Privacy policy

1. Introduction

INLYA is operated by KL CONSEIL (Kevin Louisor, sole proprietor, France). For any privacy request, contact privacy@inlya.app or use the Contact page. This policy explains what data we collect, why, how long we keep it, who receives it, and your rights.

2. Data collected

We only collect the data necessary for the service to function:

• Account and profile data: phone number (OTP), first name, last name, date of birth, profile photo, encryption public key, account/subscription settings; email for early-access waitlist and support.
• Service data: encrypted memories, disclosure metadata, recipients (name/phone/photo depending on your choices), consent statuses, trusted contacts and legacy transmission settings.
• Technical data: app identifiers, security logs (including IP), push token, diagnostics and technical events; website cookies/trackers depending on your consent.

3. Purpose and legal basis

We process your data to provide INLYA (authentication, creation, storage and disclosure of memories), manage subscriptions, provide support, secure the service and improve it. Legal bases: contract performance, legitimate interests (security and abuse prevention), legal obligations (accounting/litigation), and consent for non-essential trackers and certain communications.

4. Encryption and security

Memories are encrypted: INLYA does not access memory content in clear text. We implement technical and organisational safeguards (encrypted transport, access control, monitoring, backups). You remain responsible for the content you upload, especially if it includes sensitive information.

5. Retention period

Account and memory data are kept for the lifetime of your account. Inactive accounts are deleted after a reasonable inactivity period. After deletion, technical purge applies within an operational delay (including backups). Security logs are retained for a limited and proportionate period. Billing data is retained as required by law.

6. Your rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, objection and portability. You can exercise them via privacy@inlya.app or the Contact page. We usually respond within 1 month (extendable depending on complexity). You may also lodge a complaint with your supervisory authority.

7. Cookies and website

The website may use strictly necessary cookies/trackers and, depending on your choice, analytics or marketing trackers (for example via a tag manager). Non-essential trackers are only enabled after consent. You can withdraw your consent at any time.

8. Modifications

We reserve the right to modify this policy. Substantial changes will be brought to your attention (e.g. by email or via the application). The date of the last update is shown at the top of this page.