Privacy Policy

1. Scope and who we are

This policy applies to the lifedrop website, accounts, public and private profile experiences, people and relationship maps, Drop chat, saved sources and notes, digital postcards, messaging flows, social plans, reminders, and related services. In this policy, “lifedrop,” “we,” “us,” and “our” mean the operator of the lifedrop service.

lifedrop is responsible for deciding how personal information is used for these services. A user may also add information about another person for personal relationship-management purposes; section 7 explains how we handle that information.

2. Information we handle

Account and contact details. This may include your name, username, email address, phone number, authentication and one-time-code records, birthday details you choose to save, notification choices, and account settings.

Chats, memories, and creative content. This may include your messages to Drop, conversation history used to keep context, saved notes, answers, plans, postcard text and designs, photos, videos, drawings, prompts, captions, comments, reactions, and feedback.

People and relationship information. You may provide names, contact details, how you know someone, relationship categories, places, dates, birthdays, memories, reminders, social plans, and other context about people in your life. This can include information about people who do not use lifedrop.

Sources, files, and links. You may attach documents or media, save books, articles, podcasts, websites, or social-profile links, and ask questions about them. We may store the original item or link, extracted text or metadata, selected passages sent to an AI provider, answers, and notes you explicitly choose to save. A source, an AI answer, and a saved note are separate records.

Public-source information. At your request, or to help identify a public person you add, lifedrop may retrieve information and images from public webpages, Wikipedia, search services, and public social profiles. We may create an AI-assisted summary or relationship description from those sources. Public availability does not make information error-free or remove other people’s rights.

Messages and delivery records. We may process phone numbers, messaging handles, message bodies and attachments, delivery status, opt-in and opt-out records, reminder times, participant authorisations, and replies needed to provide iMessage, SMS, push, or similar features.

Usage, device, and support information. We may process cookie identifiers, a shortened or hashed network identifier, browser or device information, timestamps, referring and destination URLs, page and feature activity, account or postcard context attached to an event, delivery events, error logs, security signals, feedback, and troubleshooting details. When Drop cannot complete a request, a limited diagnostic email may include the account handle, sender number, request, reply, selected feature, and failure reason so the operator can investigate.

3. How and why we use information

• Create, authenticate, and protect accounts.
• Build your people map and remember the people, sources, plans, places, and memories you choose to save.
• Answer questions, organise context, suggest connections, and generate requested text, images, summaries, or postcard designs.
• Create, store, deliver, and display postcards and their media.
• Schedule and send the owner and separately authorised participants the reminders or service messages they request.
• Provide public-profile research, source reading, feedback, support, and troubleshooting.
• Measure service performance, understand feature use, prevent abuse, and improve lifedrop.
• Comply with legal obligations and protect the rights, safety, and integrity of lifedrop and its users.

Where applicable law requires a legal basis, we generally rely on performing our agreement with you for account and requested service features; consent for optional messaging and other processing that requires it; legitimate interests in securing, troubleshooting, and improving the service where those interests are not overridden by individual rights; and compliance with law. We may ask for additional permission where sensitive information or another specific activity requires it. You may withdraw consent where processing is based on consent; this does not affect earlier processing.

4. When information is shared

With people you choose. Postcard content, shared profiles, and related information are shared with the recipients or audiences you select. A person who has a valid postcard link or code may be able to open it, so treat those links and codes as private sharing credentials. Information on a public profile is available to anyone who can reach that profile.

With service providers. We use providers for hosting, databases, authentication, private media storage, AI and image generation, public-source retrieval, analytics, email, push notifications, security, and message delivery. Current production services include Supabase, Fly.io, OpenAI, Google, Apify, Apple, Blooio, Twilio, and Resend. A provider receives only the information reasonably needed for the applicable feature and processes it under its own contractual and legal duties.

For support and operations. Authorised people operating lifedrop may review feedback, a support request, or limited diagnostic information when needed to answer you, investigate a failure, prevent abuse, or keep the service working. Feedback can be forwarded by email even if you decline follow-up; declining follow-up means we will not use a contact method to respond unless another lawful reason applies.

For safety, law, or a business change. We may disclose information when reasonably necessary to comply with law, respond to valid legal process, investigate abuse, protect people or the service, or complete a merger, financing, acquisition, reorganisation, or sale of assets.

We do not sell personal information for money. We do not sell or share phone numbers, messaging opt-in data, or consent records with third parties for their own marketing or promotional purposes.

5. AI, source-reading, and generated information

To provide Drop chat, public-person research, source Q&A, relationship suggestions, and creative features, lifedrop may send an AI provider the current request together with only the context considered relevant, such as recent conversation history, selected saved-person details, source passages, links, photos, drawings, or postcard content. The service may store the provider’s answer and will separately store a note only when you choose to save it or ask Drop to remember it.

lifedrop does not operate a programme that trains its own general-purpose AI model on your private content. AI providers process inputs and outputs under our service configuration and their applicable business terms; provider security and abuse-monitoring logs may be retained for their stated periods. Do not provide sensitive information that is unnecessary for your request.

AI output and public-source information can be inaccurate, incomplete, outdated, biased, or about the wrong person. Review it before relying on, saving, or sharing it, and ask us to correct or remove inaccurate information about you.

Uploaded files are stored in owner-scoped storage and access links may be temporary. When a supported document is read, selected text may be extracted and sent for the requested answer. Attaching a file does not transfer ownership of that file to lifedrop or give you rights you did not already have.

6. Messages, notifications, plans, and reminders

If you choose to receive service messages, we use your contact details to send the notifications, login codes, postcard notices, daily questions, delivery updates, or reminders described where you opt in. Message frequency depends on your activity, friend activity, and the reminders you request. Message and data rates may apply.

A plan mention is not permission to contact another person. Saving someone’s phone number or username is also not blanket permission. lifedrop sends a friend or participant a plan reminder only when the requesting user expressly asks for that person to be reminded and the feature supports the request. The participant receives messages one-to-one and can decline or opt out; their reply and private map information are not automatically shared with other participants.

Consent to messaging is not a condition of purchase. For SMS in the United States, reply STOP to opt out and HELP for help. Other supported messages include their available opt-out instructions. Where supported, we may send one final confirmation after an opt-out. Pausing messages stops future messaging but does not by itself delete the underlying account, plan, or saved content.

7. Information about other people

If you add another person, you are responsible for having an appropriate reason to provide and use their information and for respecting their privacy. Avoid saving sensitive details that are not needed. Do not use lifedrop to monitor, profile, embarrass, impersonate, or make consequential decisions about someone.

A person may appear because a user added them, addressed a postcard to them, supplied their contact details, or requested research about a public person. If information about you appears in lifedrop and you want it corrected or removed, contact us using section 14. We may need enough detail to locate the record and verify the request while protecting the account holder’s rights.

8. Cookies and analytics

lifedrop uses cookies and similar storage for sign-in, security, requested session features, and first-party product analytics. The analytics event service uses an HTTP-only lifedrop_visitor_id cookie for up to 400 days and a lifedrop_session_id cookie for 30 minutes. Events may include page or feature activity and related account, person, source, or postcard context; these identifiers are not used for third-party advertising.

You can block or delete cookies in your browser, although sign-in or other requested features may stop working. Where applicable law requires consent for non-essential analytics storage, that consent must be obtained before the storage is used; this policy is notice and does not replace any consent required by law.

9. Retention, international processing, and security

We keep account details, people-map records, chats, notes, plans, sources, files, postcards, and media while they are needed to provide the features you keep or until they are deleted through an available feature or verified request, subject to technical and legal limits. Delivery, consent, opt-out, fraud-prevention, support, and security records may be kept longer when needed to honour choices, demonstrate compliance, investigate problems, or resolve disputes. Retention for analytics, provider logs, support-email copies, and backups depends on operational need and provider settings.

Deleting an item from an active view, restarting onboarding, pausing messages, and deleting an account are different actions. Deleted information may remain for a limited time in backups, security records, provider systems, or records we must keep by law. We will explain the applicable limits when responding to a verified deletion request.

Our providers may process information in countries other than your own. Where required, we use recognised safeguards for international transfers. We use reasonable technical and organisational measures, including encrypted transport, owner-scoped storage, temporary signed links for private files where supported, and access controls, but no online service can guarantee absolute security.

10. Your choices and privacy rights

Depending on where you live, you may have the right to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also withdraw consent and complain to your local data protection authority. We may need to verify your identity before completing a request, and lawful exceptions may apply.

You can manage some content and notification choices directly in lifedrop, opt out of supported messages, and delete browser cookies. For access, export, correction, account deletion, or a request about information another user added about you, contact us using section 14. We will respond according to applicable law.

11. Sensitive information

What you choose to tell Drop may reveal health, disability, beliefs, relationships, or other sensitive information. lifedrop is not a medical-record service and does not require a diagnosis to use interest-based features such as ADHD-related prompts. Share only what is needed. Where applicable law requires an additional condition or explicit consent to process sensitive information, we will rely on that condition or ask for the required permission.

12. Children

lifedrop is not directed to children under 13. If the law where you live requires a higher age to consent to online services, do not use lifedrop without the authorisation required in your country. If you believe a child has provided personal information without appropriate permission, please contact us so we can review and take appropriate action.

13. Changes to this policy

We may update this policy when the service or applicable requirements change. We will update the date at the top and provide additional notice when a change is material and notice is required.

14. Contact

For privacy questions or requests, use the feedback or contact method available in Drop, the lifedrop app, or on the lifedrop website. In Drop, you can begin with /feedback and state that your message is a privacy request. If you want a reply, provide a contact method when asked. Include enough information for us to understand and locate the request, but do not send passwords, one-time login codes, or postcard access codes.