Your memories deserve more than ordinary privacy.

1. Scope and who we are

This Privacy Policy explains how LifeBook handles personal information when you visit lifebook.family, create an account, create or contribute to a LifeBook, use LifeBook QR products, upload memories, purchase a service, use an AI-assisted feature, contact support or otherwise interact with LifeBook.

LifeBook is operated from Seychelles. The legal operating company, registered address and current privacy contact are displayed in the contact section of this Policy when configured in LifeBook administration.

2. Our privacy principles

• Private by default wherever the product allows it.
• Collect only information reasonably needed for a stated purpose.
• Use personal information fairly, lawfully and transparently.
• Keep information accurate where accuracy matters.
• Protect information with appropriate technical and organisational safeguards.
• Retain information only for as long as necessary or legally required.
• Give people meaningful controls over access, sharing, correction, export and deletion where applicable.
• Do not sell private family memories as a business model.

3. Information we collect

The information LifeBook processes depends on how you use the service.

• Account information such as name, email address, country, preferred language, profile image and account identifiers.
• Life-story information such as names, dates, family relationships, biographies, memories, milestones, captions, photographs, documents, audio, video and other material you choose to preserve.
• Information about contributors, family members, invitees, memorial subjects and other people appearing in a story.
• Payment and order information such as plan, amount, currency, transaction status, order reference and fulfilment information. Sensitive card credentials are normally handled by the payment provider rather than stored by LifeBook.
• QR information including creation, assignment, activation, status, linked LifeBook and security events associated with QR access.
• Technical information such as IP address or a privacy-preserving hash, browser, device, operating system, approximate location, language, timestamps, logs and security events.
• Support, complaint, privacy-request and other communications.
• Information submitted to optional AI-assisted features when you choose to use them.

4. Information about other people

Life stories naturally involve family members, friends and other people. If you provide personal information about another living person, you are responsible for having an appropriate legal basis, permission or authority to do so.

Do not publish highly private, sensitive or harmful information about another person merely because it is part of your recollection. LifeBook may restrict or remove content where necessary to protect rights, safety or comply with law.

5. Sensitive and special-category information

A LifeBook may reveal health, disability, racial or ethnic origin, religion, philosophical beliefs, sexuality, family circumstances, political opinions or other sensitive matters. LifeBook does not require such information unless needed for a feature you request.

Where applicable law requires explicit consent, a substantial public-interest basis, parental authorisation or another specific condition for sensitive information, LifeBook will rely on the appropriate condition before processing it.

LifeBook is not intended to operate as a medical record, health diagnosis service, biometric identification database or credit-scoring service.

6. Children and young people

LifeBook accounts are intended to be controlled by adults. A person must be at least 18 years old to create and control a standard LifeBook account unless LifeBook expressly provides a supervised minor experience in the future.

Under Seychelles data-protection law, a person under 18 is treated as a child for this purpose. A parent or legal guardian may preserve memories involving a child when they have the legal authority to do so.

Where another jurisdiction imposes a different or stronger child-privacy rule, including verifiable parental consent requirements, that mandatory rule applies. LifeBook's 18+ account policy does not reduce stronger local protection.

7. How we obtain information

We receive information directly from you, from another LifeBook user who invites or mentions you, automatically from your device when necessary for service operation or security, and from service providers such as payment, authentication, email, storage and security providers.

We do not intentionally scrape unrelated personal information from public sources merely because it is publicly available.

8. Why we use personal information

• Create, authenticate and secure accounts.
• Store, organise, display and share stories according to selected permissions.
• Operate QR activation and access flows.
• Process orders, payments and product fulfilment.
• Provide contributor, family, legacy and memorial features.
• Provide optional AI-assisted features that you request.
• Respond to support, complaints and privacy requests.
• Prevent fraud, spam, abuse, security incidents and unauthorised access.
• Maintain backups, reliability and service continuity.
• Comply with legal obligations and establish, exercise or defend legal claims.
• Improve product reliability and usability using appropriately minimised or aggregated information.
• Send essential service communications and, where permitted, optional marketing communications.

9. Legal bases

Depending on the jurisdiction and purpose, LifeBook may rely on performance of a contract, steps requested before entering a contract, consent, legitimate interests, compliance with legal obligations, protection of vital interests, establishment or defence of legal claims, or another lawful basis recognised by applicable law.

Where processing depends on consent, you may withdraw consent for future processing. Withdrawal does not make earlier lawful processing unlawful.

10. Private, shared, unlisted, QR-accessible and public content

LifeBook may offer different access levels. Private content is intended for the account holder and authorised users. Shared content is limited to specified contributors or invitees. Unlisted or QR-accessible content can be opened by a person who obtains the relevant link or QR code. Public content may be accessible to anyone and may be indexed by search engines.

A physical QR code can be photographed or copied. Do not rely on possession of the physical QR object as the only protection for sensitive information. Use available access controls.

Anyone who can legitimately view content may be able to copy, screenshot, photograph or otherwise reproduce it outside LifeBook. We cannot control independently retained copies after lawful access.

11. QR access data

LifeBook may record limited technical information about QR activation or access where necessary for security, diagnostics, fraud prevention and aggregated service statistics. A QR scan does not automatically identify a person unless the person is logged in or other information makes identification possible.

12. Artificial intelligence and automated assistance

LifeBook may provide optional tools for writing suggestions, organisation, translation, transcription, image enhancement, restoration, colourisation or other assistance. Information you submit to such a feature may be processed by LifeBook and a configured AI technology provider to provide the requested result.

AI output may be inaccurate, incomplete or invented. You are responsible for reviewing AI-generated suggestions before saving or publishing them. Reconstructed or colourised images may contain inferred details that were not present in the original.

LifeBook does not intend to use private family memories to train a LifeBook-owned public general-purpose AI model. Where an external AI provider is used, processing is subject to the safeguards and contractual arrangements applicable to that provider. LifeBook will provide additional transparency where required by law, including applicable EU AI Act obligations.

LifeBook does not intend to use automated processing to make decisions producing legal or similarly significant effects about users without implementing the safeguards required by applicable law.

13. Service providers and processors

LifeBook may use vetted providers for cloud hosting, object storage, content delivery, cybersecurity, email, payments, customer support, analytics, authentication, backups, AI processing and technical monitoring. Providers receive only the information reasonably required for their role and are subject to contractual or legal safeguards where required.

LifeBook may also disclose information to professional advisers such as lawyers, accountants, auditors or insurers where reasonably necessary.

14. We do not sell private memories

LifeBook does not sell private stories, photographs, recordings or family memories to data brokers or advertisers as its business model.

Some privacy laws use broad definitions of sale, sharing or targeted advertising. If an activity falls within such a definition, LifeBook will provide the notice and opt-out mechanism required by that law.

15. Legal and safety disclosures

We may preserve or disclose information when reasonably necessary to comply with applicable law or valid legal process, respond to a competent regulator or court, prevent fraud or serious abuse, protect safety or rights, enforce our Terms, or establish, exercise or defend legal claims.

We do not voluntarily provide private LifeBook content to authorities without an appropriate legal basis. Where legally permitted and appropriate, affected users may be notified of requests for their information.

16. Business transfers

If LifeBook undergoes a merger, acquisition, financing, restructuring or sale of relevant assets, information may transfer as part of that transaction. Any successor must handle personal information subject to applicable law and existing commitments unless users are lawfully informed otherwise.

17. International data transfers

LifeBook may use infrastructure or providers outside your country. International transfers are handled under the requirements applicable to the data involved.

Safeguards may include adequacy decisions, EU Standard Contractual Clauses, UK transfer mechanisms such as the IDTA or UK Addendum, contractual data-protection clauses, transfer assessments, encryption and other technical measures, localisation where legally required, or another valid mechanism.

18. Retention

LifeBook retains information according to the purpose and legal requirements applying to the record. Account and story content is generally kept while the account or LifeBook remains active, unless you delete it or a lawful retention reason applies. Financial and transaction records may need to be retained after account closure for accounting, tax, fraud-prevention or legal purposes. Security logs and privacy-request records may be retained long enough to investigate incidents and demonstrate compliance.

Deleted content may remain temporarily in protected backups until normal backup rotation removes it. Backups are not intended for ordinary use.

19. Security

LifeBook uses technical and organisational measures appropriate to the nature of the information, which may include encrypted transport, access controls, secure authentication, database controls, audit logging, backups, monitoring, rate limits, software updates and restrictions on administrative access.

No internet service can guarantee absolute security. You are responsible for protecting your password, authentication method and devices and should report suspected compromise promptly.

20. Personal-data incidents

LifeBook maintains processes intended to detect, assess and respond to security incidents. Where an incident creates a notification obligation under applicable law, LifeBook will notify the appropriate authority and affected individuals within the legally required timeframe and provide the information required by that law.

21. Cookies and similar technologies

LifeBook uses essential technologies for authentication, security, sessions and requested functionality. Optional preference, analytics or marketing technologies are used only in accordance with applicable law and the choices available through Cookie Settings.

More information is available in the LifeBook Cookie Policy.

22. Marketing

LifeBook may send essential account, security, billing and transactional communications. Promotional communications are separate. Where consent or another specific legal basis is required, marketing will be sent only when that requirement is satisfied. You may opt out of promotional messages without losing essential service communications.

23. Your privacy rights

Depending on where you live and the law that applies, you may have rights to know or confirm processing, access information, correct information, delete information, restrict processing, object to processing, withdraw consent, receive a portable copy, opt out of sale or sharing, opt out of qualifying targeted advertising or profiling, limit certain uses of sensitive information, appeal certain decisions, and complain to a regulator.

Rights are subject to legal conditions and exceptions. LifeBook may need to verify identity or authority before fulfilling a request and may need to protect the rights of other people appearing in a LifeBook.

24. International privacy-law framework

LifeBook is designed to take account of major privacy and data-protection frameworks when they apply. This list is intentionally broad and does not mean every law applies to every user or transaction.

• Seychelles Data Protection Act 2023.
• European Union General Data Protection Regulation (GDPR), applicable EEA national law and applicable ePrivacy rules.
• European Union Artificial Intelligence Act transparency obligations where LifeBook is a provider or deployer within scope.
• United Kingdom GDPR, Data Protection Act 2018 and Privacy and Electronic Communications Regulations, as amended including relevant changes under the Data (Use and Access) Act 2025.
• United States federal laws that apply to a LifeBook activity, including COPPA for covered child-directed processing, and applicable state comprehensive privacy laws such as California's CCPA/CPRA and equivalent state regimes.
• Applicable US state consumer-health-data laws where LifeBook processes information within their scope.
• Canada's PIPEDA and applicable provincial private-sector privacy laws.
• Brazil's Lei Geral de Proteção de Dados (LGPD).
• Australia's Privacy Act and Australian Privacy Principles where applicable.
• New Zealand Privacy Act 2020.
• India's Digital Personal Data Protection Act 2023 and Digital Personal Data Protection Rules 2025 as their provisions commence.
• Singapore Personal Data Protection Act.
• UAE Federal Personal Data Protection Law and, where relevant, DIFC or ADGM data-protection regimes.
• Saudi Arabia Personal Data Protection Law where applicable.
• South Africa Protection of Personal Information Act (POPIA).
• Switzerland Federal Act on Data Protection.
• Japan Act on the Protection of Personal Information (APPI).
• South Korea Personal Information Protection Act (PIPA).
• Thailand Personal Data Protection Act.
• Indonesia Personal Data Protection Law.
• Philippines Data Privacy Act.
• Malaysia Personal Data Protection Act.
• Türkiye Personal Data Protection Law (KVKK).
• Kenya Data Protection Act, Nigeria Data Protection Act and other applicable African privacy laws.
• Other mandatory national, regional, state or provincial privacy law that legally applies to LifeBook's processing.

25. EU and EEA users

Where the GDPR applies, LifeBook follows the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity/confidentiality and accountability. Data subjects may exercise applicable GDPR rights and may complain to the competent supervisory authority.

Where required, international transfers from the EEA use an approved transfer mechanism and supplementary safeguards appropriate to the circumstances.

26. United Kingdom users

Where UK law applies, LifeBook follows the UK GDPR, Data Protection Act 2018 and applicable electronic-communications requirements as amended from time to time. Applicable rights include access, correction, erasure, restriction, objection and other rights provided by UK law. Complaints may be made to the UK Information Commissioner's Office.

27. United States users

US privacy rights vary by state. Where applicable, LifeBook will provide required rights to access, correct, delete, obtain a portable copy, opt out of sale or sharing, opt out of targeted advertising or qualifying profiling, limit certain sensitive-data uses, use an authorised agent and appeal certain decisions.

LifeBook will not unlawfully discriminate against a person for exercising a protected privacy right. Where required, LifeBook will recognise legally mandated universal opt-out preference signals.

28. India

Where India's Digital Personal Data Protection framework applies, LifeBook will provide notices, consent and withdrawal mechanisms, reasonable security safeguards, grievance handling and data-principal rights required by provisions that are in force. The Digital Personal Data Protection Rules 2025 have phased commencement dates, and LifeBook will apply requirements as they become legally effective.

29. Memorials and deceased people

Privacy law may protect deceased people differently from living people. A memorial nevertheless often contains personal information about living relatives, friends and contributors, and that information remains protected where applicable.

LifeBook may request evidence of authority before transferring control of a memorial or account. In a genuine dispute, editing or access may be temporarily restricted while appropriate evidence is reviewed.

30. Making a request

Use the Privacy Choices page to submit an access, correction, deletion, export, account-closure, consent, objection, sensitive-data, AI, child/guardian, memorial or other privacy request. LifeBook will respond within the timeframe required by the law applicable to that request and may use a legally permitted extension where necessary.

We may verify your identity and authority proportionately before disclosing or deleting sensitive information.

31. Changes to this Policy

LifeBook may update this Policy to reflect legal, technical or service changes. The current version shows its effective and revision date. If a change materially affects how previously collected information is used, LifeBook will provide appropriate notice and obtain consent where the law requires it.