Legal
Privacy Policy
Last updated: 22 June 2026
Who this policy is for
This policy explains how LioraBump handles personal information when you use the website and app. For privacy questions or requests, email jobyktom@gmail.com.
Information we collect
We process account details such as name and email address; family workspace details such as due date and country; content you choose to add, including notes, appointments, health-tracker entries and uploaded photos or documents; invitation details; subscription identifiers from Stripe; and messages you send through Contact Us. When you request a free download, we collect your email address, the download requested, the date and whether you chose to receive marketing emails. We also use essential authentication data needed to keep you signed in securely.
Why we use it
We use this information to provide your private workspace, authenticate you, enable family sharing you choose, store and retrieve uploaded files, provide support, prevent misuse, manage subscriptions, and provide a requested free download. Where required by data-protection law, our basis is performance of our contract with you, legitimate interests in operating a secure service, compliance with legal obligations, or your explicit consent for health-related information you choose to enter.
Marketing emails and free downloads
We only send marketing emails when you actively opt in using the separate checkbox on a download form or another consent request. You can download a free resource without agreeing to marketing. You can withdraw marketing consent at any time by using the unsubscribe link in a marketing email or by emailing jobyktom@gmail.com. Withdrawing consent does not affect any processing completed before withdrawal.
Health and family information
Pregnancy, health and baby information can be sensitive. Do not use LioraBump for emergencies or to send information you do not want stored. Share family information only with consent. We do not sell health information or use it for advertising decisions.
Service providers
We use Supabase for authentication, database and private file storage; Stripe for payments and subscription billing; Hostinger to host the website; and, when Contact Us email is configured, Resend to deliver support messages. These providers process data only as needed to provide their services to us. Their processing locations and safeguards are governed by their own data-processing terms.
Sharing
Your workspace is private by default. Information is shared with invited family members only when the workspace owner chooses to invite them and the recipient accepts. We may also disclose information where required by law, to protect safety, or in connection with a lawful business transfer.
Retention and deletion
We keep account and workspace information while your account remains active. You can export or delete workspace data in Settings. We retain download and marketing-consent records until you withdraw consent, ask us to delete them, or we no longer need them for the purpose collected. We delete or anonymise information where practical, except for information we must retain for legal, fraud-prevention, billing or security reasons. Contact messages may remain in our support mailbox for up to 24 months.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, and withdraw consent. Start with the export and deletion tools in Settings or email us. You may also have the right to complain to your local data-protection authority. In the UK, this is the Information Commissioner's Office.
Cookies and security
We use essential cookies or similar storage required for sign-in and service security. With your consent, we use Google Analytics to understand anonymous public-site usage and signup paths; we do not send health entries, due dates, names or email addresses to Analytics. Stripe may use its own technology during checkout. We use reasonable technical and organisational safeguards, but no online system can guarantee absolute security. Keep your password private and tell us promptly if you suspect unauthorised access.
Changes
We may update this policy when our data practices, providers or legal obligations change. The current version and update date will always appear on this page. See our Terms and Conditions for the rules of using LioraBump.
This policy reflects the current product design, but it is not a substitute for legal advice. Before a public launch, have a qualified privacy professional review your business identity, data locations, retention periods, cookie use and applicable UK GDPR or other regional requirements.