Privacy policy
Last updated: 24 October 2026
This policy explains what information the Lyso app and getlyso.app ("Lyso", "we", "us") handle, why, and the choices you have. Lyso is provided by Simon Ekstrand, Sweden, who is the data controller.
The short version
- Photos you edit are sent to our server and to Google's AI service only to make your image. We don't keep them on the server afterwards.
- If you sign in, your saved photos (My photos) are stored in our cloud so they follow you to a new phone. Only your account can reach them.
- No ads, no selling of data and no tracking across apps or websites.
- You can delete your account and everything stored with it, in the app, at any time.
Information we handle
| What | Why | Legal basis (GDPR) |
|---|---|---|
| An account ID, created automatically when you first use AI features | To count AI photos per person, give you your free photo and prevent abuse | Contract; legitimate interest |
| Email address, and an ID from Apple or Google if you sign in with them | So you can sign in and reach your photos and purchases on any phone | Contract |
| Photos you choose to edit | To make the image you asked for (light, recognising the subject, styling) | Contract |
| Photos in My photos, if you're signed in | To keep them for you across phones | Contract |
| Number and time of AI photos | Free allowance, bought photos, subscriptions and limits that keep the service affordable | Contract; legitimate interest |
| Purchases and subscriptions (via the App Store or Google Play and RevenueCat) | To give you what you bought | Contract; legal obligation (bookkeeping) |
We don't use your photos to train AI models. Photos with people or animals in them are never styled.
Who helps us (processors)
- Supabase: database, sign-in, sign-in codes by email, and storage for My photos. Hosted in the EU (Stockholm, Sweden).
- Google (Gemini API): processes the photos you edit to make your image. Under Google's terms for paid API use, the content is not used to train Google's models.
- RevenueCat: handles purchases and subscriptions. Data may be processed in the USA under the EU's standard contractual clauses.
- Apple and Google: as app stores, payment providers and sign-in providers, under their own privacy policies.
How long we keep it
- Your account, My photos and sign-in details: until you delete your account.
- Photos you edit: only while your image is being made. They are not stored on the server afterwards.
- The count of AI photos: kept to run the service; when you delete your account, the link to you is removed.
- Purchase records: as long as bookkeeping law requires.
Your rights
You can delete your account at any time in the app: Settings → Account → Delete account. This deletes your account and the photos stored in our cloud. Photos saved in your camera roll are not affected.
You also have the right to access, correct, restrict or object to the processing of your data, and to receive a copy of it. Contact us at the address above. If you think we handle your data wrongly, you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se) or your local data protection authority.
The website
getlyso.app sets no tracking cookies. It remembers the language you pick in your browser, and loads fonts from Google Fonts and store badges from Apple and Google, which may see your IP address.
Children
Lyso is not intended for children under 13.
Changes
If we change this policy, we'll update the date above, and tell you in the app if the change matters to you.