Your memories are yours.

I Lived It is a private home for your photos, videos, and memories. We follow these principles:

• Device-first. Your originals stay on your iPhone until you choose to share them.
• Metadata-first sync. By default we sync only thumbnails and metadata needed to power your library.
• Ownership-backed records (OCIDs). You get a cryptographic receipt of authorship for each asset you register.
• No sale of personal data. Ever. Your content is never used to train third-party models without your explicit consent.

The invitation beta uses PostHog to connect website visits, invitation claims, TestFlight link clicks, and activity in the iPhone app. Tester profiles include the account name, verified contact details, account identifier, invitation attribution, and join date. Our team can review invitation usage and tester activity to support the beta and improve the experience. A TestFlight click is recorded separately from first authenticated app activity.

During this testing period, website and app session recordings and Liv conversation diagnostics may contain visible photos, writing, and prompts and responses. Authentication screens, passwords, sign-in codes, and invitation codes are masked or excluded. Do not enter information into Liv or other recorded surfaces that you do not want included in tester diagnostics. Connecting Photos does not itself authorize importing originals or sharing them with other people.

An invitation admits the recipient to iLivedit. It does not share the inviter’s private photos, circles, or communities. Private labels are visible to the issuer and authorized invitation administrators.

When you use I Lived It, the following categories of data may reach our servers:

• Account info: email, name, and Apple/Google sign-in tokens via Clerk. Used to authenticate and keep your vault yours.
• Photo metadata: EXIF (date, camera model, dimensions, optional GPS), file hash, and AI-generated caption/tags. GPS can be stripped before sync — see §6.
• Thumbnails + optionally originals: 400 px JPEG thumbnails are always synced; originals are synced only when you opt in per-asset for ownership records or sharing.
• Billing info: subscription status via Stripe. We never see your card number.
• Device + usage signals: IP, user agent, coarse timing. Used for security + abuse prevention per §8.

• Run your photo vault, search, collections, and indexing.
• Issue ownership-backed records (OCIDs) and verify them publicly when you share them.
• Detect duplicate uploads, abuse, and fraud. Retain an audit log of protected actions.
• Send account + transactional email (sign-in, receipts) via Clerk and Resend.

We use GPT-6 Astra through Microsoft Foundry to generate captions, tags, and scene categorization for your photos. This is governed by our Personal Processing Agreement (PPA), a consent receipt issued on signup. You can view it at /settings → PPA.

We send only authorized content to the AI providers used for each feature. Storage, retention, and training controls vary by provider and service. We have not established zero retention across all of these services.

We share data only with the minimum set of processors needed to run the service:

• Supabase (database + storage, US-East)
• Clerk (authentication)
• PostHog (product analytics, tester profiles, session replay, and Liv diagnostics)
• Stripe (payments + Identity verification)
• OpenAI (AI indexing under zero-retention)
• Resend (transactional email)
• Vercel (web hosting), Fly.io (workers), Sentry (error tracking)

We will disclose information to law enforcement only under a valid legal process, and we publish a transparency report annually.

• GPS stripping. Toggle in Profile → Privacy. When on, latitude/longitude is stripped before any sync.
• Download everything. Export a zip of your vault from Profile at any time.
• Delete your account. Profile → Account → Delete. We hard-delete within 30 days and notify you on completion.
• Revoke PPA consent. Stops all future AI indexing immediately. Past AI-derived data is removed within 7 days.

All data is encrypted in transit (TLS 1.3) and at rest. OCIDs are Ed25519-signed, OpenTimestamps-anchored, and independently verifiable at /v/OCID-…. Uploads pass a magic-byte validator to prevent disguised file types.

We log an audit record for sensitive actions (uploads, AI search, OCID issuance, billing changes) and apply rate limits per user. We retain abuse logs for 90 days.

I Lived It is not directed to children under 13. We do not knowingly collect information from anyone under 13.

Data is stored in the United States. By using I Lived It from outside the US you consent to transfer and processing in the US under the protections of this policy.

We'll notify you in-app and by email at least 14 days before any material change takes effect.

Questions or requests? Email privacy@ilivedit.ai. We respond within 10 business days.