Lifted

    Privacy Policy

    Your Privacy Matters

    What you write in Lifted is personal. This Privacy Policy explains what we collect, what we do with it, who else sees it, and how you get rid of it.

    Last Updated

    This Privacy Policy was last updated on August 11, 2026.

    1. Information We Collect

    Personal Information

    • Email address (for account creation and communication)
    • Name or username (as provided by you)
    • Profile information (optional, as you choose to share)
    • Device information (browser type, operating system, IP address)

    Self Reflection Data

    • Conversation content with our AI companion
    • Mind map structures and nodes you create
    • Reflection entries you write
    • Insights generated from your conversations
    • Usage patterns and interaction data

    Technical Data

    • App usage analytics and performance data
    • Crash reports and error logs
    • Feature usage statistics
    • Session duration and frequency

    2. How We Use Your Information

    Primary Uses

    • Run the service: Your conversations are stored so that Lifted can recall them, build your map, and let you pick up where you left off. Without storing them, the product does not work.
    • Create mind maps: To turn what you have written into a map you can browse and edit
    • Surface patterns: To show recurring themes across your own reflections
    • Improve our service: To fix bugs and improve the product. We do not use your conversations to train AI models.

    Communication

    • Send important updates about our service
    • Provide customer support and respond to inquiries
    • Share relevant self reflection resources (with your consent)
    • Send security alerts and account notifications

    3. Data Protection & Security

    Security Measures

    • Encryption: Data is encrypted in transit (TLS) and at rest by our hosting providers
    • Access Controls: Access to production systems is restricted and requires multi-factor authentication
    • Data Minimization: We only collect what the service needs to function

    No system is perfectly secure, and we make no claim to be. Lifted is a small, early-stage product: we have not been independently audited or certified, and we are not a HIPAA covered entity, so the data you put into Lifted is not protected health information under US law.

    AI Data Processing

    Your conversations leave our servers

    To generate responses, the content of your conversations is sent to third-party AI providers. We ask for your explicit consent before your first message is sent.

    • How it is routed: All AI requests go through OpenRouter, which forwards them to the model provider handling the request.
    • Which providers: the underlying models are operated by Anthropic, Google and OpenAI. Their own privacy terms apply to the data they receive.
    • What we ask of them: we use these providers' API tiers, under which submitted content is not used to train their models.
    • Human review: we do not read your conversations as a matter of course. We may access specific content if you ask us to (for example, to investigate a bug or a report you filed), or where the law requires it.

    4. Data Sharing & Disclosure

    🚫 We Never Sell Your Data

    Lifted AI will never sell, rent, or trade your personal or self reflection data to third parties.

    Limited Sharing

    We may share your information only in these specific circumstances:

    • With your consent: When you explicitly authorize us to share information
    • Service providers: With trusted partners who help us operate our platform (under strict confidentiality agreements)
    • Legal requirements: When required by law or to protect safety (we will notify you unless prohibited)
    • Emergency situations: If we believe there's an imminent threat to life or safety

    Crisis Situations

    When a message contains language associated with self-harm, the app shows a supportive message and a list of crisis resources. It does not notify anyone. We do not contact emergency services, authorities, family members, or any other third party on your behalf, and no one monitors your conversations in real time. Our full crisis protocol is published here.

    5. Your Rights & Control

    Data Rights

    • Access: Request a copy of all personal data we have about you
    • Correction: Update or correct any inaccurate information
    • Deletion: Delete your account and its data from the app at any time
    • Portability: Request a copy of your data in a machine-readable format by email. We currently produce this manually, not through an in-app export
    • Restriction: Limit how we process your data
    • Objection: Object to certain types of data processing

    How to Exercise Your Rights

    Delete your account from the app's settings, or email us for anything else:

    • Email: [email protected]
    • Account deletion: available directly in the app's account settings

    We will respond to your request within 30 days and may require identity verification.

    6. Data Retention

    • Why we store conversations: your conversations and maps are stored for as long as your account exists, because recalling them across sessions is what the product does
    • Deleted accounts: deleting your account deletes your conversations, maps and insights within 30 days, including from backups on their normal rotation
    • Legal obligations: some records may be retained longer where the law requires it
    • Anonymized data: we may retain aggregate usage statistics that cannot be linked back to you

    7. International Data Transfers

    If you're accessing our service from outside the United States, your data may be transferred to and processed in the US. We ensure appropriate safeguards are in place for international transfers, including:

    • Standard contractual clauses approved by regulatory authorities
    • Adequate protection measures for your data rights
    • Compliance with applicable data protection laws

    8. Age Requirement

    Lifted is for adults only. You must be 18 or older to use it. We do not knowingly collect information from anyone under 18, and if we learn that an account belongs to a minor we will close it and delete the associated data.

    9. Changes to This Policy

    We may update this Privacy Policy periodically. We will notify you of any material changes by:

    • Email notification to your registered email address
    • In-app notification when you next use our service
    • Posting the updated policy on our website with a new "Last Updated" date

    Your continued use of our service after changes take effect constitutes acceptance of the new policy.

    10. Contact Us

    If you have any questions about this Privacy Policy or our data practices, please contact us:

    Lifted

    • Email: [email protected]
    • Legal entity: [COMPANY LEGAL NAME TBD]
    • Registered address: [REGISTERED ADDRESS TBD]

    For urgent privacy concerns or data breach notifications, please mark your communication as "URGENT - PRIVACY" in the subject line. This inbox is not monitored around the clock and is not a crisis line - for urgent personal support see our crisis resources.

    11. Regulatory Compliance

    We aim to comply with:

    • GDPR (General Data Protection Regulation) for EU residents
    • CCPA/CPRA (California Consumer Privacy Act) for California residents
    • Other applicable data protection laws in your jurisdiction

    We do not sell or share your personal information, and we never use the content of your conversations for advertising or ad targeting.

    Lifted is not a HIPAA covered entity or business associate, and the data you put into it is not protected health information under US law.

    Questions or Concerns?

    If you have any questions about how we handle your data or need help exercising your privacy rights, email us at [email protected].