Privacy Policy

1. Scope

ASIMPL LLC ("Asimpl," "we," "us," or "our") operates Lysta and the related Asimpl website and services. This Privacy Policy explains what personal information we process, why we process it, how it is shared, and the choices and rights available to you.

Third-party stores, sign-in providers, and websites have their own privacy policies for information they process independently.

2. Information you provide

Depending on the features you use, we process:

• Account information: Your email address, account identifier, display name, username, profile picture, authentication information, and optional profile details such as a phone number.
• List content: List names, items, quantities, completion and claim status, categories, notes, and other information you enter or save.
• Collaboration information: Invitations, list and group membership, roles, permission changes, edits, and collaboration activity. Features may also process presence or typing status to support live collaboration.
• AI inputs and results: Audio you submit, transcripts, photos, receipts, text, relevant list context, generated suggestions, and saved AI activity. The AI Policy explains these features in more detail.
• Plan and wallet activity: Subscription status, Pro Together membership, spending limits, Lumas balances, grants, deductions, reversals, and usage history.
• Support communications: Information you send when requesting support, reporting a problem, or exercising a privacy right.

Do not submit information you are not entitled to share. Images and receipts can contain personal information beyond the items you intend to scan; crop or remove unnecessary details before uploading them.

3. Information from other sources

If you use Apple, Google, or another supported sign-in provider, we receive the information that provider makes available for the sign-in you authorize, such as a provider identifier, name, email address, and profile picture. Apple may supply a private relay email address.

Other users may provide information about you through invitations and shared features. Stores and purchase-management providers supply transaction, subscription, refund, and entitlement information so we can deliver paid features and maintain accurate balances.

4. Device, usage, and diagnostic information

We process technical information needed to operate, secure, measure, and improve the service. This may include device model, operating system, app version, language, region, network information, IP address, timestamps, service requests, feature interactions, performance measurements, and crash reports.

Depending on the platform, permissions, enabled integrations, and applicable consent requirements, this can also include app-instance identifiers, device identifiers, notification tokens, installation attribution, campaign information, and advertising identifiers permitted by the operating system.

We use service providers for hosting, usage measurement, performance monitoring, error diagnosis, and installation attribution where enabled. Platform permissions and applicable consent choices apply.

We use Google Analytics in Lysta to understand app usage and improve the service. It processes usage events, app and device identifiers, and technical information, subject to applicable permissions and consent. See how Google collects and processes information from apps that use its services.

Website analytics and your choice

On asimpl.com, with your consent, we use Google Analytics to measure page visits, referral websites, approximate geographic location, browser and device information, scrolling, and interactions such as product links and contact buttons. Analytics cookies distinguish browsers and sessions; this is not an identification of a visitor by name. Google processes technical information, including IP addresses, to provide the service. See how Google processes information from sites using its services.

Website analytics stays off until you select Accept analytics. You can reject it or withdraw your choice at any time using Cookie preferences in the footer. We remember your choice in local storage for up to 180 days. Our analytics cookies are configured to expire after 180 days without renewal. A browser Global Privacy Control signal keeps website analytics off. User- and event-level analytics retention is set to two months without renewal on new activity; aggregated reports may be retained longer.

Our website event tracking uses fixed page paths and named interactions, not message contents, email addresses, phone numbers, arbitrary URL query parameters, or screen recordings. Advertising personalization and Google Signals are disabled. Clicking email or WhatsApp opens the service you select; it does not send us a message through this website.

5. Purchases and subscriptions

Apple App Store and Google Play process purchases made through their stores. We do not receive your full payment-card details from those purchases.

Purchase-management providers help us verify transactions, provide subscriptions, and maintain Lumas balances. Information shared for these purposes can include:

• Account and purchase-management identifiers, email address, display name, and an optional phone number when available.
• Product identifiers, transaction references, purchase and renewal dates, expiration and cancellation status, refunds, entitlements, and the applicable purchase environment.
• Lumas balance and transaction information needed for the wallet.
• Device and app-instance identifiers, permitted installation attribution, and campaign information.
• A native push-notification token when available and the relevant notification permission has been granted.

We use these records to connect purchases to the correct account, prevent duplicate grants, provide access, investigate errors, and handle refunds and support requests. Store purchase confirmations and Lysta's in-app activity records serve different purposes; an AI usage entry is not a store payment receipt.

6. Permissions and local storage

Lysta requests permissions when needed for supported features:

You can manage permissions through your device settings. Denying a permission may prevent the feature that requires it from working.

Lysta may keep a local copy of information so previously synchronized content can remain available offline. Offline changes can be queued and synchronized when connectivity returns. Content that has never synchronized to a device may be unavailable offline. Other users' changes become available after synchronization; offline copies are not a guarantee of the latest server state.

Use your device's security controls, particularly on shared devices. Clearing app storage or uninstalling the app can remove local data, including changes that have not synchronized.

7. How we use information

We use information to:

• Create and authenticate accounts and provide profile features.
• Store, display, synchronize, and share lists and related content.
• Deliver invitations, permissions, membership, and live collaboration.
• Process the AI requests you initiate and present their results.
• Provide subscriptions, Pro Together, Lumas accounting, and activity history.
• Send service communications and supported notifications.
• Detect misuse, fraud, unauthorized access, and billing errors.
• Investigate crashes, measure performance, and improve reliability and usability.
• Measure installation sources and campaigns where enabled and permitted.
• Respond to support requests, comply with law, and enforce our agreements.

We do not use your list content, submitted recordings, or receipt images to build advertising audiences. We do not sell those inputs to AI model developers for training.

8. Shared lists and Pro Together

When you join or share a list or group, other authorized participants can see the content and collaboration information exposed by that feature, including relevant profile details, item changes, assignments or claims, and activity.

Invitations expose the information needed to identify the inviter, recipient, and resource being shared. A recipient may retain a notification or message after an invitation is withdrawn.

Pro Together provides shared plan access and a shared subscription allowance. The owner can manage members and supported spending limits. Participants can see membership and shared usage information presented in the app; the owner may see member-level usage needed to manage the plan. Joining Pro Together does not, by itself, give other members access to your private lists or authorize them to view your AI input content.

People with legitimate access can copy or export information they see. Removing access does not erase copies they have already made.

9. AI processing

When you choose an AI feature, we and third-party AI service providers process the audio, images, text, and relevant list information needed to fulfill your request. This can include transcripts and generated results. See our AI Policy.

AI results can be saved as list content or activity history. Usage and billing records may remain separately from the underlying request content so balances and charges can be reconciled.

10. Who receives information

We share information as needed with the following categories of recipients:

Service providers process information under the arrangements applicable to the service they supply. Some platform providers also act independently under their own policies.

We may disclose information in connection with a merger, acquisition, financing, or sale of assets, subject to applicable safeguards and notice obligations. We may also share information with your direction or consent.

11. Legal bases where applicable

Where data-protection law requires a legal basis, we rely on performance of our contract to provide requested services; legitimate interests such as security, fraud prevention, support, and service improvement where those interests do not override your rights; compliance with legal obligations; and consent where required, including for applicable permissions and tracking or marketing technologies.

You can withdraw consent for future processing through the available settings or by contacting us. Withdrawal does not affect processing lawfully performed before withdrawal.

12. Retention and deletion

We retain information for as long as reasonably necessary for the purposes described here, taking account of the nature of the information, your account status, applicable legal obligations, security needs, and disputes.

• Account information and saved content are generally retained while your account remains active or until you delete the relevant information.
• Raw AI inputs, saved outputs, activity history, and provider-held data can have different retention rules. See the AI Policy. Deleting a history entry does not necessarily remove a separately saved list item or an accounting record.
• Purchase, Lumas ledger, fraud-prevention, and support records may be retained where needed for legal obligations, transaction integrity, and disputes after other account information is deleted.
• Backups and security logs are removed or overwritten according to the applicable retention schedules. Information that must remain is restricted to the purpose requiring retention.
• Local copies can remain on devices until removed by the app or through device storage controls. We cannot erase copies independently saved by other users.

The Account Deletion Notice explains how to request deletion and how it affects shared content and purchases.

13. International processing

Your information may be processed in countries other than where you live, including countries where our service providers operate. Their laws may differ from your local laws. Where required, we use an appropriate lawful transfer mechanism, such as standard contractual clauses or another recognized safeguard.

14. Your choices and rights

Depending on your location and the applicable law, you may have rights to access, correct, delete, receive a portable copy of, restrict, or object to processing of your personal information. You may also have rights to withdraw consent, appeal a decision about a privacy request, and complain to a data-protection authority.

You can manage available profile details, permissions, notification preferences, and account deletion through the app. For other requests, contact support@asimpl.com. We may need to verify your identity and your authority to act for another person. We respond within the periods required by applicable law. We do not discriminate against you for exercising applicable privacy rights.

We do not sell personal information for money. Whether a particular advertising or measurement disclosure constitutes a statutory "sale," "sharing," or targeted advertising depends on the enabled technology and applicable law. Where such processing applies, we provide the required notice and choice and honor legally applicable opt-out signals.

15. Children

Lysta is not directed to children under 13, and children under 13 must not create an account or submit personal information. Where local law requires a higher minimum age or parental authorization, that requirement also applies. If we learn that we have collected personal information from a child without legally required authorization, we will take appropriate steps to remove it. Contact us if you believe this has happened.

16. Security

We use technical and organizational safeguards intended to protect information from unauthorized access, loss, and misuse. No system or transmission method is completely secure. Protect your account credentials and contact us if you suspect unauthorized access.

17. Changes and contact

We may update this policy as the service or our practices change. We will update the effective date and provide additional notice or obtain consent when required by law.

For privacy questions or requests, contact ASIMPL LLC at support@asimpl.com. Website: asimpl.com.