Privacy

About this policy

This policy explains how Lifetime Wishes handles information in our website and app. Lifetime Wishes, LLC operates Lifetime Wishes and is responsible for the personal information used to provide the service. For privacy questions or requests, email support@lifetimewishes.com.

Information we collect

Account information includes your name, email, birth date, password hash, account type and sign-in details. Passwords are stored as hashes, not readable passwords. Invitations and sign-in links use protected tokens.

You provide contact names, relationships, birth dates, optional email addresses and photos, messages, media, schedules, prompts and sharing preferences. We also keep sender links, approval decisions and notes, and first-open information for recipient messages.

Payment records include subscription status, billing identifiers, dates, amounts, refunds and usage. Stripe collects payment details. We do not store complete card numbers.

We use first-party usage analytics for page visits, account setup and completed purchases, using fixed interface labels and opaque identifiers rather than family content or contact details.

We process limited technical information, such as IP addresses and request or error information, to secure the service, enforce rate limits and diagnose problems. We do not need your phone number to use Lifetime Wishes.

How we use information

We use information to create and secure accounts, check age eligibility, provide messages and media according to their schedules, support parental controls, process payments, send emails you request or need for your account, and respond to support requests.

We use age information to enforce parent registration at 18 or older and recipient access at 13 or older. We do not create an account or save the birth date entered during an under-13 recipient check. Birth dates previously supplied by a parent for their contacts remain part of the parent’s contact record.

Where relevant law requires a legal basis, we use information to perform our agreement with you, meet legal obligations, protect the service through legitimate interests, or carry out choices for which you give consent. We do not sell personal information or use private family messages for targeted advertising.

Who can see messages

Parents manage their own messages and contacts. Invited recipients see only messages addressed to them that meet the current access rules. While a message is locked, recipients do not receive its body, attachments, media or saved prompt text; its title or date may appear unless hidden using the available controls. You can hide a locked message’s title or date using the available controls.

Other linked senders can write to an approved child but do not gain access to the parent’s private vault. Until the recipient turns 18, the parent reviews those messages before recipient access. From 18, parents no longer see or manage other senders’ messages unless those senders share them with the parent. A sender may see the first recorded opening of their own message.

Only family members you choose can search entries you explicitly add to your library, and shared search requires your active trial or Family plan access. Private messages to others are not shared by this permission, and locked content stays locked. If your trial expires without payment, already-opened messages remain open and messages scheduled for later are held until you choose the Family plan. Messages sent while on the Family plan keep their schedules after payment ends.

Invite emails and shared invitation links do not include message content. Anyone with a sign-in link may be able to sign in until it expires or is used, so keep it private.

Service providers

Stripe processes payments, subscriptions, billing portal activity and refunds. Resend processes transactional email, including invitations, welcome messages, approval notices and requested sign-in links. Replit provides hosting, the database, storage and infrastructure used to operate Lifetime Wishes. These providers process information needed for their services under their applicable terms and privacy policies.

If you choose AI help, the text or instructions needed for that request are sent through Replit AI integrations to the model provider, including OpenAI where used. Do not put sensitive information into an AI request unless you are comfortable sharing it for that processing. AI use is optional.

Providers may process information in countries other than your own. Where required, we use safeguards for international transfers and can provide information about the safeguards that apply to your data at support@lifetimewishes.com. We may disclose information when required by law, to protect people or the service, or as part of a business transfer subject to appropriate privacy protections.

Device storage and security

Signed-out messages and contacts can remain on your device. Signing in may copy saved device content to your account without removing the originals. Signing out does not delete local content.

Native sign-in tokens use secure device storage where supported. The web app uses browser storage for its session and local data. We use encrypted connections and access controls, but no system can guarantee absolute security. Protect shared devices and clear local content or browser storage when you no longer want it there.

Retention, deletion and export

We keep account content while you keep your account and content available, including after trial expiry, cancellation, payment lapse or a refund. These changes alone do not delete your writing or media. You can still read and export your content. Drafts are not automatically deleted. A failed renewal payment has a 14-day grace period from its due date; cancellation does not add a grace period after paid access ends.

You can export your messages and contacts for free; the export includes temporary links to media, so download each media file before its link expires. You can also delete messages using the app. For account deletion or privacy requests not available in the app, email support@lifetimewishes.com. We verify your identity before releasing or deleting account information.

After deletion, information is removed from active use; copies in restricted backups remain until those backups are replaced or deleted under our retention schedule. We retain billing, fraud-prevention, security and legal records only as long as needed for those purposes or applicable law. Information a recipient already saved outside the service is not removed from their device by your deletion request.

If Lifetime Wishes closes, we will email account holders when the 60-day free export window begins and give the export deadline and the date scheduled access ends. During those 60 days, you can export your messages and download their media. Account content will not be deleted before the export window ends.

Your privacy rights

Depending on where you live, you may request access, correction, deletion, portability or limits on certain processing, object to processing based on legitimate interests, or withdraw consent where consent is the basis. Contact support@lifetimewishes.com. We respond within applicable legal deadlines and do not penalize you for exercising privacy rights.

You may also raise a concern with your local data protection authority. Some records must be retained to comply with law even after a deletion request. We will explain any applicable exception.

Changes and contact

We update this policy when our practices change. We notify account holders of material changes before they take effect and show the current update date on this page.

For privacy, billing or account support, email support@lifetimewishes.com.