Create your account

1. Information we collect

When you create an account we collect your first name, last name, email address and password (we store only a scrambled version of the password, never the password itself). You can also save your time zone, and we keep the plan of your account, the dates of your plan, and the history of the free paid time you received.

If you use a family we keep which family you belong to, the invitations sent to your email, the labels added to you, the gifts of paid plan time sent or received, and a log of the changes of the family (who joined, left or was removed, who became the owner, and who received a gift).

If you buy a paid plan, the payment is made on the pages of Stripe, our payment provider: we never see or keep your card number. We keep your customer number of Stripe, the payments you made (the plan, the period, the amount and the date), whether your plan renews by itself (the plan, the period, the date of the next payment and whether you turned it off), and the date until which your plan lasts. Stripe keeps your payment details and your invoices as described in its own privacy policy.

If you use friends we keep your friends (who they are and since when), the friend invitations you sent, with the email you typed, and the ones sent to your email.

If you use groups we keep the groups you belong to, your role in them (owner, admin or member), and the group invitations you sent or received. If you block or report a person we keep who you blocked and your reports, with the message you wrote, and a log of what happens in the friends and in the groups (who invited, joined, left or was removed, who ended a friendship or blocked a person).

To keep the service safe we keep the failed logins (the email that was tried and the IP address) and the requests of the public forms (the email and the IP address). We also collect technical information automatically, such as your device type, browser, and how you use the application.

2. How we use your information

We use your information to provide and maintain the service, to run the family features, to keep your account secure and stop abuse, to understand how the application is used so we can improve it, and to communicate with you. We send you emails about your account, such as the verification and password reset links, the invitations to a family, and notices about changes in your family and your groups (for example when a member leaves, when you are removed, when an ownership request is sent or answered, when a family is disbanded, or when you receive a gift). You can turn off the emails about invitations and requests, about the answers to what you sent and about the changes in your families and groups in the Settings of your account. The emails about your account itself, like the verification and the password links, are always sent.

3. Families, friends, groups and what other people see

An invitation to a family is sent to the email address the owner types, and the invitation link works for whoever opens it before it expires, so share it only with the person invited. The person invited can see the name of the owner and the names and labels of the members before they accept.

Members of a family see each other's names and labels. Your email address is hidden from the other members of your family until you turn on "Make my email visible to my family" in the Settings of your account, and you can turn it off again at any time. When it is hidden, nobody in the family sees it, the owner included. The owner can add and remove labels of every member, and every member can add and remove their own labels.

When you leave a family, or are removed, your labels in that family are deleted. When a family is disbanded all its members are removed.

The members of a group see each other's names and roles, even when they are not friends, and never the email address. The owner and the admins of a group invite from their own friends and can remove members, and only the owner can make admins, ask another member to take over the group (who has to accept) or disband it. Anyone but the owner can leave a group at any time. We email a friend that is invited to a group, and the members when they are removed or the group is disbanded.

A friend invitation is sent to the email address you type, and the link works for whoever opens it before it expires. Friends see each other's name and their paid plan, if they have one, never the family. Your email address is hidden from your friends until you turn on "Make my email visible to my friends" in the Settings of your account, and you can turn it off again at any time. You tell us who your friends are by inviting them, and either of you can end the friendship at any time without telling the other.

If you track larks (the things you want to remember to do) we keep their names, the descriptions of the plans that have them, the time to wait before a nudge, the dates you did them, the notes you write when you do them, and the history of those dates, with the name of the person who did each one for a lark you share with your family. Only you see them, unless you share a lark with your family or with one of your friends groups: then every member of your family or of that group sees it, with your name, and can mark it done, and the owner of the family, or the owner or an admin of the group, can change or delete it. When you leave the family or the group, or it is disbanded, your larks stay with you and are private again. You can give a lark up to five short tags, and everybody that sees the lark sees its tags. If your plan sends email nudges, we email you when a lark is due, at the hour of the day you choose in your settings, unless you turn these emails off in your settings or mute that lark, and we keep which of these emails we sent you, and the larks you muted, so that we do not send the same one twice. You can pause a lark, snooze it, and change or delete the times of its history that you added; a lark of a family can be assigned to a member, and the email nudges of that lark go to that member only. If your plan has the calendar of due dates, we create a secret link for it: a calendar app that uses the link shows the names and the due dates of your larks (and the descriptions, where your plan shows them), and anybody who has the link can read them until you make a new link or turn it off. We delete your larks and their history when you delete them or your account.

If you generate a referral link, we keep its code. When somebody opens your link we keep a cookie for 30 days that remembers it, so the account they create is linked to yours. You see the people who signed up with your link by their first name and the first letter of their last name, the day they signed up and whether they verified their email, never their email address, and the person who signed up sees nothing about you. A person that creates an account after you invited them to your family or as a friend, with the email you invited or from the link of your invitation, is linked to you the same way. When one of the two accounts is deleted, the link between them is removed.

4. Cookies and similar technologies

We use a cookie to keep you logged in. It is strictly necessary, it can't be read by scripts of the page, and it is sent only to LastLark. When you open a family invitation without being logged in, we also keep a cookie for one week that remembers the invitation, so you can answer it after you log in or register.

We also use cookies and similar technologies for application performance, to measure how the service is used, and to show advertising. You can accept those cookies in the banner that appears on the site, and you can clear or block cookies in your browser settings at any time, but the service needs the login cookie to work.

5. Sharing your information

We do not sell your personal information. We share information with the people of your family as described above, with service providers who help us operate the service (for example sending emails, protecting our forms against bots, and Stripe, which processes the payments of the paid plans), with advertising and analytics partners, when the law requires it, or to protect the rights and safety of our users and the service.

6. Data retention

We keep your account information, your plan history and your labels for as long as your account is active. When you delete your account we delete them, as described in the next section.

Failed logins and the requests of the public forms are deleted after one day. Invitations that expired, or were cancelled or rejected, are deleted 30 days later.

The log of the changes of a group is kept while the group exists, and we treat it like the one of a family: after a group is disbanded we remove the email addresses from it after 90 days and we delete it after 2 years. The log of the friends is deleted after 2 years. The reports are kept until we deal with them, and they are deleted with the accounts of the people in them.

The log of the changes of a family is kept while the family exists. After a family is disbanded we remove the email addresses from its log after 90 days, and we delete the log completely after 2 years.

7. Deleting and exporting your account

You can delete your account yourself in the Settings of your account, by entering your password. We delete your profile, your plan history, your labels, your larks and their history, your friends and your login information, and we remove your email address from the log of the families. The groups you own are disbanded and their members are told, and you leave the others. The family owner has to transfer the ownership or disband the family first, and a member leaves the family automatically. The invitations sent to your email are cancelled. We send you an email to confirm. Paid plan time you gave to others stays with them, without your name.

You can download a copy of your data (your profile, your plan history, your family, your friends, your groups, your invitations and your labels) in the Settings of your account, and you can log out of all your devices at any time.

8. Security

We use reasonable technical and organizational measures to protect your information, such as scrambled passwords, protected login cookies, limits on login attempts and on the use of our forms, and logging you out of every device when you change your password. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, or export your personal information, and to object to or restrict certain processing. You can delete and export your data yourself in the Settings of your account. For any other request, contact us using the details below.

10. Children's privacy

LastLark is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

11. Changes to this policy

We may update this policy from time to time. When we do, we will change the date at the top of this page. Continuing to use the service after a change means you accept the updated policy.

12. Contact us

If you have questions about this policy or your information, contact us at [email protected].