Privacy — review draft

Local review draft — not an active policy or agreement

This is an unfinished local page foundation for review. It is not approved for publication, has no effective date and does not request your agreement or consent.

Before publication, William and qualified reviewers must confirm the legal operator and public address, accountable privacy contact, selected countries, minimum age and any parental-consent process, required languages, retention periods, provider settings and contracts, and the exact release features.

The selected support and privacy mailboxes still need delivery, monitoring and authority checks. No response time is promised. This page does not change an accepted agreement or a historical record.

Website storage & requests

The current local website serves pages, scripts, images and its bundled Manrope font from the same website origin. Page navigation can request or prefetch another page. Browsers may keep ordinary cached resources and navigation history.

The local browser audit found no site cookies, localStorage, sessionStorage, IndexedDB databases, Cache Storage entries or registered service workers in the tested pages and interactions. No visitor analytics, advertising pixels, external scripts or fonts, embedded third-party players, or contact forms were observed. Interactive examples use temporary page state.

These are local test findings, not a claim about a deployed host. Hosting, CDN, domain and security providers may receive IP addresses, requested URLs, timestamps, browser information and request or security logs. Their actual configuration, access, locations and retention still need provider verification.

No cookie banner is included in this local foundation because the audit found no nonessential storage or tracking to control. The deployed configuration and applicable country rules must be reviewed again before publication or any technology change.

Personal content in the app

Guest and account spaces keep onboarding answers, preferences, notes, tasks, routines, study files, recordings and focus history locally. Signing in does not by itself upload this personal content to a developer server.

Local storage does not mean a copy can never leave your iPhone. Your selected exports, sharing, connected providers and device backups can create separate copies. A recipient or backup provider controls those copies under its own settings and responsibilities.

Accounts, permissions & payment providers

Account and authentication processing is separate from local personal content. The development account setup uses Supabase and authentication email delivery; final production configuration and provider review remain open. You choose optional permissions and connected services. Disconnecting app access does not erase provider originals or cancel a provider subscription.

CA$0 focus remains available. The current app has mock and development-only test payment paths; live collection and capture are unavailable. Separate test payment records are handled through Stripe and the payment backend. Stripe’s SDK can process interaction, device, analytics and fraud-prevention information; this is separate from any later lizlo product analytics.

The app does not receive complete card numbers or card security codes from Stripe. This does not mean there are no account or payment records. This website has no payment form and does not collect a billing address.

Deletion, recovery & retention

Signed-in account deletion is available from the profile icon in the app. Erasing that account’s local data is selected by default; exporting first is optional. Other accounts and guest data stay separate. Follow the retry instructions if cleanup cannot finish. Signing out or deleting the app is different from deleting an online account.

Saved study files and recordings moved to Recently Deleted have a 30-day recovery period and a permanent-delete action. Automatic cleanup runs when the relevant library next loads and storage is available, so an inactive device can retain them longer. Recoverable unfinished imports remain until deliberately discarded; failed cleanup may need a retry.

Unresolved transaction and recovery evidence may need to remain to reconcile the original transaction safely. Exported copies, provider records and backups are separate; deletion is not a promise of immediate removal everywhere. Final financial, support, security, hosting-log and provider retention periods are still awaiting operational and legal review.

Privacy requests & email

The selected privacy contact is privacy@lizlo.ca. Delivery, monitoring and authority remain unverified. Requests for access, correction, deletion, portability or optional-consent withdrawal require an operational process and any applicable identity checks before launch.

Email links only open your email app. Nothing is sent or attached automatically. If you choose to send email, your email provider and the recipient’s provider handle a separate copy. Do not send passwords, codes, card information, personal notes, recordings or a full account export.

Before this becomes a public policy

No minimum age, launch country, legal operator, public address, final retention schedule or approved international-transfer arrangement is selected by this page. Québec under-14 handling and separate payment eligibility remain unresolved. This English review page does not advertise an approved translation.

The source privacy draft must be reconciled to the exact release, provider settings and selected-country requirements, then reviewed and approved with a new effective version. This summary does not silently replace previous legal documents.