Privacy Policy

1. Who we are

Life Replay (“we”, “our”, “us”) is an AI-powered memory service that automatically generates weekly cinematic highlight reels, written journals, and mood analysis from the data you choose to connect. The service is operated via MadeThis, Inc.

2. What data we collect

• Account information — email address and display name when you sign up.
• Photos and videos — images and video clips from your device's camera roll, accessed only with your explicit permission.
• Music listening history — tracks, artists, and play times from connected music streaming accounts (e.g. Spotify), accessed via OAuth.
• Calendar data — event titles, times, and locations from connected calendar services (e.g. Google Calendar or Apple Calendar), accessed via OAuth.
• Location data — approximate location history used to give your weekly summaries geographic context. We do not track your location continuously or in the background without disclosure.
• Device information — device type, operating system version, and app version for diagnostic and compatibility purposes.
• Generated content — the highlight reels, journals, and mood reports our AI produces from your data.
• Usage data — pages visited, features used, and error logs to improve the service. We do not sell this data.
• Payment information — billing is handled by MadeThis. We never see or store full card details.

3. How we use your data

• To generate and deliver your weekly Life Replays.
• To personalise and improve AI output over time.
• To communicate service updates and account notices.
• To maintain security and prevent fraud.

We do not use your personal photos, videos, calendar events, Spotify history, or location data for advertising. Your data is never sold to third parties.

4. Third-party services

Life Replay connects to third-party services to read the data that powers your recaps. All integrations use official OAuth flows — we never see or store your passwords. Current integrations include:

• Music streaming services — to read your listening history and recently played tracks.
• Calendar services (Google Calendar, Apple Calendar, and similar) — to read event titles, times, and locations.
• Device photo library — accessed through your device's native permission system.

You can revoke any integration at any time from your account settings. Revocation immediately stops data collection from that source.

5. Data sharing

We share data only with the processors needed to operate the service:

• Convex — our database and serverless backend.
• MadeThis — the hosting and payments platform.
• AI inference providers — anonymised snippets of your data may be processed by AI APIs solely to generate your recap. These providers are contractually prohibited from training on your content.

6. Data security

All data transmitted between your device and our servers is encrypted in transit using TLS. Data stored in our database is encrypted at rest. We follow industry-standard security practices and conduct regular reviews of our data handling procedures.

No method of transmission or storage is 100% secure. If you become aware of a security issue, please contact us immediately at team@mylifereplay.madethis.app.

7. Your rights

You may at any time:

• Access or download the data we hold about you.
• Request correction of inaccurate data.
• Delete your account and all associated data. Connected-source authorisations are revoked immediately on deletion.
• Disconnect any source (music streaming, calendar, etc.) at any time from your account settings.

To exercise any right, email us at team@mylifereplay.madethis.app.

8. Data retention

We retain your data for as long as your account is active. You can delete your account and all associated data at any time from your account settings or by contacting us. Upon deletion, all personal data is removed within 30 days, except for transaction records required by law (kept for up to 7 years).

9. Children's privacy

Life Replay is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete the account and associated data promptly.

10. Cookies

We use session cookies solely for authentication. We do not use advertising or tracking cookies.

11. Governing law

This Privacy Policy is governed by applicable data protection law in the jurisdiction where you reside. Users in the European Economic Area (EEA) have additional rights under the General Data Protection Regulation (GDPR). Users in California have additional rights under the California Consumer Privacy Act (CCPA). We are committed to complying with applicable privacy laws wherever you are located.

12. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email at least 14 days before they take effect. The date at the top of this page reflects the most recent revision.

13. Contact

Questions about this policy or how we handle your data? Reach us at team@mylifereplay.madethis.app.