Privacy Policy

Last updated September 19, 2026

This policy describes the Lifespan iPhone app. Your portrait photos can contain faces; the sections below explain how the app handles those images and the limits of deletion.

1. Portrait photos and face data

Lifespan accesses the camera after you grant permission and saves a portrait when you take a photo. These photos contain visible faces and are stored with a capture date and the family profile you select. Lifespan does not detect or recognize faces, identify people from their faces, or extract or store facial landmarks, facial coordinates, face meshes, depth maps, biometric templates, or other facial measurements. The face, eye, and mouth guides shown over the camera are fixed visual guides; they do not scan, measure, or track a face.

2. How portrait photos and face data are used

Lifespan uses your portraits only to display your family photo journeys and to create, preview, and export the films you request, including side-by-side films. Photo storage and film creation take place on your device. Lifespan does not use portrait photos or face data for authentication, advertising, marketing, tracking, identity profiling, facial analysis, or training artificial intelligence or machine-learning models. Family names and birthdays are entered by you, not inferred from faces.

3. Storage, disclosure, and sharing of face data

Portrait files and their associated records are stored in Lifespan’s private app storage on your iPhone. Generated films containing those portraits are stored in the app’s temporary directory. We do not receive these photos or films, store them on our servers, or disclose them to advertising networks, analytics providers, data brokers, or other service providers. Lifespan does not automatically upload portrait photos or face data. If you choose to share or save a film using Apple’s share sheet, the film is sent to the app, service, person, or location you select. That destination may store the film under its own policies. Depending on your device backup settings, locally saved app data may also be included in an iCloud or computer backup that you control. We cannot access those backups.

4. Retention and deletion of face data

Saved portraits and their associated records remain in the app until you delete the photo, remove the corresponding family profile, or delete the app. There is no automatic expiry period for saved portraits because the app supports family journeys over many years. Deleting a photo removes its saved image and journey entry; removing a family profile removes that profile and its saved portraits. Previously generated films are separate files and are not deleted when a source photo or profile is deleted. Generated films are temporary files with no fixed deletion deadline in the current app; they may remain until iOS clears temporary storage or you delete the app. Deleting the app, rather than offloading it, removes its local app data. Copies you have saved or shared outside Lifespan and copies in backups are not removed by in-app deletion or by deleting the app. You must manage those copies through the relevant destination or backup settings; their retention depends on that destination and your settings. We retain no server-side copies of portrait photos or face data.

5. Other information and device permissions

Lifespan also stores family names, birthdays, reminder preferences, and photo timestamps locally. Camera permission enables portrait capture, and notification permission enables optional local reminders. You can revoke camera or notification permission in iOS Settings. Revoking camera permission prevents further camera access but does not delete existing portraits. A music file you select is accessed and copied locally to add music to a film. Optional in-app purchases are processed through Apple’s StoreKit; Lifespan does not attach portrait photos or face data to purchase requests. Lifespan does not require an account or include advertising or third-party analytics.

6. Children’s privacy

Lifespan is intended for parents and guardians documenting their families. Parents and guardians control family profiles, photography, film creation, sharing, and deletion. Children do not create accounts or submit portrait photos to us.

7. Contact

For privacy or support questions, contact freeunioncafe@gmail.com.