One honest limit. We delete your email address everywhere it is ours to delete. If a third party bought you a Blueprint as a gift, your address is also inside their order — that is their transaction record, not yours, and it is not ours to erase on your instruction. It goes when they delete their own account.

On the website: you can delete any individual saved reading from your My Readings page — sign in with a magic link, then use the Delete button. If you only ever bought on the website and want the whole account gone, email us and we will action it; we aim to complete it well inside the one month UK GDPR allows.

Marketing is opt-in only

Emailing your reading (and the sign-in link or code to view it) is a transactional message you asked for. Marketing updates are separate and entirely optional — we send them only if you tick the optional box, and every one has an unsubscribe link.

Cookies (website only)

The iOS app uses no cookies, no pixels and no advertising SDKs. This section is about lifelight.app in a browser.

Essential cookies are always on — the minimum needed to make the site work: a sign-in session cookie when you use My Readings, and a small cookie that remembers your own cookie choice.

Analytics & advertising cookies — the Meta (Facebook/Instagram) and TikTok pixels — load only if you choose “Accept all” in the cookie banner. They help us see which pages work and measure whether our ads are worth what we pay for them. If you choose “Essentials only”, or make no choice at all, none of them load and nothing about your visit is shared with Meta or TikTok.

The aggregate campaign counts are not in this section, and that is not an oversight: they use no cookie and store nothing at all on your device, so there is nothing for a cookie banner to ask you about. Choosing “Essentials only” does not switch them off, because there is nothing to switch off. The campaign name is never stored on your device: it travels only in the links on the page you landed on, so if you go on to buy from there the purchase is credited to that campaign, and if you come back another way it is not.

Changed your mind? Use the “Cookie choices” link in the footer to reopen the banner and pick again. We don't sell data to ad networks — or anyone.

Your rights

You have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. Deletion is self-service in the app; for anything else, email us and we'll action it. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit, access to our database is restricted to the service itself, and a saved reading is only ever returned to a verified email address — via a single-use magic link on the web, or a verified sign-in in the app. On your phone, the birth profile and session are held in the iOS Keychain rather than ordinary app storage.

Guidance, not prediction

Your reading is offered as guidance for reflection, never as fixed prediction, and is not a substitute for medical, legal or financial advice. See our Terms.

Changes

If we change this policy we'll update the date at the top, and for anything material we'll tell you by email.