Privacy Policy
Effective date: May 5, 2026
1. Who we are
Lenz Tales (“we”, “us”, “our”) is a personal storytelling app operated by [TODO: Operator Name / Entity], reachable at support@lenztales.com. This Privacy Policy explains what information we collect, why, how we use it, and the choices you have.
2. Information we collect
Information you give us:
- Account information — email address and basic profile when you sign in (including via Google Sign-In or Sign in with Apple).
- Content you create — photos, videos, voice recordings, transcripts, and text. By default this stays on your device.
- Support requests — your email and the message you send.
Information collected automatically:
- Device & log data — device type, OS, app version, crash logs, basic diagnostics. We do not use third-party advertising trackers.
Information from your device permissions:
- Microphone — only when you actively record. Audio is processed for transcription.
- Camera & Photo Library — only when you actively capture or import.
- Location — optional. If granted, used for geofence-based capture prompts; geofence checks run on your device.
- Notifications— optional. Used to remind you to capture today’s prompts.
3. How we use information
- To provide and maintain the Service.
- To generate transcripts of your recordings (see section 4).
- To generate optional reflections or story structures you opt into (see section 4).
- To sync your data across your devices, only if you enable cloud sync.
- To communicate with you about changes, support, and important notices.
4. AI features
When you use AI features (transcription, story-structure generation, daily-roll reflection), the relevant content is sent to one or more service providers for processing on our behalf: Anthropic, Inc. (Claude API) and OpenAI, Inc. (Whisper, GPT). Per their published API policies, these providers do not use API inputs to train their general-purpose models. They may temporarily store inputs for service operation and abuse prevention. Please review their privacy policies for details.
5. Cloud sync (optional)
If you enable cloud sync, your stories, diary entries, transcripts, and audio files are encrypted in transit and stored in our backend infrastructure (provided by Supabase, Inc.) so they’re available across your devices. Cloud sync is off by default and can be turned off any time in Settings. Disabling cloud sync removes your data from our servers within 30 days.
6. Third-party processors
We rely on these service providers to run Lenz Tales:
- Supabase, Inc. — authentication, database, file storage (US).
- Anthropic, Inc. — AI text generation (US).
- OpenAI, Inc. — AI transcription and text generation (US).
- Google LLC — Google Sign-In (only if you choose it).
- Apple Inc. — Sign in with Apple (only if you choose it).
- Resend, Inc. — email delivery for support and account-deletion requests sent from our website (US).
We do not sell your personal information, and we do not share it with third parties for advertising.
7. International data transfers
Most of our processors are based in the United States. If you use Lenz Tales from outside the US, your information may be transferred to and processed there under appropriate safeguards (such as standard contractual clauses) where required by your local law.
8. Data retention
- On-device data — kept until you delete it.
- Cloud-synced data — kept until you delete it or close your account; deletion removes it within 30 days.
- Support emails and account-deletion requests — kept up to 24 months.
- Logs and diagnostics — kept up to 12 months.
9. Your rights
Subject to your jurisdiction, you have the right to access, correct, delete, export, restrict, or object to processing of your personal information, withdraw consent where we rely on it, and lodge a complaint with your local data-protection authority. To exercise any of these rights, email support@lenztales.com from the address on your account.
10. Account & data deletion
You can request deletion of your account and any cloud-synced data by visiting /account/delete or by emailing support@lenztales.com with subject “Delete my account”. Requests are processed within 7 business days. Content you have already exported (e.g., to your Photos app or shared elsewhere) is outside our control.
11. Children
Lenz Tales is not directed to children under 13 (or under 16 in regions of the EU/UK that require). We do not knowingly collect personal information from children under those ages. If you believe a child has provided us information, contact us so we can delete it.
12. Security
We use industry-standard measures to protect your information: on-device storage uses platform-level encryption (Keychain on iOS, Keystore on Android), data in transit is encrypted with TLS, and cloud-synced data is encrypted at rest by our infrastructure provider. No system is perfectly secure. To report a vulnerability, email support@lenztales.com.
13. Region-specific notices
EEA / United Kingdom (GDPR). The legal bases for processing are: performance of a contract (delivering the app), your consent (location, notifications, optional AI features, optional cloud sync), and our legitimate interests in keeping the service working and secure. The data controller is Lenz Tales (contact above).
California (CCPA/CPRA).We do not “sell” or “share” your personal information for cross-context behavioral advertising as defined under California law. You have the right to know, delete, correct, and opt out of any sale or sharing (which we do not engage in). Email support@lenztales.com to exercise these rights.
14. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the app or by email. The “Effective date” at the top reflects the latest version.
15. Contact
Questions or requests? Email us at support@lenztales.com.