Privacy Policy
Left the Light On ("the service") is operated by Adam Myhre (the "operator", "we"). This policy explains what we collect, why, and what you can do about it. It is written for the current version of the service, which plays a short spoken greeting from one of four synthetic voices to subscribers.
What the service is
The voices are generated by software. They are not real people and the conversations are not with a human. The service is a companion experience for adults and is not a medical, therapeutic or emergency service.
What we store
- Subscription record: your Stripe customer id, subscription id, subscription status and renewal date, and the time you last used the service. We do not store your card details; Stripe does.
- Session cookie: a signed, HttpOnly cookie that tells the service you are a subscriber. It contains no personal data beyond your Stripe customer id.
- Age confirmation: stored only in your browser (local storage), never sent to us.
- Usage counters: daily totals of how many characters of speech were generated, used to control cost. Not linked to what you listened to.
- Server logs: standard request logs kept for up to 7 days for security and debugging. We do not log audio or message content.
We do not currently store your name, email address, voice recordings, transcripts or conversation history. Stripe holds your email address and payment details under its own privacy policy.
Who processes your data
- Stripe – payments and subscription management.
- ElevenLabs – speech generation. Only the fixed greeting text for each character is sent; nothing about you.
- Fly.io – hosting, in London (United Kingdom).
Why we are allowed to process it
Performance of a contract (providing the subscription you paid for) and our legitimate interest in keeping the service secure and affordable. Where consent is required – for example for conversation memory in a future version – we will ask for it separately and you can withdraw it at any time.
How long we keep it
Subscription records are kept while you are subscribed and deleted 30 days after your subscription ends. Server logs: 7 days. Usage counters: 90 days. Stripe keeps invoices as long as its legal obligations require.
Your rights
Under the UK GDPR and EU GDPR you can ask for access to, correction of, or deletion of your data, object to processing, and take your data with you. To exercise any of these, reply to your Stripe receipt email or contact the operator at the address on the Terms page. We respond within 30 days. You can also complain to the UK Information Commissioner's Office or your local supervisory authority.
Deleting your account
Cancel your subscription through "Manage subscription" on the main page at any time. To have your subscription record removed immediately rather than after 30 days, contact the operator. A one-click "delete everything about me" button is planned for the next version.
Children
The service is for people aged 18 or over. We do not knowingly collect data from anyone younger.
Changes
If this policy changes materially we will show a notice on the main page before the change takes effect.