Privacy Policy

A legal disclaimer

Privacy Policy
LifeStamp Pty Ltd Last updated: 5 October 2026
LifeStamp holds something unusually personal: a family's memories, in their own voices, often recorded because somebody is running out of time to tell them. We have written this policy to say exactly what we do with that, in plain words.
The short version: your material is stored in Australia, it is never public, we don't sell anything to anyone, and we don't use your family's stories to train anything.

1. Who we are
LifeStamp Pty Ltd (ABN 60 670 699 199), an Australian company, is responsible for the personal information described here. We are bound by the Australian Privacy Principles under the Privacy Act 1988 (Cth).
Questions, requests or complaints: admin@lifestamp.co

2. What we collect
When you create an account: your name, email address and password (stored only as an encrypted hash — we never see it).
What you put into LifeStamp: everything you write, upload or record — stories, answers, photographs, videos, voice recordings, dates, places, family relationships, captions.
Some of this is sensitive information under the Privacy Act: health details, religious or ethnic background, and similar things that come up naturally when someone tells their life story. You give it to us by choosing to write it down, and we treat it with the care that deserves.
About other people. Much of a chronicle is about somebody else — a parent, a grandparent, someone who has died. You are responsible for being thoughtful about what you record about living people, and for having their agreement where it matters.
Technical information: IP address, browser and device type, and basic logs of errors and sign-ins. We use these to keep the service working and secure.
What we do not collect: we don't use advertising trackers, we don't build profiles of you, and we don't buy information about you from anyone.

3. Where it is kept
In Australia. Specifically:
What  —  Where
Chronicles, photographs, videos, recordings, accounts  —  Supabase, Sydney (ap-southeast-2)
Voice transcription  —  Amazon Web Services, Sydney (ap-southeast-2)
The website itself  —  Netlify, served from a global network
Payments  —  Stripe
Transcription was deliberately built on Australian infrastructure so that recordings of people's voices do not leave the country. Audio sent for transcription is deleted from that service as soon as the text has been produced.
Netlify and Stripe are overseas companies, and limited information passes through them: Netlify serves the website and sees ordinary web request data; Stripe handles payments and receives your name, email and billing address. Stripe stores card details, not us — we never see or hold your card number. Both are bound by their own obligations and by our agreements with them.

4. Who can see what you put in
Nobody, unless you invite them. There is no public profile, no feed, nothing a search engine can find, and no "discover" of other people's families.
●    A chronicle is seen by its owner and the people they invite, at the level they choose:
  read, contribute, or edit.
●    A folder is seen by the people invited to it.
●    Legacy keepers see only that they have been named, until a handover is approved.
●    Somebody who captured a story in an interview keeps read-only access to it after
  handing it over, and the person who now owns it can see that this is so.
Our staff. A very small number of people at LifeStamp can technically reach the database, because somebody has to be able to fix things. We look at the contents of a chronicle only when you ask us to help with a specific problem, or where we must to comply with the law.
5. What we do not do with it
We want these stated rather than implied:
●    We do not sell your information or your family's material to anybody.
●    We do not share it with advertisers, data brokers or marketing companies.
●    We do not use your chronicles to train artificial intelligence models, ours or anyone
  else's.
●    We do not use your stories or photographs to promote LifeStamp without asking you first
  and getting your agreement in writing.
Voice transcription uses an automated service to turn speech into text for you. That is the service doing a job you asked for; it is not used to improve anybody's models.

6. Who we do share it with
Only the suppliers listed in section 3, each doing a specific job: storing the data, transcribing what you recorded, serving the website, taking the payment.
Otherwise we disclose personal information only where the law requires it — a court order or a legal obligation — or where someone's safety is seriously at risk.
If LifeStamp were ever sold or transferred, your information would move with it, and we would tell you beforehand so you could take a copy or close your account first.

7. How long we keep it
As long as you want us to. Your material stays while your account exists, including if you stop paying — an unpaid account becomes read-only, not deleted.
If you close your account, we remove your material from our systems within 30 days, except anything we must keep for legal or accounting reasons (payment records, for instance). Copies may persist in backups for a short period afterwards before they are overwritten.
We may remove data from accounts that have been both unpaid and entirely unused for a long period, but we would write to you first and offer you a copy.

8. Keeping it safe
Everything travels encrypted, and is stored encrypted. Access to a chronicle is enforced by the database itself, not just by the app — so a flaw in the website cannot expose someone else's family to you. Passwords are hashed and cannot be read by us. Payment details never reach our servers at all.
No system is perfect. If a breach ever occurred that was likely to cause serious harm, we would notify you and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme.

9. Your rights
You may:
●    see what we hold about you — most of it is simply in your account
●    correct anything wrong
●    get a copy of your material, including photographs and recordings — write to us and we
  will arrange it
●    delete your account and your material
●    withdraw access you have given to other people, at any time
●    complain if you think we have mishandled your information
Write to admin@lifestamp.co. We will respond within 30 days.
If you are not satisfied with our answer, you can complain to the Office of the Australian Information Commissioner — oaic.gov.au, 1300 363 992.

10. Children
LifeStamp is not intended for children under 16 to use on their own. Parents often write chronicles about their children, which is a different thing and perfectly proper. If you believe a child has created an account without a parent's involvement, tell us and we will deal with it.
11. Cookies
We use only what is needed to keep you signed in and remember basic preferences. No advertising cookies, no third-party tracking, no analytics that follow you elsewhere.

12. Changes to this policy
If we change anything that matters, we will tell you by email or in the app before it takes effect. The date at the top shows when this version was published.

13. Contact
LifeStamp Pty Ltd admin@lifestamp.co
If something about your privacy worries you, please write. We would far rather hear about it than have you wondering.