Privacy Policy

01Who is responsible

LifeMuseum is published by Theocharis Panagiotis Siozos, a sole trader established in Greece and trading as DevTaskHub, who is the controller of the personal data described in this policy. Address: Markou Mpotsari 83, 54644 Thessaloniki, Greece. Tax ID (ΑΦΜ): 169481343. General Commercial Registry (G.E.MI.) number: 186989906000. Email: devtaskhub@devtaskhub.com.

This policy covers the LifeMuseum app on iOS and Android, the servers behind its optional online features, and the website lifemuseumapp.com.

No Data Protection Officer has been appointed, because the law does not require one for processing of this kind. Every privacy question or request goes to the email address above.

02What stays on your device

Your exhibits, photographs, videos, dates, places, notes, tags, galleries, Before I Die list, collections, badges, statistics, time capsules, movies and posters are stored in a local database on your phone and in your own photo library.

None of it is transmitted anywhere by default. The app is fully usable with no account and no internet connection at all, and in that mode we can never see any of it.

Because this data lives on your device, it is covered by your device passcode and your own device backups. If you back your phone up to iCloud or Google, your museum goes with it, under Apple’s or Google’s terms rather than ours.

03What leaves your device, and only when you ask

Publishing an exhibit uploads that one exhibit to your public museum: its title, description, place name, date, tags, the name of its gallery and its own photographs and videos. Photographs are re-encoded on your phone before they are uploaded, which removes hidden metadata such as the location where they were taken; videos are uploaded as they are, including any metadata they contain. Nothing else is uploaded. Published content is visible to anyone using the app, and can be seen, screenshotted or copied by them. You can unpublish at any time, which deletes the stored copy and its files.

Signing in stores your email address, which is used only to send you sign-in links and is never shown to other people. Creating a public profile adds a handle, a display name, an optional short bio, an optional profile picture and your museum rank, which are public so that other people can find your museum.

The exhibits you like and the museums you follow are stored with your account, so the app can show them to you and keep the public counts of likes and followers.

Turning on Cloud Sync copies your museum and its media to private, access-controlled storage so it can be restored onto another device. This happens only while the subscription is active and only after you switch it on.

In Couple Mode, an exhibit is shared only when you press Share on that specific exhibit. Its title, description, place, date and photographs then become readable by the one other person in your shared museum, together with the shared museum’s own milestones, such as the day you met, which either of you can add. The files are held in private storage and served through short-lived signed links. Removing an exhibit from the shared museum deletes that copy and its files. The rest of your museum is never visible to them.

Reporting content or a person sends us the report, its reason and any detail you add, what was reported and your account identifier, so the report can be acted on. The app does not tell the person you reported who reported them.

04The website

Visiting lifemuseumapp.com sets no cookies and stores nothing on your device.

To learn whether the site is used, it counts page views and a few interactions, such as presses of the store buttons, each with the page, the language, a rough device type (phone, tablet or computer) and the name of the website that linked to it. It records no IP address, no browser details and nothing that identifies you or can be linked to an account, and it sends nothing at all when your browser asks not to be tracked (Do Not Track or Global Privacy Control). These counts are kept for up to 180 days.

Netlify hosts the website. Like any web host, it processes the technical data of each request, such as the IP address, to deliver the page and to protect the site from attacks. The console at lifemuseumapp.com/admin is used only by the publisher and moderators, and signing in there sets strictly necessary session cookies.

05Why we are allowed to hold it

Where the GDPR applies, our legal basis for handling your account details, published content and shared content is performance of a contract with you: you asked for a public museum, a backup or a shared museum, and it cannot be provided without them.

Our basis for handling reports, blocks and moderation records is our legitimate interest, and our legal obligation, in keeping a user-generated-content service safe and lawful.

Location, camera, notifications and the daily reminder are handled on the basis of the permission you give, which you may withdraw at any time in your device settings.

The website’s visit counts and our security measures rely on our legitimate interest in running a secure service and in knowing, in total, whether it is used. You can object at any time by writing to us.

Your email address is needed only for the online features. Without it they cannot work, and everything else in the app keeps working with no account at all.

06Who else touches it

Supabase hosts the database and the file storage for every online feature. Data is stored in the European Union (Ireland).

Apple and Google process every payment, receipt and refund, and RevenueCat verifies those receipts so the app knows what you own. None of them receives your museum.

Expo delivers app updates. Checking for an update sends the usual technical request information, such as an IP address and the app version.

Resend delivers the emails the online features send: the sign-in link you ask for, to your own address, and the email a report generates, to our own inbox.

Netlify hosts the website lifemuseumapp.com, as described above.

That is the complete list. There is no advertising network, no analytics SDK, no attribution SDK, no data broker and no social-media tracking pixel anywhere in this app.

Supabase, RevenueCat, Expo, Resend and Netlify process data only on our instructions, as our processors. Apple and Google act as independent controllers for app distribution and payments.

RevenueCat, Expo, Resend, Netlify, Apple and Google are based in the United States or may process data there. Such transfers rely on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, for providers certified under it, or on the European Commission’s standard contractual clauses. You can ask us for a copy of the safeguards that apply.

We disclose personal data to courts, the police or other public authorities only where the law obliges us to.

07What we never do

We do not show advertising, and we do not sell, rent, trade or share your data with advertisers or data brokers, for money or for anything else.

We do not read, scan, index, profile or train anything on your photographs, videos or writing. LifeMuseum contains no artificial intelligence or machine-learning feature, and nothing you put into it is sent to any AI service, ours or anyone else’s. If that ever changes, this policy will say so before the feature ships, and it will be something you switch on rather than something that happens to you.

We do not upload anything sealed in a time capsule or held in the Secret Vault, under any circumstances, including Cloud Sync and Couple Mode.

We do not build advertising profiles, track you across other apps or websites, or make decisions about you by purely automated means that have legal or similarly significant effects. The only automatic step in the app is a safety measure: a published exhibit or profile reported by ten different people is hidden until a person reviews the reports.

08Permissions and why

Photo library: to let you choose the photographs and videos that become exhibits, and to save exported movies and posters back to your library.

Camera and microphone: only if you capture a moment directly into an exhibit.

Location: optional, and only when you tap “Use my location” while creating an exhibit. The coordinates are stored on your device with that exhibit.

Notifications: only for the daily reminder you can switch off, and to tell you when a time capsule you sealed is ready to open.

Face ID, Touch ID or fingerprint: only to open the Secret Vault, if you choose to lock it that way. The check is carried out by your phone’s operating system; the app learns only whether it succeeded and never receives any biometric data.

Every one of these can be refused, and refusing any of them leaves the rest of the app working.

09Payments

In-app unlocks and the Cloud Sync subscription are processed by Apple or Google. They handle the payment, the receipt and any refund under their own terms and privacy policies.

We receive confirmation that a purchase is valid, what was bought and a purchaser identifier. While you are signed in, that identifier is your account identifier, so your purchases follow your account. We never receive, store or transmit a card number, and we cannot charge you ourselves.

10How long anything is kept

Published exhibits and your public profile are kept until you delete them or delete your account.

A Cloud Sync backup is kept until you delete it with Delete the cloud backup on the Cloud Sync screen, or delete your account. When a subscription ends, the backup stops updating but is not deleted automatically, so it is still there if you subscribe again.

Reports are deleted automatically twelve months after they were made, and earlier if the reported content, the reported account or the account that made the report is deleted. Records of moderation decisions are also kept for twelve months.

Website visit counts are kept for up to 180 days.

Deleting your account removes your profile, your published exhibits, your shared exhibits, your backup, your likes, your follows, every file you uploaded, and the login itself. This is immediate and cannot be undone.

Where the law obliges us to keep something for longer, for example to preserve evidence at the request of an authority, we keep only that, and only for as long as required.

11Your rights

You can delete everything on your device at any time from Me → Empty the museum. This is immediate and irreversible.

You can unpublish anything you published, which deletes the stored copy and its files.

You can delete your entire account from Me → Delete account, inside the app, without asking us and without writing to anyone.

Under the GDPR you may also ask for a copy of your data, including in a portable, machine-readable format; have it corrected or erased; restrict its processing; object to processing based on our legitimate interests; and withdraw any consent at any time, without affecting what was done before. Write to devtaskhub@devtaskhub.com. We answer within one month, which the law allows us to extend by two further months for complex requests, and we may ask you to confirm that the account is yours.

You also have the right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. In Greece this is the Hellenic Data Protection Authority, Kifisias 1-3, 115 23 Athens, www.dpa.gr.

12Security

Everything that leaves your device travels over TLS. Private storage is reachable only through row-level rules bound to your own account, and shared files are served through links that expire.

No system is perfect, ours included. Keep your own copies of anything irreplaceable, and treat anything you publish as public permanently, because other people can copy it before you change your mind.

If a personal data breach is likely to put your rights and freedoms at high risk, we will tell you without undue delay, as the law requires.

13Children

LifeMuseum is intended for people aged 16 or over, and the app asks you to confirm your age before an account is created. We do not knowingly collect personal data from anyone under 16. If you believe someone under 16 has created an account, write to us and we will delete it.

14Changes to this policy

If this policy changes materially, we will tell you in the app or by email before the change takes effect, and the date at the top will change.