Lightli LTD Privacy Policy

Last updated: December 7, 2025

Quick Read Summary

📧 What we collect: Email address, usage data, and app-specific content you create
🔒 Security: Data encrypted in transit (TLS) and at rest (AES-256)
🌍 Data location: Stored securely in USA data centers (Google Cloud/Firebase)
👁️ Can we see your data?: Yes, but only authorized staff for support/maintenance purposes
🗑️ Your rights: Access, delete, export, or correct your data anytime
⏱️ Retention: Deleted immediately on account deletion; anonymous accounts auto-deleted after 30 days
🍪 Cookies: We use essential cookies and analytics (Google Analytics, GTM)
⚖️ Legal basis: UK GDPR compliant, ICO registered

This Privacy Policy describes how Lightli LTD ("we", "us", or "our") collects, uses, and protects your personal information when you use our mobile applications and services. We are committed to protecting your privacy and being transparent about our data practices.

Why we collect data: We collect data primarily for operational purposes - to make our apps work, provide you with the services you've requested, improve app performance, fix bugs and crashes, and enhance your user experience. We do not sell your data to third parties or use it for purposes unrelated to operating and improving our services.

By using any Lightli service, you agree to the collection and use of information in accordance with this Privacy Policy. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

App-Specific Data Collection

Each Lightli app collects specific data necessary for its operation and to provide you with the service:

Quitly - Sobriety Tracker

Routino - Habit & Routine Manager

Journalmi - Modular Journal

Cycle - Period & Pregnancy Tracker

Listly - Notes & Lists

Special Category Data (Health Information)

Under UK GDPR Article 9, certain apps process "special category" personal data relating to health:

Cycle App - Menstrual Health Data

Cycle collects and processes health data including menstrual cycle information, pregnancy dates, and related symptoms. We process this data:

Journalmi App - Potential Health Data

Journalmi may contain health information if you choose to journal about health-related topics. We process this data:

Medical Disclaimer: Our apps are not medical devices and should not be used for medical diagnosis or treatment. Always consult qualified healthcare professionals for medical advice.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide Us with certain personally identifiable information that can be used to contact or identify You. Personally identifiable information may include, but is not limited to:

Usage Data

Usage Data is collected automatically when using the Service.

Usage Data may include information such as Your Device's Internet Protocol address (e.g. IP address), browser type, browser version, the pages of our Service that You visit, the time and date of Your visit, the time spent on those pages, unique device identifiers and other diagnostic data.

When You access the Service by or through a mobile device, We may collect certain information automatically, including, but not limited to, the type of mobile device You use, Your mobile device unique ID, the IP address of Your mobile device, Your mobile operating system, the type of mobile Internet browser You use, unique device identifiers and other diagnostic data.

We may also collect information that Your browser sends whenever You visit our Service or when You access the Service by or through a mobile device.

Information from Third-Party Social Media Services

The Company allows You to create an account and log in to use the Service through the following Third-party Social Media Services:

If You decide to register through or otherwise grant us access to a Third-Party Social Media Service, We may collect Personal data that is already associated with Your Third-Party Social Media Service's account, such as Your name, Your email address, Your activities or Your contact list associated with that account.

You may also have the option of sharing additional information with the Company through Your Third-Party Social Media Service's account. If You choose to provide such information and Personal Data, during registration or otherwise, You are giving the Company permission to use, share, and store it in a manner consistent with this Privacy Policy.

Use of Your Personal Data

The Company may use Personal Data for the following purposes:

We may share Your personal information in the following situations:

Retention of Your Personal Data

The Company will retain Your Personal Data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use Your Personal Data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

The Company will also retain Usage Data for internal analysis purposes. Usage Data is generally retained for a shorter period of time, except when this data is used to strengthen the security or to improve the functionality of Our Service, or We are legally obligated to retain this data for longer time periods.

Transfer of Your Personal Data

Your information, including Personal Data, is processed at the Company's operating offices and in any other places where the parties involved in the processing are located. It means that this information may be transferred to — and maintained on — computers located outside of Your state, province, country or other governmental jurisdiction where the data protection laws may differ than those from Your jurisdiction.

Your consent to this Privacy Policy followed by Your submission of such information represents Your agreement to that transfer.

The Company will take all steps reasonably necessary to ensure that Your data is treated securely and in accordance with this Privacy Policy and no transfer of Your Personal Data will take place to an organization or a country unless there are adequate controls in place including the security of Your data and other personal information.

Delete Your Personal Data

You have the right to delete or request that We assist in deleting the Personal Data that We have collected about You.

Our Service may give You the ability to delete certain information about You from within the Service.

You may update, amend, or delete Your information at any time by signing in to Your Account, if you have one, and visiting the account settings section that allows you to manage Your personal information. You may also contact Us to request access to, correct, or delete any personal information that You have provided to Us.

Please note, however, that We may need to retain certain information when we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data is transferred and becomes subject to a different Privacy Policy.

Law enforcement

Under certain circumstances, the Company may be required to disclose Your Personal Data if required to do so by law or in response to valid requests by public authorities (e.g. a court or a government agency).

Other legal requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

Security of Your Personal Data

The security of Your Personal Data is important to Us, but remember that no method of transmission over the Internet, or method of electronic storage is 100% secure. While We strive to use commercially acceptable means to protect Your Personal Data, We cannot guarantee its absolute security.

Data Storage and Location

Your data is stored on secure servers provided by Google Cloud Platform and Firebase, with primary data centers located in the United States.

Encryption and Data Protection

We implement industry-standard security measures to protect your data:

Can Lightli Staff See Your Data?

Yes, authorized Lightli staff members can access your data, but only under specific circumstances:

We maintain strict internal policies to limit data access to only those employees who need it to perform their job functions. All staff members are bound by confidentiality agreements and receive regular data protection training.

Data Backup and Recovery

We maintain regular backups of your data to prevent data loss:

Data Breach Notification

In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will:

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience and analyze how our services are used.

Types of Cookies We Use

Third-Party Analytics

We use the following third-party services that may collect data:

You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

Your Rights Under UK GDPR

Under UK GDPR and the Data Protection Act 2018, you have the following rights:

How to Exercise Your Rights

To exercise any of these rights:

Legal Basis for Processing

We process your personal data under the following legal bases:

International Data Transfers

While we primarily store data in EU/UK data centers, some of our service providers may be based in other countries. When we transfer data internationally:

Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you.

Data Retention Periods

We retain your personal data for the following periods:

Children's Privacy

We do not have a minimum age requirement for our services. If you are a parent or guardian and have concerns about your child's use of our services, please contact us at hello@lightli.uk.

If your country requires parental consent for data processing of minors, and we need to rely on consent as a legal basis for processing information, we may require parental consent before collecting and using that information.

Links to Other Websites

Our Service may contain links to other websites that are not operated by Us. If You click on a third party link, You will be directed to that third party's site. We strongly advise You to review the Privacy Policy of every site You visit.

We have no control over and assume no responsibility for the content, privacy policies or practices of any third party sites or services.

Changes to this Privacy Policy

We may update Our Privacy Policy from time to time. We will notify You of any changes by posting the new Privacy Policy on this page.

We will let You know via email and/or a prominent notice on Our Service, prior to the change becoming effective and update the "Last updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions about this Privacy Policy, want to exercise your rights, or have concerns about your data, please contact us:

Supervisory Authority

If you have concerns about how we handle your data and wish to lodge a complaint, you can contact the UK Information Commissioner's Office (ICO). Lightli LTD is registered with the ICO.