Lirna

Privacy Policy

Effective: 15 July 2026 · Last updated: 31 August 2026

Lirna is a journal. Your journal belongs to you — your entries, your photos, and your face data stay on your phone. This document honestly explains what does leave your device, and why.

1. Who handles your data

The developer of the app and the data controller:

Controller	Zeinen Technology Ltd
Registered address	127 High Street,Kinross, KY13 8AQ
Contact	zeinentech@gmail.com
EU representative	If required under GDPR Article 27, name your EU representative here — confirm with a lawyer.

You can reach us at the address above with any privacy question at any time.

2. In short

The essentials in one paragraph

Lirna doesn't ask for an account and doesn't build a user profile about you. Your journal entries are stored on your phone. To write your daily draft, we send that day's photos for analysis to AI providers, but neither we nor they store them. Your face data never leaves your device. Cloud backup is optional and saves to your own Google Drive. Lirna is a paid, subscription-based app, and to measure our advertising we use an analytics SDK that collects your device's advertising ID (see section 4).

3. What data we handle, and why

Journal entries

The text you write or approve, along with its date and tags. Where it's stored: on your phone. Why: this is the purpose of the app. Legal basis: performance of a contract (Article 6(1)(b) GDPR).

Photos

With your permission, the app reads the photos taken on a given day from your gallery in order to write a draft about that day. To produce the draft, we downscale the photos and send them temporarily to AI providers for analysis (see section 4). The providers don't retain the images after analysis, and we don't store them on our server either. Legal basis: performance of a contract (Article 6(1)(b) GDPR); you grant the device permission and can withdraw it at any time.

Location data in your photos

If you grant the "photo location" permission, the app reads the GPS coordinates embedded in your photos and resolves them into a place name on your device (for example, "Brighton"). Only the place name is sent to the AI as text — never the coordinates. The app does not track your location and never requests continuous location permission.

Calendar events

If you enable "watch calendar" and grant calendar permission, the app reads the title, time, and location of the calendar events on that specific day, and sends them to the AI as text so your journal reflects your day. The app doesn't read your whole calendar, and calendar events aren't stored separately.

Your name

The first name you enter during onboarding is stored on your device and sent to the AI as context for writing your journal. You can change it any time in settings.

Subscription

Lirna is a paid, subscription-based app: after a short introduction, an active subscription (a free trial or a paid plan) is required to use its features. Subscriptions run through Google Play. Google handles your payment details — we never see or store your card information. The app only checks your subscription status.

Advertising ID and ad measurement

To understand whether our advertising works, the app includes the TikTok Business SDK, which collects your device's advertising ID and basic event data (for example, that the app was installed, or that a subscription was started or completed). This data is shared with TikTok to measure and attribute our ads. We never send your journal content, photos, face data, or other personal content to TikTok. You can limit or reset your advertising ID in your device settings (Settings → Google → Ads). Legal basis: our legitimate interest in measuring and improving our advertising (Article 6(1)(f) GDPR).

4. Who we share data with

To write your daily journal, the app uses external providers. The table below honestly shows what goes where.

Recipient	What they receive
Our own server (domain)	Acts as a proxy, forwarding the downscaled photos and the text metadata (time, place name, recognized names, calendar events) to the AI providers. It doesn't store the images.
Groq, Inc. (AI processing)	The downscaled photos and the text metadata, for image analysis and writing the journal text.
Anthropic, PBC (Claude, AI processing)	The scene description derived from the image analysis and the text metadata, for writing the journal text; as a fallback in case of errors, the photos as well.
Google LLC (Drive)	Only if you enable cloud backup: your journal text and downscaled photos are saved to the hidden app folder in your own Google Drive.
Google LLC (Play)	Subscription management and payment.
TikTok (ad measurement)	Your device's advertising ID and basic app events (install, start trial, subscribe), used only to measure and attribute our advertising. No journal content, photos, or face data.

We do not sell your data and don't share it with data brokers. Apart from the advertising ID used for ad measurement (described above and in section 3), data sent to the AI providers serves only to produce your daily draft. We do not use your journal content, photos, or face data for advertising.

Transfers outside the European Economic Area

The providers above are based in the United States, so your data may be transferred outside the EEA. The transfer mechanism (e.g. Standard Contractual Clauses or an adequacy decision) must be confirmed and named here during legal review.

5. Face recognition — biometric data

This feature is off by default and only works if you explicitly turn it on after we've explained what it does.

What happens: when you name someone in a photo, the app creates a mathematical "face signature" (embedding) of their face.
Where it's stored: only on your phone, in the app's database. Face signatures never go to a server, and they aren't part of the cloud backup either.
What the AI receives: only the recognized person's name, as text — never their photo or face signature.
Processing: face recognition runs entirely on your device.
Deletion: in settings you can rename or delete individual people at any time, or delete all face data with a single button.

Face signatures are biometric data used to uniquely identify a person, which the GDPR treats as a special category of personal data (Article 9). Legal basis: your explicit consent (Article 9(2)(a) GDPR), given when you enable the feature, which you can withdraw at any time by turning it off.

Other people's faces — your responsibility

When you name other people in your photos, you are handling their biometric data. Only add faces of people who have consented and whom you've informed. That consent is your responsibility.

6. Cloud backup

This feature is optional and off by default.

When you turn it on, we ask for permission to your Google account — solely for Drive's hidden app folder (drive.appdata). Only Lirna can access this folder; you won't even see it in your own Drive.
What we back up: your journal text and the associated downscaled photos.
What we do NOT back up: face data (face signatures and the people they belong to). On a new device you'll need to name people again.
Where it's stored: in your own Google Drive, using your storage quota. We can't access it and keep no copy.
Turning it off: you can disable it any time, and the app disconnects from your Google account. The app also offers a separate way to delete the backup.
The backup runs once a day in the background when there's an internet connection and something has changed.

7. How long we keep data

On your phone: until you delete it or uninstall the app.
On our server: we don't retain photos or journal text; they're discarded after processing. Specify the retention period for technical server logs here — e.g. "no longer than N days".
At the AI providers: providers process the request to produce the response. See their own privacy policies for their exact retention practices.
Advertising ID (TikTok): the advertising ID and ad events are retained by TikTok according to their own retention practices; see TikTok's privacy policy. You can reset the advertising ID at any time in your device settings.
In your Google Drive: until you delete it. It stays there even if you uninstall the app, so you can restore it on a new phone. It's removed when you delete it in the app, or when you disconnect Lirna in Google Drive (Settings → Manage apps → Delete hidden app data).

8. Your rights

Under the EU General Data Protection Regulation (GDPR), you have the right to:

access the data we hold about you,
correct inaccurate data,
have your data erased (the "right to be forgotten"),
restrict or object to processing,
data portability (the app offers PDF and text export),
withdraw your consent (for example, for face recognition), without affecting the lawfulness of processing before withdrawal,
lodge a complaint with a supervisory authority — you can contact the data protection authority in the EU country where you live, work, or where you believe an infringement occurred.

Since the app requires no account and your data lives on your device, you can exercise most of these rights directly in the app. If you have questions, write to zeinentech@gmail.com.

9. Deleting your data

You can delete your data at any time:

In the app: Settings → delete your data. This permanently removes your entries, photo references, and face data from the device.
Face data only: Settings → Face recognition → Delete all face data.
Cloud backup: you can delete the Lirna files saved to Drive from within the app. You can also delete them yourself in Google Drive: Settings → Manage apps → Lirna → Delete hidden app data.
Uninstalling the app: removes all data stored on the device. Note: uninstalling does not delete your cloud backup — that's deliberate, so you can restore it on a new phone. If you want the backup gone as well, delete it in the app first, or use Manage apps in Google Drive as described above.

If you need help deleting your data, write to zeinentech@gmail.com.

10. Children

Lirna isn't made for children and isn't directed at users under 16. We don't knowingly collect data from anyone under 16. If you believe a child has provided us with data, let us know and we'll delete it.

11. Security

All communication between the app and our server is encrypted (HTTPS/TLS).
Your journal and face data live in the app's private storage on your device, where other apps can't reach them.
Cloud backup goes to Google Drive's hidden app folder, accessible only to Lirna.
We keep no central database of users' journals — there's nothing to breach.

12. Changes to this policy

If we make material changes to this policy, we'll flag it in the app and update the date above. It's worth checking back occasionally.

13. Contact

For any privacy question, request, or complaint, write to zeinentech@gmail.com.