Privacy policy

Effective October 24, 2026

This policy covers the Lyzma app for iPhone, its story-sharing service and this website. Lyzma is made by Sébastien Lavoie, who is responsible for all three.

Lyzma keeps the voices, photos, videos and words of a family's memories. They stay on your iPhone and in your own iCloud unless you decide to share a story. This page explains what Lyzma keeps, where, who can read it, and for how long.

On your iPhone

Recordings, transcripts, notes, names, chapters and the rest of your library are stored on your iPhone, protected by its passcode. Finished recordings are also encrypted with a key that never leaves the device. A photo or video you choose stays in your Photos library: Lyzma remembers which one it is. When Lyzma cannot use Photos, it keeps its own copy.

Lyzma turns speech into text with Apple's on-device speech recognition. Where Apple Intelligence is available, Lyzma also uses it on the device to suggest names for memories. Neither sends anything to us.

In your iCloud

Lyzma saves recovery copies of your library in its iCloud container, in your Apple Account. They are encrypted with your recovery kit, which only you hold, so neither Apple nor we can read them. Lyzma also keeps a readable copy of each memory in its folder in your iCloud Drive, so you can open your memories on a Mac. That copy is protected by your Apple Account, as your other iCloud Drive files are. Apple's privacy policy covers iCloud.

When you share a story

Sharing is optional, and nothing is shared until you publish a story. When you do, Lyzma's service, which runs on Cloudflare, receives and keeps:

• The story, sealed. Its video, title and narration are encrypted on your iPhone with a key that is only in the link. We keep the sealed files until the story ends: when you stop sharing it, or 30 days after it was published, whichever comes first. They are deleted within minutes of the end.
• The addresses you invite. Each one is used to email that person a code when they ask for one. We keep only a keyed digest of each address, never the address, and only until the story ends. Cloudflare's email service keeps its own record of each code email, including the address, under Cloudflare's retention. Each code stops working after 10 minutes.
• Your account. You sign in with a passkey. We keep its public key, an identifier for your account, and a hash of each sign-in session. Sessions expire after 30 days.
• Bookkeeping. For each story we keep its state, size and dates, so we can enforce limits and tell a late visitor that a story has ended. This is kept for 30 days after the story ends.

We do not keep IP addresses, which stories a browser opened, or a code in readable form, and we keep no viewing history. Cloudflare processes each request for security and to protect the service from abuse, under its own privacy policy.

If someone shares a story with you

You type your email address to receive a code, and the code opens the story in your browser. Your browser keeps a session cookie until the story ends or you choose "Forget this browser". We record that an invited address verified a browser, but not when it was opened or whether anything was played.

Feedback

"Send feedback" in Settings writes a message that you send from your own email app. It includes counts and codes that help us find a problem, never your memories, and you see all of it before it goes. We use it only to answer you and fix the problem, and we delete it if you ask us to.

Children

Lyzma is made for parents and other adults who keep a family's memories. It is not directed to children, and a child does not use it to send anything to us. The recordings and pictures of children that a parent keeps stay on the parent's iPhone and in their iCloud, as described above. If they are part of a shared story, they are sealed so that we cannot see them.

Who else is involved

• Apple provides iCloud, Photos, speech recognition and Apple Intelligence on your device.
• Cloudflare runs Lyzma's service: it stores sealed stories and their bookkeeping, and sends code emails. It processes this data for us, under its own commitments to protect it.

We do not sell or rent data, and we share it with no one else unless the law requires us to.

Your choices

• Delete a memory: swipe it in Memories and choose Delete. Every Lyzma copy goes from your iPhone and from iCloud.
• Stop sharing a story: open it and choose Stop sharing. The link stops working for everyone at once. A copy someone already downloaded stays with them.
• Delete your sharing account: in Settings, choose Delete Sharing Account. Every story you share stops at once, and we forget your passkeys and sessions. You can also write to us and we delete it.
• Remove everything: delete the app. Your recovery copies stay in your iCloud until you remove them in iCloud settings.

This website

This website uses no cookies, no analytics and no third-party scripts or fonts. It is served by Cloudflare, which processes visitors' IP addresses and request details to deliver pages and protect the site from abuse, as described in Cloudflare's privacy policy. We do not use this information to identify visitors.

Changes

If this policy changes, the new version is posted here with a new effective date. When a change affects what we keep, Lyzma also says so in the app.

Contact

Questions or requests: feedback@lyzma.com.