Privacy & Your Data

Plain English. No surprises. Last updated 12 September 2026.

This policy covers both lifelight.app and the LifeLight iOS app. Some of it applies only to one of them, and where that is true it says so. The short version: our servers hold your email, your orders and your readings — and, on an iPhone, your birth details are kept on your own phone, in the iOS Keychain, which survives deleting the app. How to clear that is explained below.

Who we are

LifeLight is a product of MoreBetter Studios, a trading name of a sole trader based in the United Kingdom. We are the data controller for the information described here. Questions? Email [email protected]. To delete your data you do not need to email anyone — see Deleting your account and your data.

Trading as MoreBetterStudios is Pramod Botlagudur, a sole trader based in the United Kingdom. Address: Unit 170704, Courier Point, 13 Freeland Park, Wareham Road, Poole, Dorset, BH16 6FH, United Kingdom. Contact: [email protected]

Your birth details — exactly where they go

This is the most personal thing LifeLight touches, so here is the whole of it, without rounding.

The reading we save contains none of them

Your birth date, time and place are used to compute your chart, and the saved reading keeps only the finished text plus a short jargon-free summary — your archetype, your current age, and the alias or initials you chose, if any. Nothing in that summary can reconstruct your birth details, and no real name is ever required.

Your order record holds them for 30 days, then it doesn't

When you buy, the birth details you submitted are stored on the order, because our server — never your browser or your phone — has to be the authority on what was bought and what is generated from it. That is also what lets us recover a purchase where the reading failed or your browser closed halfway through. But it stops being needed the moment your reading exists, so a daily process removes the birth date, time, place and gender from the order 30 days after it was fulfilled — and the same for any family members on a Family or Couples reading. What is left is the sale itself: what you bought, when, the payment reference, and the Apple transaction identifiers for an in-app purchase. Those are transaction records and are kept for as long as tax and accounting law requires. If you delete your account we delete everything we can and keep only what we are legally required to keep — see below.

An earlier version of this page said birth details were “not stored”; a later one said the order kept them indefinitely. The first was a comforting half-fact and the second was true when we wrote it. Now the order keeps them only for as long as your purchase could still need them, and then it doesn't.

On an iPhone, they are also on your phone — and they outlive the app

The app asks for your birth moment once and then saves it on the device, in the iOS Keychain (via expo-secure-store), together with any family members you saved. That is so it never has to ask twice. It is stored by iOS on your phone; it is not a copy we hold.

Keychain items survive deleting the app. That is how iOS works, not a choice we made: removing LifeLight from your phone does not erase your saved birth profile or your session, and reinstalling brings them back. To actually clear them, do it from inside the app before you delete it — Settings → Sign out erases the birth profile, saved people, cached readings and the session from the device in one go, and deleting your account does the same. If you have already deleted the app, reinstall it, sign out (or delete your account) from Settings, and then remove it.

What we store on our servers

Your account, keyed on your email address in lowercase (so LifeLight treats [email protected] and [email protected] as the same person), plus whether you opted in to marketing and your Spark credit balance. Your orders — what you bought, when, the payment reference, and the generation details described above. Your readings — the generated text and the short summary. Your Spark checks — the occasion, the verdict and the text of each check you run. Any feedback you send us — a 1–5 rating and an optional comment, never published unless a human approves it and you ticked the box allowing it. A review shown on the site carries the product it was for and the reviewer's country, taken from the request at country level only — never a name, an email address or a finer location. Any gift vouchers you bought or received. And, for purchases made in the app, the Apple transaction identifiers for the purchase, so the same purchase can never be delivered twice.

We never see or store your card number, on either platform.

What the app stores on your phone

In the iOS Keychain: your birth profile and saved family members; and your session — which sign-in method you used, your email address, and (for Sign in with Apple) your Apple user identifier and identity token.

In the app's own file storage: a cached copy of each reading you have generated, so you can reopen it without a connection. Unlike the Keychain, this is removed when you delete the app.

The app contains no analytics, advertising or tracking SDKs of any kind. It does not track you across other apps or websites, and it does not ask for permission to, because it has nothing to do with it.

Sign in with Apple, and “Hide My Email”

You can sign in with Apple. Apple tells us your Apple user identifier and an email address, and gives the app a signed identity token that our server verifies against Apple's public keys before it trusts the email. We never receive your Apple Account password.

If you choose Hide My Email, the address we receive is an Apple private relay address ending in @privaterelay.appleid.com. That is a perfectly good LifeLight account — your readings are emailed to it and Apple forwards them to your real inbox, which we never see. Two things follow:

• If you turn off forwarding for LifeLight (iPhone Settings → [your name] → Sign in with Apple → LifeLight, or under Hide My Email), our emails will simply stop reaching you. Nothing on our side breaks and nothing tells us — the reading is still in your account, we just can no longer deliver it by email.
• If you later want your real address on the account, sign in with Apple again from the app's Settings and choose Share My Email. A fresh sign-in replaces the stored email outright: the address Apple has just given us wins over whatever was cached.

What Apple tells us about a purchase

For an in-app purchase, Apple gives us the product bought, Apple's transaction identifiers, the purchase date, which App Store environment it came from, and an opaque token that ties the purchase to your LifeLight account. That is all. No card details, no billing address, no Apple Account name.

Why we're allowed to (legal bases)

To deliver the reading you paid for and email it to you, we rely on performance of a contract. To keep order and payment records, we rely on our legal obligations (tax and accounting). For optional marketing emails, we rely on your consent, which you can withdraw at any time.

Who else processes your data

We use a small number of trusted providers, and only for the purposes above: Apple (App Store purchases and Sign in with Apple, for the iOS app), Stripe (payment processing on the website — they handle your card details, we never receive them), Supabase (secure database and sign-in, hosted in the EU), Resend (sending your reading and sign-in emails), Anthropic (the AI model that writes your reading from the computed chart), and Vercel (website and API hosting). Where any of these process data outside the UK/EU, transfers are covered by appropriate safeguards such as Standard Contractual Clauses. We never sell your data to anyone.

How long we keep it

Saved readings are automatically deleted after 3 months — a daily process removes anything older, on both platforms. Order records are kept longer where tax law requires it — but their birth details are removed after 30 days, as described above. Cached readings on your phone stay until you clear them or delete the app.

Deleting your account and your data

In the app: Settings → Delete account. It is self-service, it takes effect straight away, and you never have to email anyone or wait for us to reply.

What that deletes: your account record and email address, your saved readings, your Spark checks and any remaining Spark credits, and your feedback — and, on the device, your birth profile, saved family members, cached readings and your session. Remaining Spark credits are lost when you delete your account, and they cannot be refunded by us; deleting the account is not a way to get money back.

What we keep, and why: the transaction record for anything you bought — the order, its payment reference, and the Apple transaction identifiers for an in-app purchase. The birth details on those orders are removed, along with your email address, so what survives is the sale and not the person. UK tax and accounting law requires a business to keep records of its sales, so we cannot delete those on request. The Apple identifiers are kept for a second reason, and it is one that protects you: that record is what makes it impossible to deliver the same purchase twice, so removing it would let a replayed receipt claim it all over again. None of it is used to contact you or to build a profile of you.

What stays valid for somebody else: gift vouchers. A voucher you bought that the recipient has not yet redeemed, and that has not expired, stays live — the recipient did nothing wrong and must not lose what was bought for them because you left, so we unlink your email address and leave the code working. A voucher somebody sent to you stays redeemable too: redemption is by code, so we simply stop holding your address against it.

One honest limit. We delete your email address everywhere it is ours to delete. If a third party bought you a Blueprint as a gift, your address is also inside their order — that is their transaction record, not yours, and it is not ours to erase on your instruction. It goes when they delete their own account.

On the website: you can delete any individual saved reading from your My Readings page — sign in with a magic link, then use the Delete button. If you only ever bought on the website and want the whole account gone, email us and we will action it; we aim to complete it well inside the one month UK GDPR allows.

Marketing is opt-in only

Emailing your reading (and the sign-in link or code to view it) is a transactional message you asked for. Marketing updates are separate and entirely optional — we send them only if you tick the optional box, and every one has an unsubscribe link.

Cookies (website only)

The iOS app uses no cookies, no pixels and no advertising SDKs. This section is about lifelight.app in a browser.

Essential cookies are always on — the minimum needed to make the site work: a sign-in session cookie when you use My Readings, and a small cookie that remembers your own cookie choice.

Analytics & advertising cookies — the Meta (Facebook/Instagram) and TikTok pixels — load only if you choose “Accept all” in the cookie banner. They help us see which pages work and measure whether our ads are worth what we pay for them. If you choose “Essentials only”, or make no choice at all, none of them load and nothing about your visit is shared with Meta or TikTok.

Changed your mind? Use the “Cookie choices” link in the footer to reopen the banner and pick again. We don't sell data to ad networks — or anyone.

Your rights

You have the right to access, correct, delete, restrict, object to, or receive a portable copy of your personal data. Deletion is self-service in the app; for anything else, email us and we'll action it. If you're unhappy with how we've handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk.

Security

Data is encrypted in transit, access to our database is restricted to the service itself, and a saved reading is only ever returned to a verified email address — via a single-use magic link on the web, or a verified sign-in in the app. On your phone, the birth profile and session are held in the iOS Keychain rather than ordinary app storage.

Guidance, not prediction

Your reading is offered as guidance for reflection, never as fixed prediction, and is not a substitute for medical, legal or financial advice. See our Terms.

Changes

If we change this policy we'll update the date at the top, and for anything material we'll tell you by email.