/ Privacy
Privacy Policy
Last Updated: May 16, 2026
YOURFRIENDBL LLC, a Wyoming limited liability company ("YOURFRIENDBL", "we", "us", or "our"), builds calm, useful, privacy-first software and services. This Privacy Policy explains how we collect, use, store, and share information across all products and services we operate (each a "Service", and together the "Services").
Our current Services include — but are not limited to — Lysta — AI Grocery & Lists ("Lysta"). New apps, websites, and services launched by YOURFRIENDBL LLC are covered by this Policy from the date they launch, unless we publish a separate or supplemental policy for that specific product.
AI features. Some of our Services include AI-powered features (for example, in Lysta: chat assistant, voice-to-list, smart suggestions, receipt scanning). The way we handle AI-related data in any Service is described in detail in our separate AI Policy, which is incorporated by reference into this Privacy Policy and applies wherever AI features appear in our Services.
Product-specific notices. Where a Service collects information that is unusual or specific to that product, we will surface a product-specific notice inside that Service in addition to this Policy.
1. Information We Collect
1.1 Information you provide to us
- Account details: name or nickname, email address, password (if you register with email/password).
- Profile information: optional avatar or profile image, language and region preferences.
- In-app content: lists, items, notes, reminders, groups, shared-list and group-membership information, feedback or support messages.
1.2 Information from sign-in providers
When you sign in with Google or Apple, we receive limited profile information from that provider:
- Provider account ID, name, email address, profile photo (where available).
We do not access your Gmail, Google Drive, Calendar, Contacts, Apple iCloud content, or any other product data from these providers.
Lysta uses sign-in-provider data strictly to:
- Authenticate your identity
- Create and manage your Lysta account
- Show your name and avatar inside the app
- Prevent fraud, abuse, and unauthorized access
1.3 Device permissions and sensor data
When you use specific features in our Services, we request OS-level permission to access certain device capabilities. Examples include:
- Microphone — to record voice when a voice or AI feature is used. See AI Policy for how voice data is handled.
- Camera — to scan receipts, capture photos, or take profile/group avatars where those features exist.
- Photo library — to choose images for profiles, groups, or content uploads.
- Location (only if a feature requests it) — for features that require it (such as nearby-store lookups). Location is not collected in the background.
- Notifications — to deliver activity, account alerts, and other updates you opt into.
1.4 Automatically collected information
- Device information: model, OS version, app version, language and region.
- Log and usage information: timestamps of app actions, IP address, basic network information.
- Crash and performance data: error logs and performance metrics.
- Push notification tokens: device push tokens (Google for Android, APNs for iOS), stored to deliver notifications.
2. How We Use Your Information
Provide and operate our Services
- Create and maintain your account across the Services you use.
- Sync your content between your devices.
- Deliver push notifications you have opted into.
- Provide AI-assisted features (see AI Policy).
Use sign-in-provider data
- Authenticate you via Google or Apple Sign-In.
- Pre-fill your profile (name, email, avatar).
- Link your account for cross-device sign-in.
No behavior-based ads
We do not use your personal data to build advertising profiles or to show behavior-based ads. We do not use your content to train third-party AI models.
3. How We Share Information
We do not sell your personal data.
3.1 Service providers (subprocessors)
We use trusted third-party services to operate Lysta. They process data on our behalf and only under our instructions:
| Provider | Purpose |
|---|---|
| Google Cloud | Hosting, data storage, authentication, push delivery, analytics, and crash reporting |
| Apple | Sign in with Apple, Push Notification Service, App Store payments |
| RevenueCat, Inc. | Subscription management |
| AI service providers | AI features. See AI Policy. |
3.2 Legal and safety
We may disclose information if we believe in good faith that it is necessary to comply with applicable law, enforce our Terms, or protect safety and rights.
4. Data Storage and Retention
- Data is stored on secure cloud infrastructure operated by subprocessors (primarily Google Cloud).
- We retain your information for as long as your account is active.
- If you delete your account, we will delete or anonymize personal data we are not legally required to keep.
5. Your Rights and Choices
Depending on your location, you may have rights to access, correct, delete, or port your data. Contact support@yourfriendbl.com to exercise these rights.
5.1 California residents (CCPA / CPRA)
We do not sell or share your personal information as those terms are defined under the CCPA/CPRA.
6. Children's Privacy
Lysta is not directed to children under 13. Users under 13 may use the Service only with parental supervision and consent.
7. Contact Us
YOURFRIENDBL LLC
A Wyoming limited liability company
Website: yourfriendbl.com
Email: support@yourfriendbl.com