This Privacy Policy ("Policy") describes how Lisia S.r.l.s. ("Lisia", "we", "us" or "our") collects, uses, shares and protects your personal information when you use the Lisia mobile application, the lisia.io websites, our APIs, and any related service (together, the "Platform"). It explains what choices you have, the legal bases on which we rely, and how to contact us.
Lisia is a wellness-and-creator super-app: it lets people follow daily habits (movement, mindfulness, sleep, nutrition, sustainability), join communities, watch and broadcast live sessions, chat with an AI wellness assistant called Loopi, and subscribe to creators. This Policy reflects every one of those features.
This Policy applies to personal information processed when you create a Lisia account, browse content, post in communities, watch or host live streams, send direct messages, talk to Loopi, subscribe to Lisia Pro or Pro+, buy a creator pass, apply to become a creator or earn as one, follow or get followed, or otherwise interact with the Platform.
It does not apply to: personal information processed in the course of employment or contracting with Lisia, third-party services you reach through external links, or services that have their own privacy notices (Apple, Google, Stripe, OpenAI, Amazon Web Services, etc.).
Information you give us directly: account identifiers, profile content, authentication tokens from social sign-in, content you create (posts, comments, reactions, messages, voice notes, Loopi chats, live-room metadata), wellness preferences, communications, and creator applications (the description of what you will publish, sample content and the category you choose).
Purchases: when you subscribe to Lisia Pro or Pro+ or buy a creator pass, Apple or Google processes the payment. We receive the transaction record (product, price, currency, country, dates, renewal and refund status and an anonymous transaction identifier), never your card details.
Creator payouts: creators who earn on Lisia complete identity verification and enter their bank details directly with Stripe, our payout partner. Stripe keeps the identity documents and bank details; we receive only the verification status and the payout records.
Information collected or derived automatically: device data (IP address, model, OS, push token, app version, time zone, language), usage data (taps, video views, search queries), approximate location (IP-derived; precise location only with explicit consent), the earnings ledger for creators, and inferences for personalisation.
Information from third parties: profile fields shared during Apple, Google or Facebook sign-in; referrer user id from referral links; messages from our customer-service vendors.
Contacts (only if you use “Find people you know”): on your phone, your contacts’ numbers and emails are turned into a code (hash) and only the code reaches us; we compare it and delete it straight away, without keeping it. Contact names, photos and notes are never read.
Invites (only if you use an invite code): to stop fake invites from earning points, we store a one-way code (hash) of your network address and of your device's notification token, never the address itself. It is used only to recognise invites from the same network or the same phone, on the basis of our legitimate interest in keeping rewards fair.
We process personal information to: provide the Platform; power Loopi (see section 8); sell and renew subscriptions and creator passes, verify them with Apple and Google and handle refunds; give subscribers access to the content they paid for; calculate creator earnings and pay them out; review creator applications; deliver push notifications via Expo; personalise content; send transactional and (with your consent) marketing emails via Resend; detect fraud and abuse; comply with legal and tax obligations; and improve the Platform.
Creator applications are reviewed with the help of automated tools: OpenAI moderation and an OpenAI language model check that the application is safe, fits one of Lisia's categories and describes concrete content. The automated review can approve an application or send it to a person; when it is not confident, or when anything fails, a member of our team decides. If your application is declined you can ask for a review by a person from the application screen or at info@lisia.io, express your point of view and contest the decision (GDPR Art. 22).
Legal bases (GDPR Art. 6): performance of our Terms of Service (your account, Loopi, subscriptions, passes, payouts, application review, the age check for live streams); your consent (marketing emails, push notifications, precise location, analytics cookies on the website); our legitimate interests (fraud prevention, safety, content moderation, personalising your feed and recommendations, improving the Platform), which you can object to; and compliance with legal obligations (accounting, tax, anti-money-laundering checks carried out by Stripe, reports to authorities).
Wellness information: you may tell Loopi or your communities about your habits, sleep or how you feel. We use what you share only to provide the service you asked for, we never use it for advertising, and you can delete it at any time.
App usage analytics (Mixpanel). From the first launch we measure how the app is used (opens, screens, features used), linking events to your user identifier, to understand what works and improve Lisia. We do this on the basis of our legitimate interest. We never send Mixpanel your messages, your conversations with Loopi, health information, your email or your name. You can object at any time in Account → Settings → Privacy → Analytics: from then on we no longer collect events; to delete those already collected, write to info@lisia.io.
Finding people you know: showing you which of your contacts are already on Lisia and have chosen to be found (basis: your consent, given with the contacts permission and withdrawable in your phone’s settings). People over 18 can be found by anyone who has their number or email until they turn it off in Settings › Privacy; people under 18 can’t, unless they turn it on.
We share personal information only with: service providers (Amazon Web Services in us-east-1 for sign-in (Cognito), database (RDS), storage and delivery (S3, CloudFront), servers and realtime messaging (Lambda, API Gateway), live video (IVS) and notifications (SNS, EventBridge); Supabase in EU-Frankfurt for part of Loopi's replies; OpenAI for Loopi inference and voice, content moderation and the review of creator applications; Expo for push delivery; Mixpanel for app usage analytics (usage events such as app opens, screens and features used, linked to your user ID, with the device model and an approximate location derived from your IP address; never your email, your name or your messages; until deletion is automatic, the usage data Mixpanel holds is deleted on request by writing to info@lisia.io); LiveKit for audio and video calls (the call's audio and video, encrypted in transit, your user ID and the name shown in the call); GIPHY for GIF search (your search terms and your device's IP address, without your account); Mux for playing some videos (your device's IP address and playback requests, without your account); Resend for transactional email; Apple and Google for payment processing; Stripe for creator identity verification and payouts); other Platform users for content you publish; creators you subscribe to (your public profile and which pass you hold, never your payment details); aggregated or anonymised data; business transferees in a merger or acquisition; and authorities when legally required, including tax authorities for creator earnings.
We do not sell your personal information and we do not share it with advertising networks for cross-context behavioural advertising.
Lisia is based in Milan, Italy. Our cloud infrastructure runs primarily in Amazon Web Services' US East (N. Virginia) region, and OpenAI processes Loopi requests in the United States. When personal information is transferred outside the European Economic Area we rely on the EU-U.S. Data Privacy Framework where the recipient is certified under it, and otherwise on the European Commission's Standard Contractual Clauses, together with the data-processing terms of each provider. You can request a copy of the safeguards at info@lisia.io.
Public live rooms are visible to all logged-in users; community posts are visible to community members; content reserved for subscribers is visible only to people who hold the relevant pass. Live streams are broadcast through Amazon IVS. When a stream ends, its recording is kept as a replay until the host deletes it or their account. Live-chat messages and reactions are stored with the session; the host can pin or delete a comment and mute a participant for that stream, and we keep a record of these actions with the session.
To host a live stream you must confirm that you are at least 18 years old: the first time, we ask for your date of birth and keep it, visible only to you and to us, to apply this rule. If the date shows you are under 18 we keep only the fact that the check failed, so the rule cannot be bypassed by entering another date.
Do not share content you do not have the rights to or that violates our Community Guidelines. How we moderate content is described in our Terms of Service.
Loopi is an AI system: its answers are generated automatically by OpenAI models and are not written by a person. To answer you, we send OpenAI your message, the recent turns of the conversation, a short summary of your activity on Lisia (points, level, streak, recent programs, joined communities, lives you set a reminder for) and the facts Loopi remembers about you. OpenAI does not use data sent through its API to train its models and keeps it only for a limited period under its data-processing terms. When you ask Loopi about your direct messages or a call, the relevant text is decrypted on your device and sent for that single answer only; it is not stored in your Loopi history.
Memories: Loopi saves a few durable facts you share (for example a goal or a preference) to personalise later answers. You can see them and delete one or all at any time in Settings → What Loopi knows about me.
Voice: when Loopi reads an answer aloud, the text of the answer is sent to OpenAI to generate the audio.
Usage: we record how much each request costs to process (tokens and seconds of audio, never the content) to apply the usage allowance described in the Terms of Service.
Messages that suggest a crisis or an emergency are answered with help resources and emergency numbers. Loopi is not a medical device and does not give diagnoses: do not use it for medical, legal, financial or safety-critical decisions.
After sign-in we ask permission to send push notifications. If granted, we store your Expo push token and use it to deliver lock-screen banners for direct messages, follower-creator going live, subscription renewals and community activity. Disable any time in device settings or in Account → Notifications.
Lisia is not directed to children under 13. In Italy the age for giving consent to online services is 14: users aged 13 need the consent of a parent or guardian, and in other countries the local digital-consent age applies. Hosting live streams and earning as a creator require being at least 18. Contact info@lisia.io and we will delete a child's data on request.
Account profile data — while account is active. Posts, comments, live-stream metadata — until deletion. Direct messages — until deleted. Encrypted message-key backups — until you replace them or delete your account. Loopi conversations and memories — for account lifetime or until you delete them. Loopi usage records (costs only, no content) — twelve (12) months. Age check for live streams — until you delete your account. Live replays, live-chat messages and moderation records — until the host deletes the replay or their account. Subscription, pass and refund records, the creator earnings ledger and payout records — ten (10) years, as Italian accounting and tax law requires, also after account deletion. Creator applications and their review — for the lifetime of the creator account, then two (2) years. Push tokens — until device unregisters. Server logs and security telemetry — 90 days. In-app notifications — 90 days (one year for those about moderation decisions). Account deletion: profile, posts, messages and Loopi conversations are removed within 30 days except where law requires longer retention.
You have rights to access, correct, delete, restrict or object to processing, port, withdraw consent at any time (without affecting processing carried out before), and lodge a complaint with your data-protection authority (in Italy, the Garante per la protezione dei dati personali). Exercise most rights in the app (Account → Settings → Privacy, and Settings → What Loopi knows about me). Other requests: info@lisia.io. We verify identity by the email on file and respond within one month, which can be extended by two further months for complex requests, in which case we tell you why.
Encryption in transit (TLS 1.2+) and at rest (AES-256 on Amazon RDS, S3, CloudFront). Database access is restricted by network rules and dedicated credentials; production credentials are kept in private, encrypted storage. Authentication uses signed JWTs with short lifetimes. Content reserved for subscribers is shown only to people who hold the pass. Automated alarms monitor the Platform.
In one-to-one chats, text, photos, voice notes, documents and shared location are end-to-end encrypted: the keys stay on your devices. Videos in one-to-one chats are end-to-end encrypted from version 1.1.9 of the app (before that, in transit); group messages are not end-to-end encrypted. If you protect your keys with a PIN, your PIN never leaves your device: the device derives a key from it with Argon2id and sends us only a verifier. The backup can be opened only with your PIN together with a secret that our server releases after a correct verifier, and the secret is locked after 10 wrong attempts, so neither we nor anyone who obtains our database can open your messages by guessing your PIN.
No system is perfectly secure: use a unique strong password and 2FA where available.
The mobile app uses platform-level storage (NSUserDefaults / SharedPreferences and the device's secure keychain) for session, preferences and small caches. The lisia.io website uses essential cookies and, with your consent, analytics cookies. No cross-site behavioural advertising cookies.
Signing in with Apple, Google or Facebook shares only the basic profile fields you approve. Their handling is governed by their own privacy policies. External links have their own notices.
We will update this Policy from time to time; the "last updated" date reflects the most recent change. Material changes trigger in-app notice and (where required) consent.
Lisia S.r.l.s.
Milano (MI), Italy
Email: info@lisia.io
EU data-protection complaints: Garante per la protezione dei dati personali (www.garanteprivacy.it).