Privacy policy
Lifeline is a personal timeline. You put the events of your life on it, and you decide who sees what. This policy explains which personal data Lifeline processes, why, and what your rights are.
1. Who is responsible
Lifeline is run by [YOUR FULL NAME], [CITY], the Netherlands ("we", "us"). We are the controller for the personal data described here. Contact for anything about privacy: [CONTACT EMAIL]. We answer within 30 days, usually much sooner.
2. The short version
- Your timeline is private by default. Nobody sees it until you make a share link.
- We do not sell your data, show ads, or use your data to train AI models.
- We use no tracking cookies.
- Your data is stored in the EU (Ireland).
- You can download all your data, and delete your account and everything in it, at any time.
3. What data we process, and why
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address | To sign you in with a sign-in link and to send messages about your account | Contract (art. 6(1)(b)) |
| Name | To show your timeline, also in shared links | Contract |
| Birth date | To start your timeline and show your age next to years. Shared links only show the birth year, and only when "Show ages" is on | Contract |
| Language choice | To show the app in your language | Contract |
| Your lanes and events: titles, dates, notes, places, private flags | This is the service: your timeline | Contract; for sensitive data, your explicit consent (section 4) |
| Places you search for | To find a place and its coordinates | Contract |
| Share links: name, lanes, settings, when a link was last opened | To show a read-only view to the people you choose | Contract |
| Your consent and when you gave it | To show that you agreed (section 4) | Legal obligation (art. 6(1)(c)) |
| Technical data: IP address, browser, time of a request | To run, secure and debug the service, for example to limit abuse | Legitimate interest (art. 6(1)(f)) |
We do not ask for more than we need. Notes, places and dates are optional.
4. Sensitive data and data about other people
A life timeline can hold sensitive information, for example about health, relationships, beliefs or the death of someone close. We only process it because you choose to add it, and we ask for your explicit consent when you create your account (art. 9(2)(a) GDPR). You can withdraw that consent at any time by deleting the events concerned or your account.
Your timeline can also mention other people, such as a partner, a child or a grandparent. Please be careful with information about others, and especially with what you share. Private events never show in any share link.
5. Who can see your data
- You. Only you can see and change your timeline when you are signed in.
- People with a share link. Anyone with a link you made can view the lanes you picked for that link, without signing in. They never see private events, hidden lanes, your full birth date, your email address or the coordinates of places. You can delete a link at any time, and it stops working at once. Treat a share link like a key.
- Our service providers, only as far as needed to run Lifeline (section 6).
- Nobody else, unless the law requires it.
6. Service providers
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in | EU: Ireland |
| Vercel | Hosting of the website and its server functions | Server functions in the EU (Dublin). Vercel is a US company |
| Geoapify | Place search | Only the search text and the language reach Geoapify. Our server sends the request, so Geoapify does not see your IP address or who you are |
| Resend | Sending sign-in emails | EU: Ireland. Resend is a US company |
We have a data processing agreement with each provider. Where data may reach the United States, we rely on the EU–US Data Privacy Framework or on the European Commission's standard contractual clauses.
7. How long we keep data
- Your account and timeline: as long as your account exists.
- When you delete your account, we delete your profile, lanes, events and share links at once. Copies in backups disappear automatically within at most 30 days.
- Technical logs: at most 30 days.
8. Your rights
- See and download your data with "Download my data" on your account page, or ask us.
- Correct your data: you can edit everything in the app.
- Delete your data: delete events, lanes, links or your whole account in the app, or ask us.
- Restrict or object to some processing, and withdraw consent at any time.
- Take your data with you: the download is a common, machine-readable file (JSON).
Write to [CONTACT EMAIL]. We may ask you to confirm that the request comes from you. If you are not happy with our answer, you can complain to the Dutch data protection authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority in your own EU country.
9. Cookies and local storage
We only use what the app needs to work. There are no tracking or advertising cookies, so there is no cookie banner.
| Name | Type | What for | How long |
|---|---|---|---|
sb-…-auth-token | Cookie | Keeps you signed in | Until you sign out or the session ends |
lifeline-locale | Cookie | Remembers your language | 400 days |
lifeline-theme | Local storage | Remembers light or dark theme | Until you clear it |
10. Security
Data travels encrypted (HTTPS) and is stored encrypted. Each user can only reach their own data: the database checks this for every request. Share links contain a long random code that cannot be guessed, and shared pages tell browsers not to pass the address on to other sites. No system is perfect: if a data breach affects you, we will tell you and the authority as the law requires.
11. Children
Lifeline is for people aged 16 and older. If you are younger, please do not create an account. If we learn that someone under 16 has an account, we delete it.
12. Changes
We may update this policy, for example when we add a feature. The date at the top shows the last change. For important changes we tell you in the app or by email before they apply.