Privacy policy

Who we are

Lighthaven is made by Aphvn ("we", "us"). We are the controller of the personal data described in this policy. You can reach us at any time at lighthaven@aphvn.com.

The short version

• Your photos and edits are processed on your device. We never upload, see or store them.
• You do not need to create an account. The app uses an anonymous guest account.
• Subscriptions are handled by Apple or Google, and managed through RevenueCat.
• We use analytics to understand how the app is used and to fix problems.
• We do not sell your personal data.

Your photos

Lighthaven's photo engine runs entirely on your phone. When you import a photo, a copy is stored in the app's private library on your device so it stays available even if the original is moved. Your edits, ratings, labels, albums, keywords and captions are stored in that same on-device library. None of this is sent to our servers. Photo metadata such as camera, exposure and location is read on your device to show you photo information and is only included in exports if you choose to keep metadata.

The app asks for access to your photos so you can pick photos to edit and save exports. You can change this permission at any time in your phone's settings.

Guest accounts

When you first open Lighthaven we create an anonymous guest account. It is identified by a random ID, not your name or email address. We use it to keep your subscription linked to your installation, to remember basic app settings, and to tie analytics events together. If you contact us by email, we will also have your email address and whatever you choose to tell us.

Subscriptions and payments

Lighthaven Pro is sold through the Apple App Store and Google Play. Apple or Google take your payment; we never see your card details. We use RevenueCat to check whether your subscription is active, to restore purchases and to understand subscription performance. RevenueCat receives your anonymous app user ID, purchase receipts and basic device information. See RevenueCat's privacy policy.

Analytics

We collect usage events, such as which screens and tools are opened, whether the onboarding was completed and whether an export succeeded, together with device information like model, operating system, app version, language and an approximate country derived from your IP address. We use this to improve Lighthaven, find bugs and measure which features people use. Analytics events never contain your photos or their contents.

Our analytics and measurement providers may include PostHog, Google Firebase Analytics and Singular (for measuring which campaigns lead to installs). On iPhone, we only use data for cross-app tracking if you allow it in the App Tracking Transparency prompt, and you can change your choice at any time in Settings.

Legal bases

Where UK or EU data protection law applies, we rely on: performance of a contract to provide the app and your subscription; our legitimate interests to keep the app secure, fix problems and understand how it is used; and your consent where the law requires it, for example for tracking on iOS.

How long we keep data

Data on your device stays until you delete the photos or uninstall the app. Analytics data is kept for up to 24 months. Subscription records are kept for as long as needed for accounting and legal obligations. Support emails are kept for up to 24 months after the conversation ends.

Sharing

We share data only with the service providers named above, who process it on our behalf, and where the law requires us to. Some providers are based outside the UK and EU; where data is transferred, it is protected by appropriate safeguards such as standard contractual clauses.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to move it to another service. Email lighthaven@aphvn.com. Because your guest account is anonymous, it helps if you tell us the app user ID shown in the app's settings. You also have the right to complain to your local data protection authority; in the UK this is the ICO.

Children

Lighthaven is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has given us personal data, contact us and we will delete it.

This website

lighthaven.aphvn.com does not use tracking cookies or third-party analytics. Our hosting provider may keep standard server logs, such as IP addresses, for security.

Changes

We may update this policy as Lighthaven changes. We will update the date at the top, and tell you in the app if the changes are significant.