Leeloo - Privacy Policy

Last updated: May 12, 2026

1. Introduction

Hanna Belaus ("we", "our", or "us") operates the Leeloo mobile application ("App") and acts as the controller of the personal data described in this Privacy Policy. This Privacy Policy explains what information we collect, how we use it, how long we keep it, and with whom we share it.

Leeloo is a private family application designed for parents and invited family members to store and share memories, photos, videos, and information about their children.

2. Information We Collect

Account Information

• Email address, which is used to create and access your account
• Name or display name, if you choose to provide one
• Profile photo, if you choose to upload one
• Authentication data received from the sign-in method you choose, such as Google Sign-In or Sign in with Apple

User Content

• Photos and videos you upload
• Memory titles, captions, dates, album names, and similar content that you create in the App
• Family member names, roles, and invitation details that you choose to add
• Child profiles, including a child's name, date of birth, and optional photo, when added by a parent or other authorized family member

Device and Technical Data

• Device type, operating system version, app version, language, and similar technical information needed to operate the App
• Push notification token, if you allow notifications
• Crash diagnostics, error logs, and server-side request logs used for security, debugging, and service reliability
• Product analytics data, such as screens viewed, onboarding and paywall interactions, feature usage, invite flow activity, limit events, and similar in-app events
• Event metadata linked to those analytics events, such as internal user or account identifiers, subscription status, platform, app version, and device metadata where available

Subscription and Payment Information

• Subscription status and purchase information needed to validate and manage in-app purchases
• We do not receive your full payment card number from Apple

Invite Information

• Invite links or codes generated inside the App for private sharing
• We do not access your device contacts, address book, or recipients' email addresses

3. Device Permissions

Leeloo requests the following permissions:

• Camera - to take photos and videos directly within the App
• Photo Library - to select and upload photos and videos from your device
• Notifications - to notify you about activity that is relevant to your family space, if notifications are enabled

All permissions are optional. You can deny or revoke them at any time in your device settings without losing access to the App.

Leeloo does not use App Tracking Transparency in the current version of the App and does not request access to the advertising identifier (IDFA).

4. How We Use Your Information

• Create and manage your account
• Authenticate you and keep your account secure
• Store, display, organize, and share your photos, videos, memories, and family content inside your private family space
• Generate invite links or codes and enable private sharing with the family members you choose to invite
• Send transactional emails and optional service notifications
• Send push notifications if you enable them
• Process and manage in-app subscriptions
• Analyze product usage, onboarding completion, feature adoption, paywall performance, subscription conversion, and overall App reliability
• Maintain service security, prevent misuse, investigate incidents, and fix bugs
• Comply with legal obligations and enforce our Terms of Service
• Respond to your support requests

Analytics

We use product analytics tools, including Amplitude, to understand how people use Leeloo and to improve the App. This analytics may include app opens, screen views, onboarding progress, invite flow activity, paywall views and purchase funnel events, feature usage, and limit-related events.

Where possible, we configure analytics events to use internal identifiers and technical metadata instead of directly identifying content. We do not intentionally send raw email addresses, full child names, or similar sensitive user content in analytics event properties unless a specific feature requires it and we disclose that separately.

5. Data Sharing

We do not sell your personal data. We do not share your personal data with data brokers. We share data only when necessary to operate the App, provide requested features, comply with law, or protect our rights.

We may share personal data with the following categories of service providers:

• Google - for Google Sign-In and related authentication infrastructure
• Apple - for Sign in with Apple and App Store in-app purchase processing
• Amplitude - for product analytics, such as measuring onboarding, feature usage, limits, purchases, and subscription conversion
• Subscription management providers, if used in the App, to validate and manage subscription status
• Cloud hosting and storage providers, including DigitalOcean and S3-compatible storage, to store account data and uploaded content
• Transactional email providers, including Elastic Email, to send verification, password reset, login, and recovery emails
• Technical diagnostics, logging, and support providers, if used, strictly for security, debugging, and service reliability

We may also disclose personal data if required by law, court order, or competent authority, or when necessary to establish, exercise, or defend legal claims.

6. Data Storage and Security

Your account data and uploaded content are stored using cloud infrastructure and storage services that support Leeloo's operation, including DigitalOcean and S3-compatible object storage. We use administrative, technical, and organizational safeguards designed to protect personal data against unauthorized access, alteration, disclosure, or destruction.

All data is transmitted over encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

7. Data Retention

We retain personal data for as long as your account remains active and for as long as needed to provide the App.

If you choose to delete your account in the App, your account is immediately deactivated so it can no longer be used to sign in. Permanent deletion of the account and associated personal data is then initiated and is completed within 30 days, unless a longer retention period is required by law or is necessary to resolve disputes, prevent fraud, or enforce our agreements.

Server and security logs are retained only for as long as reasonably necessary for security, debugging, and abuse prevention. Billing and transaction records may be retained for longer where required for accounting, tax, or legal compliance.

If an account remains inactive for an extended period, we may contact the account holder before scheduling deletion of dormant data.

8. Children's Data

Leeloo is intended for use by adults, such as parents and family members. The App is not designed for children to create accounts on their own.

Information about a child, such as name, date of birth, photo, or family memories, is added and managed by a parent, guardian, or other adult family member acting for the family. We use this information only to provide the private family features of the App.

If you believe that personal data about a child has been provided to us in an unauthorized way, contact us and we will review the request.

9. Email Communications

We use transactional email providers, including Elastic Email, to send service-related emails on behalf of Leeloo. These emails are sent only in response to actions you take within the App or when necessary to operate your account. They may include:

• Email verification when you create or update your account
• Password reset emails when you request account recovery
• Important service messages related to account access or security

We do not send marketing or promotional emails unless we separately ask for and receive the required consent.

10. Legal Bases for Processing

Where the GDPR applies, we rely on one or more of the following legal bases:

• Performance of a contract - to create and manage your account, provide the App, process subscriptions, and deliver requested features
• Legitimate interests - to secure the App, prevent abuse, maintain service reliability, and improve support operations
• Consent - where you choose to upload optional content, enable notifications, or provide optional profile information
• Legal obligation - where we must retain or disclose data under applicable law

11. International Data Transfers

Your personal data may be processed in countries other than your country of residence, including by service providers that support the App. Where required by applicable law, we take steps to ensure that international transfers are subject to appropriate safeguards, such as adequacy decisions, contractual protections, or other lawful transfer mechanisms.

12. Your Rights

• Access - request a copy of your personal data
• Correction - request correction of inaccurate or incomplete data
• Deletion - request deletion of your account and personal data
• Portability - request a portable copy of data you provided to us where applicable
• Objection or restriction - object to certain processing or ask us to restrict it where applicable
• Withdrawal of consent - where processing is based on consent, withdraw that consent at any time

You may also have the right to lodge a complaint with the data protection authority that supervises your place of residence or work, or the place where the alleged infringement occurred.

To exercise your rights, contact us at leeloo@movaschool.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will post the updated version here and update the "Last updated" date. Where required by law, we will also provide notice through the App or by email before the changes take effect.

14. Contact Us