Privacy Policy

Last updated: February 24, 2026

Introduction

Lightyear (“we,” “our,” or “us”) operates lightyearspace.com. This Privacy Policy explains how we collect, use, and protect your information when you use our service.

Data We Collect

  • Account information — email address and username provided during registration.
  • Photos — images you upload directly or import from cloud services (Google Photos, Google Drive, Dropbox).
  • AI-generated metadata — mood, themes, descriptions, and narration text generated by our AI analysis of your photos.
  • Usage data — basic analytics such as page views and feature interactions.

Google User Data

When you connect Google Photos or Google Drive, we request read-only access to the files you explicitly select:

  • Google Photos photospicker.mediaitems.readonly scope. We only access photos you select through the Google Photos picker.
  • Google Drive drive.readonly scope. We only access files you select through the Google Drive picker.

Selected photos are downloaded server-side and stored in our database. We store OAuth tokens to maintain your connection but do not store your Google password. You can disconnect your Google account at any time from your settings.

Lightyear’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

How We Use Your Data

  • Display your photos in the 3D gallery and generate AI-powered mood analysis, themes, and descriptions.
  • Enable collaborative features — sharing memories, reactions, and comments within spaces you create or join.
  • Generate procedural lo-fi music that adapts to the mood of your memories.

We do not sell your data. We do not use your data for advertising. Your photos and personal information are never shared with third parties for marketing purposes.

Data Storage & Security

Your data is stored on Supabase (hosted on AWS). We use Row-Level Security (RLS) policies to ensure users can only access their own data. OAuth tokens are stored encrypted in our database.

Data Deletion

You can delete individual memories at any time from the gallery. To delete your entire account and all associated data, contact us at the email below. You can disconnect cloud services (Google, Dropbox) at any time from your settings, which revokes our access to those services.

Third-Party Services

  • Supabase — database, authentication, and file storage.
  • Google Gemini — AI-powered photo analysis for mood, themes, and descriptions.
  • Google OAuth — authentication and cloud photo/file import.
  • Dropbox — optional cloud photo import.

Contact

For questions about this Privacy Policy or to request data deletion, contact us at support@lightyearspace.com.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be reflected by updating the “Last updated” date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.