Privacy Policy

The short version

Life in Colours is a private place for your own reflections. Your glimmers, colours, and photos belong to you. We collect only what the app needs to work, we never sell your data, and we show no advertising. If anything in this policy is unclear, write to us — we will answer plainly.

Who we are

Life in Colours (lifeincolours.app) is an independent product. For anything privacy-related, contact hello@lifeincolours.app.

What we collect

• Account details — your email address and a password (stored only as a secure hash, never in readable form). If you choose to sign in with Google, we receive your name and email address from Google instead.
• Profile details — your first name, your date of birth, and the lifespan you choose for your Colour Field. Your date of birth is stored encrypted (AES-256-GCM); it exists only to lay out the weeks of your life.
• Your content — the colours you name, the glimmers you record (notes, dates, and the colours you assign), and any photos you attach. Photos are stored in private storage that is never publicly reachable, and location metadata (EXIF / GPS) is removed from every photo when it is uploaded.

We do not collect your contacts, your location, or anything from your device beyond what you deliberately put into the app.

How we use it

Solely to provide Life in Colours to you: to sign you in, to draw your Colour Field, and to keep your glimmers safe. We do not sell or rent your data, we do not use it for advertising, and we do not build profiles of you for anyone else.

How we protect your data

We take particular care with sensitive data — your account credentials, your date of birth, the private content you record, and any data or access tokens we receive from Google.

• Encryption in transit — all traffic to and from Life in Colours travels over HTTPS (TLS), so your data is encrypted whenever it moves across the network.
• Encryption at rest — our database and file storage are encrypted at rest by our infrastructure providers.
• Additional application-level encryption — the most sensitive fields are encrypted again by us, in the app, before they ever reach the database, using AES-256-GCM with keys held only in our server environment and never stored in the database. This covers your date of birth and the access tokens from any Google account you connect, so the database only ever holds opaque ciphertext for these.
• Passwords — stored only as a secure one-way hash, never in readable form.
• Access controls — your content is protected by row-level access rules so that you can only reach your own data. Photos are kept in private storage that is never publicly reachable, and location metadata (EXIF / GPS) is stripped from every photo on upload.

Where your data lives

We use a small number of infrastructure providers to run the app. These are the only parties we share or transfer your data with, and each processes it solely on our behalf:

• Supabase — database, authentication, and private file storage.
• Vercel — hosting, plus privacy-friendly analytics that tell us how many people visit and whether pages are fast. These analytics use no advertising cookies and do not track you across other websites.

These providers process data on our behalf and under our instructions; they do not use your content for their own purposes.

Cookies

We use only the cookies needed to keep you signed in. There are no advertising or cross-site tracking cookies.

Google services

Signing in with Google is optional. If you use it, Google shares your name and email address with us so we can create and sign you into your account.

Life in Colours can also connect to Google Photos, so you can bring photos you choose into the app and turn old memories into glimmers. This connection is entirely optional and separate from signing in. We only ever receive the photos you explicitly select in Google’s own picker — we cannot browse your photo library. A copy of each selected photo is stored in your private storage (with location metadata removed); photos you do not turn into glimmers are deleted automatically after a retention period. You can disconnect Google Photos at any time, which immediately revokes our access.

Who we share Google user data with. We do not sell, rent, or trade any data we receive from Google, and we do not share, transfer, or disclose it to any third parties for their own purposes. The only parties that ever process Google user data are the infrastructure providers who run the app strictly on our behalf and under our instructions: Supabase (which stores your account, connection tokens, and the photos you import) and Vercel (which hosts the app that processes requests). These providers act as our processors and are not permitted to use your Google data for their own ends. We do not use Google user data to train, develop, or improve any generalised or artificial-intelligence models. The only other circumstance in which we would disclose it is where we are legally required to do so — for example, in response to a valid legal request — or to protect the rights and safety of our users.

Life in Colours’ use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing

Your glimmers are private by default. Nothing you record is ever published, made publicly linkable, or visible to other users unless you deliberately share it.

Retention and deletion

We keep your data for as long as you have an account. If you want your account and everything in it deleted, email us and we will do so — completely, including stored photos. You can also ask for a copy of your data at any time.

Your rights

Wherever you live, you can ask us what we hold about you, ask for corrections, ask for a copy, or ask for deletion. If you are in the EEA or UK, these are your rights under the GDPR, and you also have the right to complain to your local data protection authority. We would rather you talked to us first.

Children

Life in Colours is not directed at children under 16.

Changes to this policy

If we change this policy in any meaningful way, we will update this page and the date at the top. We will never quietly weaken the commitments above.