1. Introduction

LastSend ("we," "our," or "us") operates the LastSend mobile application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

Given the sensitive nature of our Service—helping users create posthumous messages for loved ones—we take your privacy extremely seriously. Please read this policy carefully to understand our practices.

2. Information We Collect

2.1 Information You Provide

Account Information: Name, email address, and password when you create an account.
Message Content: Text messages, photos, voice recordings, and videos you create for your recipients.
Recipient Information: Names and email addresses of people you designate to receive your messages.
Trusted Contact Information: Names and email addresses of individuals you designate to verify your status.
Check-in Data: Records of when you confirm your well-being through the app.

2.2 Automatically Collected Information

Device Information: Device type, operating system, and unique device identifiers.
Usage Data: How you interact with our Service, including features used and time spent.
Push Notification Tokens: To send you check-in reminders and important notifications.

3. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service
Send you check-in reminders at your chosen frequency
Deliver your messages to designated recipients when triggered
Verify your status through trusted contacts during escalation
Moderate uploaded content for safety compliance
Send important service-related communications
Respond to your inquiries and support requests
Detect and prevent fraud or abuse

4. Content Moderation

To ensure the safety and appropriateness of content delivered through our Service, we use automated content moderation (powered by Sightengine) to scan uploaded photos and videos. This helps us detect:

Nudity or explicit content
Violence or gore
Weapons
Other potentially harmful content

Content that violates our guidelines will be rejected and not stored. You will be notified if your content is rejected, along with the reason.

5. Message Delivery & Triggering

Your messages are delivered only after a careful verification process:

You miss multiple consecutive check-ins
We attempt to contact you directly
We contact your designated trusted contacts for verification
Only after trusted contacts confirm should messages be delivered

This multi-step process helps prevent accidental delivery of your messages.

6. Data Sharing & Disclosure

We do not sell your personal information. We may share information in these limited circumstances:

With Recipients: Your messages and media are shared with designated recipients upon triggering.
With Trusted Contacts: Limited information during the verification process.
Service Providers: Third parties that help us operate (cloud storage, email delivery, content moderation).
Legal Requirements: When required by law or to protect rights and safety.

7. Data Storage & Security

Your data is stored securely using industry-standard encryption. We use:

Supabase for database storage with row-level security
Cloudflare R2 for encrypted media storage
HTTPS encryption for all data in transit
Firebase Cloud Messaging for secure push notifications

8. Data Retention

Active Accounts: Data is retained as long as your account is active and you continue to check in.
After Message Delivery: Memorial pages remain accessible for 1 year after delivery, then are archived.
Account Deletion: Upon request, we delete your account and all associated data within 30 days.
Inactive Accounts: Accounts with no check-ins for 2 years may be considered for message delivery triggering.

9. Your Rights

You have the right to:

Access: Request a copy of your personal data
Correction: Update or correct inaccurate information
Deletion: Request deletion of your account and data
Export: Download your messages and media
Withdraw Consent: Opt out of non-essential communications

To exercise these rights, contact us at support@brandjetmedia.com

10. Children's Privacy

Our Service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we will send you an email notification.

13. Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

Email: support@brandjetmedia.com