Privacy Policy
Last reviewed: 23 August 2026
The short version
Here's the plain-English summary. The full policy is below if you'd like the detail.
- What we collect. Things like your name and contact details, the recordings and transcripts of your calls, the stories and photos you build up, and — if you order a book — your postal address. Stories often include personal and health details, so we only record them with clear permission.
- You're always in charge of the call.The storyteller is asked for permission at the start of every call and can say “stop” at any time.
- Where it's kept. Your stories, recordings, and photos are stored in Australia. Some parts of the service — like the AI voice, turning speech into text, and enhancing photos — are run by trusted companies overseas, and some of them keep a copy of what we send them. We list every one of them in Section 8.
- What we won't do.We don't display other companies' ads inside LifeLoom, sell your personal information, or use your stories to train AI. We do advertise LifeLoom elsewhere: advertising tools from the platforms we advertise on run on our public pages, and you can turn them off at any time on the Privacy choices page, linked in the footer.
- Sharing is your choice. Your digital memoir is not public. You can invite family members and send them a link, but they must sign in with their own LifeLoom account and be authorised for that memoir. A link by itself does not grant access — and stories often mention other people, so invite and share thoughtfully.
- AI does a lot of the work, and you can always ask a real person to check anything it produced.
- You're in control. You can see your information, correct it, download it, or delete your account at any time.
- Questions or concerns?Email privacy@lifeloom.ai. If we can't sort it out, you can contact the national privacy regulator (the OAIC).
1. About This Policy
This Privacy Policy explains how LifeLoom collects, uses, shares, and protects your personal information. LifeLoom is run by The AI Accelerator Pty Ltd (ABN 67 689 422 759). We built LifeLoom to hold some of the most personal information a family has, and this policy is written to be read: what we collect, why, who receives it, and the controls you have.
LifeLoom helps you capture and keep life stories. You can do this for a loved one — a family member arranges warm, AI-guided phone calls for an older relative — or for yourself, by recording your own memoir. We turn the calls into a private digital archive of stories. If you'd like, you can invite family members to view it or have it printed as a hardcover book. Invited family members sign in with their own LifeLoom account; a link by itself does not give anyone access. Because these stories are so personal, we take your privacy very seriously.
LifeLoom is offered to, and marketed to, residents of Australia. Storytellers must be located in Australia and have an Australian (+61) phone number; the family members who organise and view a memoir can be anywhere.
A note about AI
LifeLoom uses artificial intelligence (AI) to run the phone calls, turn speech into text, shape the stories, work with your photos, and power a chat assistant. Your recordings, photos, and stories are handled by AI providers, some of them overseas. Sections 6 and 8 explain this in plain detail.
How to contact us about privacy:
- Privacy Officer — privacy@lifeloom.ai
- Legal questions — legal@lifeloom.ai
- General help — support@lifeloom.ai
2. What Personal Information We Collect
What we collect depends on how you use LifeLoom.
If you run an account (web app users)
Whether you're setting up a memoir for someone else or writing your own, we collect:
- Your name, email address, and phone number
- Your account login details
- Payment details (handled by Stripe — we never store your card number)
- Your postal address and the recipient's name if you order a hardcover book
- Messages you send us (support requests, feedback)
- Your details if you join our waitlist (email, name, how you heard about us)
- A referral code and referral activity, if you take part in our referral program
- If you use the ‘share LifeLoom with a friend’ feature, we collect your friend’s email address and your optional note so we can send them one introduction email on your behalf
- Some technical details we keep for security — your IP address and device/browser information — recorded when you give consent and at key account events
Visitors to our public website
When you visit our public pages:
- Our own cookieless counter may record the page, whether a page was opened or a button was selected, a broad browser-or-bot category and, where present, a print campaign code. It does not store your IP address or use a cookie or cross-site identifier.
- Our website analytics tool records which of our public pages you open and which buttons and FAQ answers you select, the website or campaign link you arrived from, and a broad device and browser type. So we can tell a returning visit from a new one, it stores a random identifier in your browser — in local storage, not a cookie — which stays until you clear your browsing data. It does not store your IP address, and the identifier is never linked to your name, email address, phone number or LifeLoom account.
- Advertising tools from the platforms we advertise on — currently Meta and Google — run on our public pages. They can use your visits to show you LifeLoom's ads after you leave — on Facebook and Instagram, and across Google's network — and to measure whether our ads work. They may receive the page you visited, what you did and when, campaign or ad-click information, cookie identifiers, your IP address and broad device and browser information. You can turn them off at any time on the Privacy choices page. Anything you type into a form on our site — like a gift recipient's name and email — goes to us, never to the advertising tools.
We do not send your name, email address, phone number, memoir, stories, recordings, transcripts, photos, messages or family contributions to these advertising tools.
Storytellers (the person whose life is captured)
A storyteller might be the person a family member is helping, or might be you (if you're writing your own memoir). For storytellers we collect:
- Name, preferred name, phone number, age or date of birth, gender, birthplace, and where they live now
- Voice recordings of the calls, and short voice clips taken from them
- Transcripts (the text of the calls)
- The stories, memories, and life details shared during calls
- Background information you give us to guide the calls (birthplace, key life events, important people, topics to focus on, and topics to handle gently)
- Photos you upload, along with captions and AI-written descriptions
- Where it applies, information about capacity and a substitute decision-maker (see Section 12) and legacy preferences about what should happen to the stories
- Date of death (recorded if the storyteller passes away)
Family members you invite
When you invite others to see or help with a memoir, we collect their email, name, role (owner, contributor, or viewer), and relationship to the storyteller.
Gift buyers and recipients
If you buy LifeLoom as a gift, we collect the buyer's name and email, the recipient's name and email (if given), any personal message, and the occasion. We also record gift codes and whether they've been used.
Information our systems create
- AI-built story structures, summaries, themes, and a map of the people, places, and times mentioned
- A short life overview written by AI for the memoir cover
- Emotional-tone notes — our voice AI picks up on emotional cues during calls to guide the conversation, and may attach a tone label to a story. This helps the conversation feel natural; it is not a medical or health assessment.
- Messages you exchange with the LifeLoom AI assistant
- Activity records (for example, logins, uploads, consent moments, and deletions)
Sensitive information
Some information is more personal than the rest — the law calls it sensitive information. Life stories often contain it, including:
- Health information — illnesses, treatments, disabilities, mental health, terminal diagnoses
- Biometric information — voice recordings and clips used to recognise and talk with the storyteller
- Race or ethnic background — culture, heritage, migration stories
- Religious beliefs — faith and spiritual practices
- Political views — opinions and affiliations
- Sexual orientation — relationships and identity
- Criminal history — past experiences mentioned in stories
Information about a storyteller's capacity and their substitute decision-maker is also treated as sensitive. We only collect sensitive information with your clear, specific permission (Section 4 explains how).
Information about other people
Stories naturally mention others — family, friends, colleagues, neighbours. That can include names, relationships, health details, and more about people who don't use LifeLoom. We handle this carefully (see Section 7), and it matters most when stories are shared (Sections 7 and 8). Family contributors can also tell us who a person mentioned in a story is (a name and how they're related to the storyteller) — we store that so the memoir stays accurate.
3. How We Collect Personal Information
We collect personal information when:
- You use the web app— creating an account, setting up a storyteller profile (your own or a loved one's), uploading photos, ordering books, managing billing, and running your account
- We make a phone call — our AI calls the storyteller and records the conversation, after asking permission at the start of each call
- You use the AI chat assistant — asking questions, adding memories, or managing your memoir
- Our systems do their work — turning recordings into text, shaping stories, working with photos, making voice clips, and tracking which parts of a life have been covered
- Family members help — when people you invite add photos, memories, or corrections
- Someone buys you a gift — and gives us your details
- You email or text us— including replying to our messages or texting “STOP” or “START”
- You fill in a web form — for example, joining our waitlist or asking for an invitation
- You make a payment — through Stripe
- Advertising tools on our public pages — as described in Section 2 and Section 8. You can turn them off at any time on the Privacy choices page.
Wherever we can, we collect information straight from the person it's about. When a family member gives us information about a storyteller, we check it with the storyteller's spoken permission at the start of each call. When we collect information about someone from another person (for example, an invited family member, or someone mentioned in a story), we handle it with the same care as information you give us directly.
4. Consent
How consent works depends on who is telling the story.
When a family member sets it up for someone else (two-part consent)
The organiser's written consent. When you set up a storyteller profile, you confirm in writing that you understand:
- The kinds of personal information that will be collected (including sensitive information)
- That our AI will make phone calls to the storyteller
- That calls will be recorded, turned into text, and processed
- How stories are stored, shared, and (if ordered) printed
- Your relationship to the storyteller and your right to arrange this
The storyteller's spoken consent, on every call. At the start of each call, the AI:
- Says who it is and names the family member who arranged the call
- Asks the storyteller if it's okay to talk
- Separately asks if it's okay to record
- Explains that stories can include personal details, and that the storyteller can skip any topic or stop the call any time by saying “stop”
When you write your own memoir (one-person consent)
If you're both the account holder and the storyteller, you give consent for yourself. There's no separate organiser — you control your own profile, calls, stories, sharing, and deletion. The AI still talks to you directly and still asks permission to record.
We log both consent moments with the date and time.
Clear permission for sensitive information
Because life stories often include sensitive information (health, beliefs, background, and so on), we ask for your clear, specific permission to collect it. This permission:
- Names the kinds of sensitive information that might come up
- Is separate from agreeing to use the service generally
- Can be withdrawn at any time
- Is recorded in our consent log
Permission for overseas processing
Some of our providers are overseas (see Section 8). By using LifeLoom, you agree to your information being handled by them for the purposes we describe. We remain responsible to you for how those providers handle your information.
Withdrawing consent
- Storytellerscan say “stop” during any call to end the recording straight away
- Organisers and self-authors can pause or cancel the service any time from the dashboard
- Either person can contact us to stop future calls
- Withdrawing consent doesn't undo anything we did beforehand, but we stop from that point on
- Section 11 explains what happens to existing stories
Checking back in with you
When we change this policy, Section 15 explains how we tell you. For the small number of changes that need your agreement again — like a genuinely new use of your information — we will ask you directly before they apply to you.
Cookies and our website.When you first visit our website, a notice tells you we use advertising tools on our public pages. You don't have to do anything — you can dismiss it, and you can turn those tools off at any time on the Privacy choices page, linked in the footer of every page. Tools that are essential to running the site (like security and keeping you signed in) always run.
5. Why We Collect and Use Personal Information
We collect and use personal information mainly to:
| What for | Information used |
|---|---|
| Run the service | Storyteller profile, recordings, transcripts, stories, photos |
| Make the AI phone calls | Storyteller name, phone number, background notes, earlier conversations |
| Turn calls into stories | Transcripts, background notes |
| Improve and match photos | Uploaded photos, captions, story content |
| Power the AI chat assistant | Storyteller profile, stories, call history, photos, your messages |
| Create mementos | Stories, photos, voice clips, storyteller profile |
| Print and post hardcover books | Story and photo content, recipient name and address |
| Let family help | Family member email, name, role |
| Share a memoir you choose to share | The stories, photos, and audio you pick; the share-link details |
| Handle gifts | Buyer and recipient details, gift code status |
| Send messages | Contact details, notification settings |
| Run your account and billing | Contact details, login details, payment details |
| Keep the service secure | IP address, device details, consent and access records |
| Improve the service | Records of how our public pages are used — pages opened, buttons and FAQ answers selected — under a random identifier held in your browser (see "Website analytics" in Section 8) |
| Meet the law | As required (for example, reporting a data breach) |
We do not:
- Sell your personal information
- Display other companies' ads inside LifeLoom
- Send your memoir — stories, recordings, transcripts, photos, messages or family contributions — or your name, email address or phone number to advertising platforms
- Use your stories, recordings, photos, or chat to train AI models
- Run advertising tools in your browser on pages you sign in to (our own server can report sign-up, checkout and purchase events to Meta unless you've turned advertising off — Section 8 says exactly what that includes, and it is never who you are)
6. Automated Decisions and AI
AI is built into how LifeLoom works — there's no version of the service without it. Your privacy controls are: giving spoken permission on each call, the sharing and visibility settings below, and your right to download or delete your data (Section 11).
Things AI decides on its own
- Building stories — AI finds and shapes individual stories from the call transcripts
- Tracking coverage — AI keeps an eye on which parts of a life (time, relationships, places, themes, inner life, legacy) have been covered, and suggests what to explore next
- Suggesting questions — AI prepares personal follow-up questions for future calls
- Working with photos — AI looks at your photos, can enhance or animate them (with your permission), and matches them to stories, people, places, and times
- Reading the moment — AI notices emotional cues during a call and adjusts its pace and topics
- Writing a short life overview— AI writes a brief third-person “back-cover” summary of the storyteller's life from their profile and stories, shown on the memoir cover
Automated checks on calls
- Judging call outcomes — AI classifies whether a call connected and went ahead; this is used for billing and to decide whether to try again
- Checking consent— AI reviews the start of each call to judge whether clear permission to record was given. If it's unclear, we hold processing for a person to check before any story is made
- Noticing early endings — AI reads the end of a call to judge whether it ended naturally or was cut short, to decide whether a person should follow up
- Answering-machine detection. When we place a call, our phone provider (currently Twilio) listens to how the call is answered — to tell a person from voicemail — so the AI knows whether it has reached you or a machine.
Things AI helps with (with people involved)
- Adjusting call timing — AI may suggest changes to how often or when calls happen
- Flagging content — AI may flag something for a person to review
The AI chat assistant
LifeLoom has a chat assistant that can answer questions about a memoir and do tasks for you (like editing, hiding, or organising stories, or managing photos). To help, it's given the storyteller's profile, stories, call history, and photos, and your messages are handled by our AI provider. Stories you've hidden or flagged are kept away from the assistant. What it can do depends on your role — viewers and contributors can't make owner-level changes.
People are always in the loop
Some things are decided by AI before a person checks them: building stories from transcripts, tagging coverage, preparing future questions, working with photos, and reading emotional cues during calls. These shape your family's story collection.
- Ask a person to review. You can ask a human to review anything the AI produced — just email support@lifeloom.ai. We'll reply within 10 business days. Owners can also edit, hide, or remove AI-built stories themselves, in the dashboard or chat.
- Challenge a result. If you think AI content is wrong, misleading, or unfair, you can edit or delete it, ask us to rebuild stories from a particular call, flag wrong structures or tags, or ask us to remove specific AI content for good.
7. Other People in Stories (and Sharing)
Life stories naturally mention other people. When a storyteller talks about someone, we may hold information about a person who hasn't agreed to it themselves.
How we handle this:
- We accept that mentioning others is part of telling a real life story
- We don't go looking for extra information about other people
- We use it only to preserve the storyteller's story
- Anyone mentioned in a story can contact us to ask what's there, fix it, or ask us to remove or anonymise it. We respond within 30 days, weighing the storyteller's right to tell their story against the other person's privacy
When you share a memoir.LifeLoom lets you invite family members to view a digital memoir or share stories in a printed book. Digital family members use their own LifeLoom login and must be authorised for that memoir. A link can take an invited family member to the right place, but the link alone does not grant access. Shared stories may include personal and sensitive details about other people. The AI-written life overview and, where relevant, the storyteller's date of death may also appear in what authorised family members see.
- It's your responsibility to make sure you have any permission you need before sharing stories that reveal things about others, and not to share anything defamatory, harmful or private about them.
- We give you controls to help: you can hide a story, flag it for review, turn sharing on or off, and switch off individual stories within a shared memoir. Hidden and flagged stories are kept out of family views, books, downloads and the AI assistant.
- Authorised family members can still make their own copies. Someone who is allowed to view a memoir may take a screenshot, copy text or pass on something they have seen. Printed books can also be shown or given to other people. LifeLoom cannot retrieve a copy someone has made outside the service.
8. Who We Share Information With
Service providers
We use the providers below to run LifeLoom. This list is who we currently work with, together with past providers we've told you about — providers change as LifeLoom grows, and we keep this list up to date (Section 15 explains how changes work). Many providers are overseas; the table says where each one is. We have written agreements with many of them, and with others — including our printer, Mixam — we rely on their published terms. Either way, we remain responsible to you for how your information is handled.
Overseas providers:
| Provider | Where | What they do | What they receive | Privacy policy |
|---|---|---|---|---|
| Hume AI | United States | Voice AI, emotion detection, running the conversation during calls; creating the spoken narration when you ask for a story to be read aloud | Voice audio (live and recorded), emotional cues, and the text of stories you choose to have read aloud, and the conversation guide we prepare for each call (which draws on the storyteller's profile and earlier stories); Hume also keeps a record of each call's conversation (transcript and emotional cues) on its systems | View |
| ElevenLabs | United States (some processing may also occur in the Netherlands and Singapore; all data is stored in the United States) | Voice AI, running the conversation during some calls, and providing the assigned AI voices | Voice audio (live and recorded), each call's transcript, and the conversation guide we prepare for each call (which draws on the storyteller's profile and earlier stories); ElevenLabs keeps a record of each call (audio, transcript and that guide) on its systems under our retention settings until deleted | View |
| Anthropic (Claude) | United States | Building and shaping stories, the AI chat assistant, suggesting questions | Transcripts, conversation context, background notes, chat messages | View |
| OpenAI | United States | Photo enhancement; search indexing of story text; last-resort conversation AI during a call (automatic failover only — used only if our main AI provider is unavailable or not responding in time mid-call) | Photos; story text; and, only if the call failover is triggered, the call conversation as it happens (which can include the personal and health information shared during the call) | View |
| Google (Gemini) | United States | AI photo edits; voice AI for non-English calls | Photos; voice and call context | View |
| Google (Veo) | United States | Turning photos into short animations | Photos and short prompts | View |
| Replicate | United States | No longer used — photo enhancement, removed 2026-08-05 | Photographs you uploaded, until we stopped using them on 5 August 2026. Replicate's published policy is that data sent through its programmatic interface, which is the way we sent it, is removed after one hour. It also says residual copies may remain in its backups for a limited period, which it does not define. | View |
| Twilio | United States (Twilio Australia Pty Ltd) | Phone calls and text messages, and detecting whether a call was answered by a person or an answering machine | Phone numbers, call details, text content, and the audio of the call, which Twilio records | View |
| SendGrid (Twilio) | United States | Sending emails | Recipient email addresses, email content | View |
| Stripe | United States (Stripe Australia Pty Ltd) | Processing payments | Billing and payment details (we don't store your card number) | View |
| Gelato | Overseas print network | Printing and posting hardcover books | Book content (PDF), recipient name and address — deleted after the order is done | View |
| Mixam | United States (their systems). Australian orders are printed and posted in Australia. | Prints and posts hardcover books | The book file (story text and photos), and the recipient's name and postal address. Mixam's own published terms govern how long they keep it; they do not publish a retention period. | View |
| Cloudflare | United States / global edge network | Protects and speeds up the site (firewall, bot protection, including the Turnstile check when you sign up, content delivery) as traffic passes through | Web traffic in transit, including IP addresses and request contents, and basic device/browser signals during the sign-up check; no long-term storage of your content | View |
| Sentry | United States | Spotting and diagnosing errors; captures a masked diagnostic recording of the on-screen session when an error occurs | Error details; a masked session recording (your stories, photos, and typed text are hidden or blocked); an account identifier | View |
| PostHog (public pages) | European Union (Germany) | Website analytics — counts how our public pages are used | Page-view and selection events under a random identifier held in your browser: a general page name, the link or campaign you arrived from, a broad device and browser type. The events carry no IP address, no story content, no names, no free text, no advertising identifiers, and nothing that identifies your account | View |
| Meta Platforms, Inc. | United States | Advertising: shows LifeLoom's ads on Facebook and Instagram using visits to our public pages, and measures whether our ads work — including sign-up, checkout and purchase events reported by our own server, unless you've turned advertising off. | From your browser, on public pages: the page you visited, actions and time, campaign, ad-click and cookie identifiers, IP address and broad device/browser information. From our server (unless advertising is turned off): sign-up, checkout and purchase events — the event, its time, the purchase value and currency, the page it happened on (with any codes or links removed), a random event number used to avoid double-counting, and the same cookie identifiers, IP address and browser information. Never your name, email, phone number or memoir content. | View |
| Google LLC | United States | Advertising: measures LifeLoom's Google advertising and shows LifeLoom's ads across Google's network using visits to our public pages. | The page you visited, actions and time, the ad you clicked, campaign and cookie identifiers, IP address and broad device/browser information; when you start or complete a gift purchase, the value and currency, and on a completed purchase a random order number used to avoid double-counting. Never your name, email, phone number or memoir content. | View |
International book orders may one day be printed by a similar partner (for example, Lulu). We will update this table before any such provider receives personal information.
Stored in Australia (not sent overseas):
| Provider | Where | What they do | What they hold | Privacy policy |
|---|---|---|---|---|
| Supabase | Australia (Sydney) | Main database, logins, file storage | Everything stored long-term (recordings, voice clips, stories, profiles, photos, books) | View |
| Elestio (on Vultr) | Australia (Sydney) | Runs the application (compute), managed via Elestio | Processes data in memory while serving your requests; nothing is stored here long-term (Supabase is the store) | View |
| Onidel | Australia (Sydney) | Encrypted backup copies of recordings, voice clips, and media (disaster recovery) | Backup copies of your recordings and media, encrypted with keys we hold so Onidel can't read them | View |
| n8n (we host it ourselves) | Australia | Behind-the-scenes automation (sending emails and reminders, scheduling) | Email content, names, contact details | — |
The main things to know about overseas processing:
- Live call audio is handled in real time in the United States by our voice AI providers — currently Hume AI or ElevenLabs, depending on the call (and, for non-English calls, Google). The table in Section 8 shows exactly what each provider receives.
- When you ask for a story to be read aloud, the story's text is sent to Hume AI (United States) to create the narration. The voice is the memoir's assigned AI voice — not a clone of the storyteller's real voice — and the finished audio is stored privately in Australia and only played to people with access to the memoir.
- Building stories, the chat assistant, and writing helpare done by Anthropic's Claude in the United States. Photo enhancing and animating are done by OpenAI and Google in the United States.
- Calls and texts go through Twilio; emails are sent through SendGrid.
- Printed booksmean sending the book content and the recipient's name and address to our printer. The printer's own retention terms apply — Section 8 says what each printer keeps.
- We store your recordings, voice clips, stories, profiles, photos and books in Australia. Some providers listed in Section 8 also hold a copy of what we send them — for example, the printer holds the book file. Section 8 says who holds what.
- Your connection to LifeLoom passes through Cloudflare's global network, which protects the site and speeds it up. Cloudflare handles traffic in transit (including your IP address) but does not store your stories, recordings, or photos.
We don't train AI on your data.We never use your stories, recordings, photos or chat to train an AI model, and we choose our AI providers on the basis that they don't train on what we send them — turning off any data-retention or training settings they offer.
People you choose to share with
Family members you invite — owners, contributors and viewers — can see the memoir according to their role. They must sign in with their own LifeLoom account and be authorised for that memoir. A share link helps an authorised family member reach the right memoir; it does not give an unauthorised person access.
Advertising and your information
We do not sell or rent your personal information, and we do not give information to data brokers. We do not display third-party advertising inside LifeLoom.
We advertise LifeLoom on other platforms — currently Meta (Facebook and Instagram) and Google (Search, YouTube and its network). Their tools run on our public pages — not on pages you sign in to — and can use your visits to show you LifeLoom's ads after you leave and to measure whether our ads work. They may receive the page you visited, what you did and when, campaign or ad-click information, cookie identifiers, your IP address and broad device and browser information. They do not receive your name, email address or phone number, or your memoir, stories, recordings, transcripts, photos, messages or family contributions.
Unless you've turned advertising off, our own server can also tell Meta when you sign up, start a checkout or complete an order — the event and its time, the purchase value and currency, the page it happened on (with any codes or links removed from the address), a random event number used to avoid double-counting, and the same cookie identifiers, IP address and browser information the browser tools use. Never your name, email address or phone number, and nothing from your memoir.
You can turn the advertising tools off for the device you're on at any time on the Privacy choices page; that one switch covers both the browser tools and our server's reporting. If you're signed in, your choice is also saved to your account.
Website analytics
Website analytics.On our public pages — the ones you can read without signing in — we record which pages are opened and which buttons and FAQ answers are selected, so we can see which pages help people and which don't. We record the page as a general page name rather than its exact address, the website or campaign link you arrived from, and a broad device and browser type. We do not record your IP address, anything you type, or anything from a memoir, and we never receive your name, email address or phone number this way.
So we can tell a returning visit from a new one, this measurement stores a random identifier in your browser — in local storage, not a cookie. It is never joined to your name, email address, phone number or LifeLoom account, and it is only ever used to understand how our own pages are used, and never used to follow you across other websites. Our website analytics provider is PostHog, hosted in the European Union, in a separate project from our signed-in product analytics; the two are not joined.
Marketing messages
We send only a small set of messages, and you can opt out of each kind on its own:
- Promotional messages — feature news, tips, and occasional updates. These always have an unsubscribe link, and you can manage them in your notification settings.
- Account messages— sign-up, invites, receipts, renewal reminders, and order updates. These are part of running your account; to stop them you'd close your account rather than switch them off one by one.
- Safety messages— distress alerts, consent-withdrawal notices, and security alerts. The law (Spam Act 2003, s.16(2)) doesn't let you opt out of these.
Emails and texts you can't unsubscribe from
Most LifeLoom messages have a one-click unsubscribe link (or you can reply “STOP” to a text) and follow your settings. A small set is required by the Spam Act 2003 because it's an account or safety message that has to reach you:
- Distress alerts — if we notice distress on a call, your chosen emergency contact needs to know
- A storyteller stopping — if a storyteller asks us to stop, you need to know
- Payment and billing — a failed payment, an upcoming renewal, or a payment that needs an extra check so your service keeps running
- Orders and delivery — confirming and tracking any hardcover book you order
- Operational and safety alerts— for example, fraud warnings, disputes, or a gift that didn't reach its recipient
You can still stop these by cancelling your subscription, deleting your account, or emailing privacy@lifeloom.ai.
9. How We Keep Your Information Safe
On the technical side:
- All voice recordings and clips are encrypted, both stored and in transit
- The database and files are hosted in Australia (Supabase, Sydney)
- We keep encrypted backups of your recordings and media with a sovereign Australian provider in Sydney. They're encrypted with keys we hold, so the backup provider only ever holds data it cannot read
- Built-in access rules mean account holders only ever see the storytellers and memoirs they're allowed to
- Recordings, voice clips, and media are kept in private storage and only opened through short-lived secure links after an access check
- Roles (owner, contributor, viewer, self) control what each family member can do
- Contact details like phone numbers and emails are stored in a scrambled form in our activity logs, not as plain text
- Sensitive and login-related actions are rate-limited
- Secure logins and HTTPS protect everything you do on the web
On the people side:
- We keep an audit trail of consent, access, and deletions
- Staff are trained on privacy
- We run regular security reviews and automated security scans
- We have a data breach response plan (Section 13)
- We weigh privacy when building new features
10. How Long We Keep Information
| Type of information | How long we keep it |
|---|---|
| Recordings, voice clips, transcripts | While active; destroyed when your vault is archived (after the 90-day grace), or sooner on request |
| Stories & photos | While active, through the 90-day grace, and for up to 12 months after archival so you can revive — then permanently deleted, unless your Legacy Preferences say to keep them |
| Account holder details | Deleted within 30 days of your request; afterwards we keep only records the law requires — consent/audit and payment records (see rows below) |
| Book orders and delivery details | Long enough to fulfil the order and meet tax and record-keeping rules (usually 7 years) |
| Gift codes/certificates | Until used, or until they expire (36 months after purchase) |
| Share links | Until you turn them off or they expire |
| Chat messages | While the account is active; removed when you delete your account |
| Waitlist/marketing details | Until you unsubscribe or leave the waitlist |
| Unsubscribe records | As long as we need them to honour your opt-out |
| Payment records | As required by law (usually 7 years) |
| Consent and audit records | For the life of the account, plus 7 years |
| Call details (metadata) | While the account is active |
| Website analytics from our public pages | Kept for as long as we use them to understand how those pages are used. They aren't linked to your account. There's no automatic deletion after a set period, so they may be kept indefinitely. |
When we no longer need personal information, we securely delete it or strip out anything that identifies you. After you cancel, your vault becomes read-only for a grace period and is then archived and deleted (see our Terms — What Happens When You Cancel).
11. Your Rights
See your information
You can ask to see the personal information we hold about you. Contact us using the details in Section 1, and we'll respond within 30 days.
Correct it
If something we hold is wrong, out of date, or incomplete, you can ask us to fix it. Owners can also correct story content themselves, in the dashboard or chat.
Download your data
You can ask, from your account settings, for a copy of your data in a standard format. It includes your profile, stories, transcripts, call records, photos, chat, and activity, and comes as a secure link that works for a limited time. (Hidden and flagged stories aren't included. Your download may include stories that mention other people.)
Delete your account
You can ask us to delete your account and everything tied to it:
- Account holderscan do this in account settings (you'll be asked to type a confirmation) or by contacting us
- Storytellers (or someone authorised to act for them) can contact us to delete all recordings, transcripts, and stories
- When you ask us to delete your account, we action it straight away and complete deletion within 30 days at the latest, except for records the law requires us to keep
What deletion does:it can't be undone. It cancels your subscriptions; deletes your stories, calls, recordings, photos, and chat; removes you from memoirs you were invited to; and revokes any memoir access and sharing links you granted. Hardcover books that have already been printed and posted can't be recalled.
One thing to know: our voice providers (Hume AI and ElevenLabs, in the United States) also hold a record of each call's conversation on their systems. When you delete your account or withdraw consent, we ask them to delete those records too; until that's confirmed, each provider's own retention policy and our agreement with them apply.
Stop the calls
Storytellers can stop future calls any time during a call, or have the organiser pause or cancel the service.
Manage messages and sharing
You can turn off non-account emails and texts in your notification settings (or reply “STOP” to a text), turn sharing on or off, switch off individual stories within a shared memoir, and remove a family member's access any time. Some past contributions and chat messages may stay in the memoir after access is removed.
12. When the Storyteller Loses Capacity or Passes Away
The law assumes every adult can make their own decisions. LifeLoom supports storytellers, families, and decision-makers through changes in capacity and after death.
If a storyteller can no longer give consent
- Calls are paused
- A family organiser, or an authorised substitute decision-maker (someone with legal authority to decide for them — a guardian, an attorney under an enduring power of attorney, or another legally authorised person), can ask us to continue calls (if the storyteller had wanted that), to give access to existing stories, or to pause or stop the service
- We record the substitute decision-maker's details and the type of authority they hold, and we'll ask for proof of that authority before we extend access. We don't verify the authority ourselves — you confirm it's accurate
Legacy Preferences (deciding ahead of time)
While a storyteller can still decide, we encourage them to record their Legacy Preferences — their wishes for their stories, including:
- What should happen if they lose capacity (continue, pause, or stop calls)
- What should happen after they die (keep the stories, keep them for a set number of years, or delete them)
- Who may see the stories afterwards (for example, the organiser only, or chosen people)
- How widely the memoir may be shared with invited family in the future (sharing is always to signed-in, authorised family members — never public)
- Any other instructions
These can include a spoken, recorded wish, and we share them with the family organiser.
After a storyteller passes away
- We follow the storyteller's recorded Legacy Preferences
- If none were recorded, the family organiser keeps access
- The family organiser can ask for a download or deletion at any time
- We treat a deceased storyteller's information with the same care and respect as a living one's
Deletion wishes are carried out by our team as part of a regular review. If you'd like confirmation that a storyteller's wish has been actioned, email privacy@lifeloom.ai.
A note: the Australian Privacy Act doesn't currently cover people who have died, though some State health-records laws do (for example, the NSW Health Records and Information Privacy Act 2002). We apply these protections anyway, as a matter of ethics and the promise we make to you.
13. Data Breaches
If we find out about a data breach that's likely to cause serious harm, we will:
- Tell the Office of the Australian Information Commissioner (OAIC)
- Tell affected people as soon as we can
- Move quickly to contain the breach and stop further access
- Suggest steps you can take to protect yourself
Because we hold sensitive information (health details, voice recordings, personal stories), we keep our breach response especially ready.
14. Complaints
If you think we've got something wrong with your privacy:
- Tell us first — email privacy@lifeloom.ai with the details
- We'll respondwithin 30 days with our findings and what we'll do
- Still not happy? The Office of the Australian Information Commissioner (www.oaic.gov.au) handles privacy complaints in Australia.
- Website: www.oaic.gov.au
- Phone: 1300 363 992
- Post: GPO Box 5218, Sydney NSW 2001
15. Changes to This Policy
We update this policy as LifeLoom grows — for example when we add or change a service provider, add a feature, or explain something better. When we do, we put the updated policy on this page, update the "last reviewed" date, and add a line to the version history below.
If we ever make a change that materially reduces your rights or uses your information for a genuinely new purpose, we will email account holders before it takes effect. For everything else, this page is the record — we encourage you to check back now and then.
16. Other Things to Know
Cookies and website measurement
LifeLoom uses cookies that are essential to running the service:
- Keeping you logged in and managing your session
- Security protection
- Remembering your settings, including your privacy choice
- Bot protection — when you register, we use Cloudflare Turnstile to check you're a real person. It may set a short-lived cookie and share basic device/browser signals with Cloudflare in the United States for that check only
Our own cookieless counting. On selected campaign pages, we use a small first-party counter to count page visits and button selections. It records the campaign page, event type, a broad browser-or-bot category and, where present, a print campaign code. It does not store your IP address, set a tracking cookie or send the information to an advertising platform.
Website analytics on our public pages.Our website analytics tool (PostHog — see Section 8) measures how our public pages are used. It does not set a cookie, but it does keep information in your browser's own storage. That includes a random identifier, so a returning visit can be told from a new one; a short-lived session number; and the full web address of the page you arrive on, together with the full address you arrived from. Those addresses can carry whatever was in the link you followed — the code in a gift link, for example. The tool also judges for itself whether the address you arrived from is a search engine's, and it can read a webmail page as one — Gmail as Google, for example. Where it reads it that way it keeps that engine's name, and it can keep the words you searched for. Those addresses, that name and any search words stay in your browser: they are not included in what the tool sends us, which is the narrower set described in Section 8. We do not join any of it to your name, email address, phone number or LifeLoom account, we do not share it with any advertising platform, and it is not used to follow you across other websites. Clearing your browsing data removes it.
Advertising tools (your choice). Advertising tools from Meta and Google run on our public pages, as described in Section 8. You can turn them off at any time on the Privacy choicespage, linked in the footer, or in account settings. Your choice is saved in your browser, so set it on each device you use. Turning them off stops future collection on that device; it can't take back information already sent, though Meta and Google provide their own privacy controls as well.
Our masked error-monitoring tool, Sentry, runs to help us find and fix faults. If something goes wrong it may capture a masked diagnostic recording; your text, photos and inputs are hidden or blocked. Cloudflare Turnstile may run when you register, as described above. These service and security tools are not used to advertise LifeLoom to you.
Australian Consumer Law
Your rights under the Australian Consumer Law aren't affected by this Privacy Policy or our Terms and Conditions.
People outside Australia
LifeLoom is built for Australia. If you use it from elsewhere, your information is processed in Australia under this policy. If you're in the European Union, you may have extra rights under the GDPR — contact us and we'll help.
17. Policy Version History
| Version | Date | Changes |
|---|---|---|
| 3.0.0 | 23 August 2026 | Complete rewrite of this policy ahead of our public launch, replacing all earlier versions. |