Last updated: June 1, 2026
1. Who we are
This service ("LifeTrellis") is operated by Kerestely Engineering Consultants SRL("we", "us"), a company registered in Romania. We act as the data controllerfor personal data processed through LifeTrellis. You can contact us at kerestelyhuni@gmail.com.
2. Personal data we collect
- Account data: email, password (hashed), display name.
- Profile & app content: family group, allergens, recipes, scans, budget entries, errands, calendar events, notes, goals, habits, and other content you create.
- Usage & telemetry: log data, device identifiers, IP address, crash reports.
- Support messages: emails and messages you send us.
- Photos you upload: ingredient label images for OCR scanning and recipe images.
Payment data (card details, billing address) is collected and processed directly by Paddle as Merchant of Record. We never see or store full card details.
3. Why we use your data and our legal basis
- Provide the service (account, family sharing, scans, recipes, planner) — performance of a contract.
- Security, fraud prevention, abuse detection — legitimate interests.
- Customer support — performance of a contract / legitimate interests.
- Product improvement and analytics — legitimate interests.
- Sending transactional and service emails — performance of a contract.
- Marketing emails (if any) — consent, which you can withdraw at any time.
- Compliance with legal obligations (tax, accounting, lawful requests) — legal obligation.
4. Who we share data with
- Service providers (subprocessors): hosting and database (Supabase), AI processing for ingredient OCR (Google Gemini via Lovable AI Gateway), email delivery, error monitoring, and analytics tooling.
- Paddle.com as Merchant of Record for payment processing, subscription management, tax compliance, and invoicing.
- Other members of your family group, who can see content you share into the group (budget, errands, calendar, shopping list, etc.).
- Professional advisers (legal, accounting) where necessary.
- Authorities where required by law or to protect rights and safety.
5. International transfers
Some of our providers are located outside the EEA/UK. Where data is transferred outside the EEA/UK, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions issued by the European Commission.
6. Retention
We keep personal data for as long as your account is active. When you delete your account, your profile and personal content are deleted or anonymised within 30 days, except where we are required to keep certain records (e.g. invoices) for legal or tax purposes.
7. Your rights (GDPR)
You have the right to: access your data, correct it, delete it, restrict or object to processing, port it to another service, and withdraw consent at any time. You also have the right to complain to a supervisory authority (in Romania: ANSPDCP). We respond to verified requests within 1 month. To exercise any right, email kerestelyhuni@gmail.com or use the in-app "Delete account" feature.
8. Security
We apply appropriate technical and organisational measures to protect your data, including encryption in transit (TLS), encryption at rest, role-based access controls, and row-level security on our database. No system is 100% secure; you are responsible for keeping your password confidential.
9. Cookies
We use essential cookies and local storage to keep you signed in and to remember your preferences. We may use limited analytics cookies to understand product usage. You can manage cookies through your browser settings.
10. Children
LifeTrellis is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal data from such children.
11. Changes
We may update this notice. Material changes will be communicated by email or in-app notice.