Lovely Day

Privacy

What Lovely Day holds, who sees it, and when.

Last updated 24 September 2026.

Who we are

Lovely Day is made by Apps People Pty Ltd, in Western Australia. We decide how the information in Lovely Day is handled, and we’re responsible for it. Write to us at hello@getlovelyday.com.

What we hold

Your account

Your email address, which is how you sign in. Your full name, the name you like to be called, your country and your mobile number.

Your plan

Everything you write down: your funeral wishes, the practical things your family will need, the people you name, and the songs, readings and photos you choose. Some of it is about other people, such as your executor, your pallbearers, and anyone you’d rather wasn’t invited.

The people you choose

For your keyholders and the people you leave messages for: their name, how you know them, their email address, and their mobile number if you give one.

What you record and add

Your videos, voice recordings, letters, photos and funeral papers. Photos and videos hold hidden details, such as where they were taken. The app makes a clean copy on your phone and sends only that, so where they were taken never reaches us.

The little we need to run it

When you ask for a sign-in code we keep the address it went to and the internet address it was asked from, so nobody can use Lovely Day to send a flood of emails. Those are deleted after 30 days. We keep a name for each device you’re signed in on, so you can tell them apart. We keep a record of what happened when a death is reported, so the family can see who said what and when.

Proof of a death

The death certificate, or the funeral director’s confirmation, that a keyholder sends us after you die. We keep it with your account, and it’s deleted with everything else.

Paying

Whoever takes the payment takes it, not us — Apple or Google in the apps, Paddle on the website. We never see your card. We keep the receipt number they give us, so your account knows it’s paid for.

If you buy on the website, Paddle needs your email address to send the receipt, and the country you’re in, because that sets the tax. We tell them which account the payment is for, and nothing else about you.

There is no advertising in Lovely Day, no analytics, and nothing that follows you around. We don’t sell anything about you, and we never will.

Why we hold it

To do what you asked: to keep your plan safe while you’re alive, and to give it to the right people when you die. Some of it we must keep to run the service at all, such as your email address. Some of what you write can be sensitive, such as your religion or your health. You choose to tell us, and we use it only to carry out your wishes.

Who sees it

While you’re alive, nobody but you. Your keyholders can’t see your plan, your photos or your messages. They only know they’re one of your keyholders.

We can read what you store, because we have to send it to the right people when the time comes. Only the people who run Lovely Day can, and only when there’s a reason, such as helping you with a problem or dealing with a death.

When you die, two keyholders have to confirm it. We email you first and wait 48 hours in case it’s a mistake. Then:

• Your keyholders get your funeral wishes, the practical things, your funeral papers and your photos, and later a copy to keep.
• A keyholder can send a funeral director their own link, which shows what’s needed to arrange the funeral and nothing else. It works for 90 days.
• Your messages go to the people they’re for, each to that person alone, once your death has been officially registered.

If you turned on “In 100 years”, your story is made public 100 years after your death, without your practical things, your papers, your keyholders, or anyone’s email address or phone number. You can turn it off at any time while you’re alive.

We’d also give information to a court, or to the police, if the law made us. We’d tell you unless we weren’t allowed to.

Where it’s kept

With Amazon Web Services in Sydney, Australia, whoever you are and wherever you live. It’s encrypted where it’s stored and on its way to and from your phone.

It isn’t end-to-end encrypted. Our systems can read it, as they must to send it to the right people when the time comes.

The companies that help us

• Amazon Web Services holds everything, in Sydney, and sends our emails.
• Apple and Google take payments through their stores.
• Paddle sells the paid plan on the website and takes the payment for it. They see your card, your email address and your country; we see none of those.
• Apple Music answers when you search for a song. The words you type are sent to Apple; who you are isn’t.

Emails we send travel over the internet like any other email, and the company that runs your email sees them.

How long we keep it

• While you have an account, and for at least 5 years after your death.
• A message dated later stays for at least 5 years after it’s sent.
• If you delete your account, everything goes 7 days later. See how to delete your account.
• Our backups are kept for 14 days, so deleted information is gone from those 14 days later.
• A copy you make of everything is kept for 7 days, then deleted.
• Sign-in codes, and the internet address they were asked from, are deleted after 30 days.
• A record that we sent an email, being who it went to and its subject, is kept for 90 days. What the email said isn’t kept at all once it has been sent.

What you can do

• See it all: in Settings, choose “Make my copy”. You get one file with everything, messages included.
• Change it: everything you wrote can be edited in the app.
• Delete it: in Settings, choose “Delete my account”.
• Change your mind about “In 100 years”: the switch is in Settings.

Depending on where you live, you may also have the right to ask for a copy in a form you can take elsewhere, to object to what we do, or to ask us to limit it. Write to hello@getlovelyday.com and we’ll answer within 30 days.

If you think we’ve got it wrong, please tell us first. You can also complain to the privacy regulator where you live. In Australia that’s the Office of the Australian Information Commissioner.

Cookies

Lovely Day uses no tracking cookies. In a web browser, your plan is kept in that browser so it works while you’re writing, and signing out clears it. A keyholder reporting a death gets one cookie so they stay signed in on those pages.

Children

Lovely Day is for adults. You must be 18 or over to have an account.

Changes

When this changes we’ll change the date at the top. If it changes in a way that matters, we’ll email you before it takes effect.