Privacy Notice

Last updated: 8/10/2026

1. Who we are

This Privacy Notice explains how LLSI (“LLSI”, “we”, “us”) collects and uses personal data in connection with the LLSI Wellness Tracker (the “Service”). LLSI is the data controller of the personal data described below.

2. What personal data we collect

• Account data: your name, email address, and login credentials.
• Profile preferences: your chosen time zone and display name.
• Reminder content: the titles, dates, times, and categories of the reminders you create.
• Entitlement data: whether you have purchased Full Access, the unlock date, and a payment reference from Paddle.
• Support communications: messages you send us when requesting help.
• Technical data: IP address, device and browser information, and limited usage logs needed to keep the Service running securely.

Payment card details are collected and processed directly by Paddle. We do not see or store full card numbers.

3. Why we use your data and our legal basis

• To provide the Service — create your account, save reminders, send in-app and browser notifications. Legal basis: performance of our contract with you.
• To process purchases — record entitlements after Paddle confirms a successful payment. Legal basis: performance of our contract with you.
• To secure the Service — detect and prevent fraud, abuse, and unauthorised access. Legal basis: our legitimate interests in keeping the Service safe.
• To support you — respond to your questions and improve the Service based on feedback. Legal basis: legitimate interests and contract performance.
• To comply with law — for example, retaining purchase records for tax and accounting. Legal basis: legal obligation.

4. Who we share your data with

We share personal data only with the categories of recipients listed below:

• Paddle.com — our Merchant of Record. Paddle processes payments, manages subscriptions where applicable, handles tax compliance and invoicing, and assists with refunds. Their handling of your data is governed by Paddle’s Privacy Notice.
• Hosting and infrastructure providers — used to host the Service, store the database, and authenticate users.
• Identity providers — if you choose to sign in with Google, Google shares basic profile information (name, email) with us to create your account.
• Professional advisers — accountants and lawyers, where strictly necessary.
• Authorities — when required by law, court order, or to protect our legal rights.

We do not sell your personal data.

5. International transfers

Our service providers may process data outside your country of residence, including in jurisdictions whose data protection laws differ from your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.

6. How long we keep your data

We keep account data and reminder content for as long as your account is active. If you delete your account or ask us to delete your data, we will delete or anonymise it within a reasonable period, except where we are legally required to retain certain records (for example, purchase records held for tax purposes, typically up to 5 years).

7. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of your data (right to be forgotten);
• restrict or object to certain processing;
• request a copy of your data in a portable format;
• withdraw consent where we rely on it;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us using the details in section 11. We will respond within the timeframes required by applicable law (within one month under the UK/EU GDPR).

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption of data in transit, strict access controls, and authenticated database access. No system is perfectly secure, but we take security seriously and act promptly on any credible report of a vulnerability.

9. Cookies and similar technologies

We use a small number of cookies and similar storage technologies that are essential for the Service to work — for example, to keep you signed in. We do not currently use third-party advertising cookies. If we add analytics or marketing cookies in the future, we will update this notice and, where required, ask for your consent.

10. Children

The Service is not directed to children under 13 (or the equivalent minimum age in your country). Parents may use the Service to track reminders for their children, but children should not create their own accounts.

11. Contact us

For any privacy questions or to exercise your rights, contact LLSI through the support email shown in the app or at the address provided with your purchase receipt.

12. Changes to this notice

We may update this Privacy Notice from time to time. If we make a material change, we will give reasonable notice through the app or by email.