LORELIGHT
EN

Privacy Policy

Last updated: 8 October 2026

This policy explains which personal data Maximalisme B.V. processes when you use the Lorelight app on iPhone, iPad or Android and the website lorelight.app, why we do so, and what your rights are under the General Data Protection Regulation (GDPR).

In short: the app has no account, no analytics, no advertising and no tracking. Your progress, lessons and settings stay on your device. We only process the minimum that is technically needed to deliver the films and, when you buy something, to unlock it. For the bonus films, our server also counts the evenings on which you watch. If the app crashes, it sends an anonymous crash report so that we can fix the error.

Who is responsible

The controller for the processing described here is Maximalisme B.V., Atoomweg 63, 3542 AA Utrecht, the Netherlands, registered with the Dutch Chamber of Commerce (KvK) under number 67162142. For anything about privacy, email lorelight@maximalisme.nl.

The app: your data stays on your device

Lorelight has no account and no login. Everything you do in the app, such as the stories you watched, your lessons and notes, quiz results and your settings (language, narrator, subtitles, reminder time), is stored only in the app's own storage on your device (iPhone, iPad or Android). It is not sent to us and we cannot see it. The app also keeps a few technical items there, such as temporary links to films and an invitation or influencer code you opened. If you delete the app, this data is deleted with it. One exception: for the bonus films, the evenings on which you watch are also reported to our server (see Seven evenings and bonus films).

What the app does not do

If you have chosen in your device's settings to share analytics or usage data with app developers, Apple or Google may send us anonymous crash and performance reports. Apple and Google decide what these contain; they do not tell us who you are.

On iPhone and iPad, RevenueCat (see Purchases) receives a token from Apple's AdServices framework. It only tells us whether Lorelight was installed after an Apple Search Ads advertisement in the App Store, and from which campaign. It is not a tracking identifier and does not require tracking permission.

Streaming the films

The app downloads films, images, subtitles and story texts from media.lorelight.app. These files are stored and delivered by Cloudflare. As with any internet connection, your IP address and technical details of the request (time, requested file, device and system type) are processed to deliver the file. For free stories and previews the app sends no name, account or other identifier.

For full films that are part of Lorelight+, the app first asks our server (media.lorelight.app/api/play, which runs on Cloudflare) for a temporary link. With that request it sends your anonymous app user ID (see Purchases), the name of the requested film file, and whether and when the app last saw an active membership. The server checks your membership with RevenueCat and returns a link that works for about six hours; the app keeps such links on your device until shortly before they expire, so that a film starts quickly the next time. The server stores nothing permanently: a confirmed membership is remembered for ten minutes, counters against abuse (per app user ID and per IP address) for one minute, and Cloudflare's technical logs of these requests, which can contain the app user ID and the film file, are deleted automatically within seven days. We use them only for security and to fix problems.

Seven evenings and bonus films

If you watch on seven evenings in a row, you unlock a bonus film. So that bonus films can only be unlocked this way, the app reports each evening on which you watch to our server (media.lorelight.app/api/night, which runs on Cloudflare). It sends your anonymous app user ID (see Purchases), the date of that evening and the time-zone offset of your device, so that the server knows when your evening ends. Linked to that ID, the server stores the dates of at most your last 40 evenings, how many bonus films you have earned and which bonus films you have unlocked. The app also gives RevenueCat three counters: how many bonus films you have unlocked, the last one, and how many series of seven evenings you have completed. Your lessons, notes and quiz answers are not sent.

This record is deleted automatically twelve months after the last evening the app reported. If you stop using the app, it disappears by itself.

Reminders

If you turn on a story reminder, or start a free trial and allow notifications, the notification is scheduled by iOS or Android on your device itself. Nothing is sent to us or to any server; Lorelight does not use push notifications. You can turn reminders off in the app or in your device's notification settings.

Crash reports

If the app crashes or runs into a serious error, it sends a crash report to Sentry (Functional Software, Inc.), which stores it for us in the European Union (Frankfurt, Germany). We use these reports only to find and fix errors. A report contains the technical error message and the place in the app's code where it happened, the app version and build number, the device model, the operating system and its version, the app language, whether it is a test version or the store version, and a short list of the last screens the app opened before the error. For about 5% of app sessions, the app also sends how long screens took to load.

A crash report contains no name, account, email address, advertising identifier or app user ID for purchases, and none of your lessons, notes or quiz answers: the app does not send screenshots, the content of the screen or anything you type. To count how many installations an error affects, Sentry uses a random installation number that is not linked to you. Your IP address is used for the connection but is not stored with the report. Crash reports are deleted automatically after at most 90 days.

Stars after a story

After a film, an Inside Story or a footnote, the app may ask you once how you liked it, with 1 to 5 stars. Answering is entirely optional: you can skip the question, and you can switch it off in My lamp (“Ask for stars after a story”). If you give stars, the app sends only this to our server at Cloudflare: which story or part it is, the number of stars (and, if you change them later, your previous number), the app language, the narrator voice and subtitle language you used, the app version and build number, the platform (iOS, Android or web) and the date.

A rating contains no name, account, e-mail address, advertising ID, purchase ID or installation number, and cannot be linked to you or to your other ratings. Your IP address is used only for the connection and to block abuse; it is not stored with the rating. We only look at ratings in aggregate, to learn which stories, voices and languages work and to choose and improve new stories. Ratings that have not been sent yet (for example when you are offline) wait on your device and are deleted together with the app. We keep ratings for at most 24 months.

Purchases

Subscriptions and the lifetime purchase are sold and billed by Apple through the App Store on iPhone and iPad, and by Google through Google Play on Android. Apple or Google receives your payment details; we never do, and we do not receive your name or the email address of your Apple Account or Google account.

When you open the app or make or restore a purchase, the app uses RevenueCat (RevenueCat, Inc., United States) to check what you have bought. RevenueCat receives an anonymous app user ID that the app creates at random, and your purchase history for Lorelight from Apple or Google (which product, dates, price and currency, country of the store and transaction or order numbers). With that ID the app also gives RevenueCat a few technical details: the device model (for example ‘iPhone 16’ or ‘Pixel 9’), whether it is a real device or a test device, and the app version and build number. We use this only to unlock the content you paid for, to restore purchases, to solve problems with a purchase and to see total sales figures.

If you cancel and choose a reason on the ‘Before you go’ screen (for example ‘Not enough time’), that one choice is stored with the same anonymous app user ID at RevenueCat, so we can see in total why people stop. It is optional and never linked to your name.

Invitations and influencer codes

Members can invite up to three friends from the app. When you create or view your invitations, the app sends your anonymous app user ID and your store (Apple or Google) to our server (media.lorelight.app/api/invite, which runs on Cloudflare). The server checks with RevenueCat that you are a member and stores, linked to that ID, your invitation links, a one-time gift code from Apple or Google Play for each invitation, and the status of each invitation. When a friend opens the app through your link, the friend's anonymous app user ID is linked to the invitation. To give you your reward, the server asks RevenueCat whether your friend has become a paying member and in which store your own subscription runs; on Google Play your next payment is then postponed by 30 days through RevenueCat and Google. No names, email addresses or contacts are involved: you share the link yourself, in the way you choose.

If you enter an influencer code, or open a link that contains one, the app sends the code and your store to media.lorelight.app/api/code to check that it is valid; nothing is stored for this check. If you then buy with the code, the server stores the code with your anonymous app user ID, your store, the product and the date, and the code is also saved with your app user ID at RevenueCat, so that we can calculate the influencer's commission. We do not give your app user ID to the influencer.

Invitation and code records are deleted automatically twelve months after they were last changed (for example when an invitation was created, accepted or rewarded). You can ask us to delete them earlier (see Deleting your data).

Access codes for app reviewers

For app review, we give Apple, Google and a few testers a secret access code, which can be entered on the membership screen. When a valid code is entered, our server (media.lorelight.app/api/code, which runs on Cloudflare) stores your anonymous app user ID with your store and an expiry date, which gives that device full access for 30 days. Each use of a valid code is also logged with the app user ID, the store and the country (derived from the IP address; the IP address itself is not stored); this log is deleted automatically after 90 days. The binding itself is deleted automatically 30 days after it expires. If you do not have such a code, nothing is stored.

The website

Email and support

If you email us, we use your email address and your message only to answer you. We keep the conversation as long as needed to help you, and delete it no later than two years after our last contact, unless we need it longer to handle a dispute. Our mailbox is hosted by TransIP in the Netherlands.

Social channels and YouTube

Lorelight publishes on YouTube, Instagram and TikTok. When you interact with us there, the privacy policy of that platform applies. To publish our own videos we use the YouTube API Services. This connection only accesses the Lorelight channel to upload videos, thumbnails and subtitles; it does not access data of viewers or other users. By using our YouTube content you are also bound by the YouTube Terms of Service, and Google's processing is described in the Google Privacy Policy. Access granted to our app can be revoked at any time through the Google security settings.

To choose good times to post, we compare the statistics that the platforms give us about our own posts, such as the reach of each post. These are totals; they do not tell us who saw a post.

Service providers and transfers

We do not sell personal data and do not share it for advertising. We work with these service providers, which process data on our behalf or, in the case of Apple and Google as app stores, under their own responsibility:

Where a provider processes data outside the European Economic Area, the transfer is protected by the EU-U.S. Data Privacy Framework or by the European Commission's standard contractual clauses.

Legal basis and retention

We keep data no longer than needed for these purposes: technical logs of film links at most seven days, website server logs about two weeks, access-code logs 90 days, emails up to two years after our last contact, invitation, influencer-code and bonus-film records twelve months after their last change, and purchase information at RevenueCat for as long as you use Lorelight and at most twelve months after your last subscription or purchase has ended. Sales and payout records are kept for seven years because Dutch tax law requires it.

Your rights

You have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. Email lorelight@maximalisme.nl; we respond within one month. Because there is no account and we do not know who you are, we may ask for details that help us find your data, such as the order number of your purchase from Apple or Google. Data that is stored only on your device you can delete yourself by deleting the app.

You also have the right to file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the data protection authority in the country where you live.

Deleting your data

This explains how to have your data deleted from Lorelight, the app of Maximalisme B.V. for iPhone, iPad and Android. Lorelight has no account, so there is no account to delete and you do not need to log in.

  1. Data on your device: delete the Lorelight app. This removes everything the app stored on your device: progress, lessons, notes, settings, film links and any invitation or influencer code.
  2. Data linked to your anonymous app user ID: email lorelight@maximalisme.nl from any email address, with the subject ‘Delete my data’. If you bought something, include the order number of your purchase: on Google Play it starts with GPA. and is in Google's receipt email and in Google Play under Payments & subscriptions › Budget & history; for the App Store it is the order ID in Apple's receipt email or at reportaproblem.apple.com. The app does not show your app user ID; the order number lets us find it. If you never bought anything, we hold nothing we could link to you, and deleting the app is enough.

What we delete: your customer record at RevenueCat (the anonymous app user ID with its purchase history and details such as device model, app version, cancellation reason and influencer code), and the invitation and influencer-code records linked to that ID on our servers. We also delete your bonus-film record (your evenings) and, if there is one, an access-code binding.

What we keep, and for how long: sales and payout records (product, date, amount, country and order number) for seven years, because Dutch tax law requires it; they do not contain your app user ID. Apple and Google keep their own records of your purchase as the seller, under their own privacy policies. Cloudflare's technical logs are deleted automatically within seven days. Deleting your data does not cancel a subscription: cancel it first in the App Store or Google Play.

We confirm your request by email and complete it within 30 days.

Children

Lorelight is not directed at children under 13, and we do not knowingly process their personal data.

Security

All connections to the app's media and to our website are encrypted (HTTPS). We keep the data we hold to a minimum and limit access to it.

Changes

If we change this policy, we update the date at the top. Important changes are also announced in the app or on this website. This policy is available in several languages; if they differ, the English version prevails.