Privacy Policy
Lacrydia is a place to keep your photos and share them with people you choose. This page explains what we store, why, who can see it and how to delete it. We do not sell your data, we show no ads and we do not track you across other apps or sites.
Who is responsible
The controller of your personal data is Joel Bergström, Gävleborg, Sweden (“Lacrydia”, “we”). Contact: support@lacrydia.com.
What we collect
| Account | Email address, password (stored only as a one-way hash by our authentication provider), username, display name, optional bio and profile picture. |
|---|---|
| Your content | Photos (a full-size copy and resized copies), captions, branches of your Tree, playlists, comments, messages, likes, saved items, and who you follow, befriend or block. |
| Your choices | Visibility of each photo, branch or playlist (private, friends or everyone), and who may message you. |
| Device and activity | The time you were last active, and a push notification token, if you allow notifications, so we can deliver messages, friend requests, likes and comments to your phone. |
| Safety | Reports you send or that are made about your content, moderation decisions, and short-lived counters used to limit abuse (for example how many uploads you made in the last hour). |
| Usage counts | Daily totals of events such as “account created” without any user ID, and a daily active-user marker made with a hash that changes every day, so it cannot be linked to you or across days. |
| Waitlist and website | If you join the waitlist on lacrydia.com we store your email address, when you signed up, and a one-way hash of your IP address that is used only to limit repeated sign-ups. We use the address only to tell you when Lacrydia opens, and we will remove it if you write to support@lacrydia.com. The website sets no cookies and has no analytics or advertising trackers; it only remembers, in your browser’s session storage, that you have already seen the intro animation. |
The app asks for access to your photos or camera only when you choose to add a photo, and it only reads the photos you pick, not your whole library.
Photos and location
Before a photo leaves your phone it is re-encoded, which removes metadata embedded in the file, including the GPS location where it was taken. The full-size copy you upload stays in a private storage area; other people only ever see resized copies, and only if your visibility settings allow it. When you share a photo from the viewer, a medium-size copy is shared, never the original.
Why we use your data
- To provide Lacrydia (your account, Tree, playlists, sharing, messages): this is necessary to perform our agreement with you.
- To keep the service safe (rate limits, reports, removing abusive content, banning abusive accounts): our legitimate interest in a safe service and our legal duties.
- To understand whether the app works (anonymous daily counts): our legitimate interest.
- To send push notifications: your consent, which you give in the system prompt and can withdraw any time in Settings.
We do not use your photos to train AI models, and we do not read your private content except where needed to handle a report or where the law requires it.
Who can see your content
- Private: only you. Friends: people whose friend request you accepted. Everyone: other signed-in Lacrydia users.
- If you block someone they can no longer see your content and you no longer see theirs.
- Messages are visible to the people in that conversation.
- Our moderators can see reported content in order to review it.
Who processes data for us
| Supabase | Database, authentication, file storage and the server functions that resize photos and send notifications. Data is stored in the EU (Ireland). |
|---|---|
| Expo (Expo Application Services) | Delivers push notifications to Apple’s notification service and sends app updates. It receives your push token and basic device and app-version information. |
| Apple | Delivers push notifications to your iPhone and distributes the app. |
| Email delivery | Verification and password-reset emails are sent through Resend. |
If any of these providers handle data outside the EU/EEA, the transfer is covered by EU Standard Contractual Clauses.
How long we keep it
- Your content stays until you delete it or delete your account. Photos you delete are removed from view immediately and from storage within 30 days.
- When you delete your account, your profile is hidden at once, your files are removed and your account and its content are deleted. Messages you sent remain visible to the other person, shown as from a “deleted user”.
- Backups can hold deleted data for up to 30 days before they expire.
- Report records are kept for 12 months so we can handle repeat abuse and legal claims.
Your rights
You can ask to access, correct, export, delete, restrict or object to our use of your data. Most of this you can do yourself in the app, under Settings → Data: Export library gives you a copy of your branches, photo details, playlists and likes, and Delete account removes your account for good. See how to delete your account. For anything else write to support@lacrydia.com. You can also complain to your data protection authority; in Sweden that is the Swedish Authority for Privacy Protection (IMY), imy.se.
Children
Lacrydia is not for children under 13. If we learn that an account belongs to a younger child we delete it.
Security
Connections to our servers are encrypted, files are kept in private storage, and database access rules ensure that people can only read what your settings allow. No service is perfectly secure, so please use a strong password that you do not use elsewhere.
Changes
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows the latest version.