Last updated 23 October 2026
Privacy policy
Firlight is a grief companion made by João Correia in Portugal. It is built so that what you write about your grief stays with you.
The short version
· No ads and no Firlight account. Firlight can count which screens and tools are used, anonymously, so we can make it better. Nothing you write, no names, no photos, no voice, no dates. Nothing is counted until you turn it on in Me → Settings.
· Your check-ins, letters, journal, memories, photos and dates are stored on your device. We have no server that receives them.
· If you choose, the Android app keeps a backup in a hidden folder of your own Google Drive that only Firlight can read.
· We never see, sell or share what you write.
· If you buy Firlight Plus in the Android app, Google Play and RevenueCat process the purchase.
What stays on your device
Everything you enter: your profile (names, loss type, date), check-ins, letters, journal entries, memories and their photos, hard dates and reminder times. It is stored in the app's private storage. We have no server that receives it.
Exported backups are files you create and choose where to save or send. Treat them like a private diary. The copy the app prepares for sharing is deleted from its temporary storage on the next export, the next start, or when you erase everything.
On Android, if you have switched on your phone's own backup, Android may include Firlight's data in your Google account backup so it can be restored on a new phone. Firlight only allows this when the backup is end-to-end encrypted with your screen lock (Android 9 and later; on older versions Firlight is left out of the backup). That backup is controlled by you and Google; we cannot read it. You can turn it off in your phone's settings.
Continue with Google: your Google Drive backup (optional, Android app)
If you choose Continue with Google (on the Welcome screen or in Me → Settings → Account and backup), Firlight keeps one backup file in your own Google Drive so you can restore it on a new phone. The file holds the same things as an exported backup: your profile, check-ins, letters, journal entries, memories with their photos, dates, lesson progress and reminder settings.
It is stored in Google Drive's hidden app data folder. Firlight asks Google for one permission only, to see, create and delete its own files in that folder; it cannot see any other file in your Drive, and other apps cannot open it. The file goes straight from your phone to your Drive over an encrypted connection and is not sent to us: there is no Firlight server and no Firlight account. Google stores it under the Google Privacy Policy and it counts towards your Drive storage. Firlight keeps the access Google gives it in memory on your phone only, plus your Google email address so Me can show which account it backs up to. Like Firlight's other settings, that email can be part of your phone's own encrypted Android backup.
Firlight's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Drive data is used only to back up and restore your Firlight data for you. It is never used for advertising, never sold, and never read by people.
You can sign out at any time, which stops the backup (the copy stays in your Drive), or choose Delete Drive copy and disconnect, which deletes the file and removes Firlight's access. See how to delete your data, including without the app.
Purchases (Android app)
Firlight Plus is sold through Google Play Billing. To confirm and restore purchases we use RevenueCat, a subscription service. When you open the paywall, buy or restore, and at later app starts once you have done so, RevenueCat receives a random, anonymous app user ID, your purchase details (product, price, date, Play purchase token) and basic technical data (app version, device type, language and country). It does not receive your name, email or anything you write in Firlight. If you never open the paywall, the app does not contact RevenueCat. Google processes payment under the Google Privacy Policy; RevenueCat under its privacy policy.
On the website version, purchases are handled by Stripe, and the licence code you receive is checked on your device.
Usage counts
The app counts events such as "a Wave was started" or "the Plus screen was shown". Each carries only the app version, how long ago the loss was and how long the app has been installed as ranges, how many times it has been opened as a range, the country in your phone's language setting, and whether Plus, dark mode or reduced motion is on; some carry the kind of loss (the category, never a name). For a check-in it counts how many tags and whether a note was written, never the note or the heaviness; for a Wave, the pattern, sound and breath count; for a lesson, which one; for a memory, how many photos and clips; for a purchase, which plan; for an error, its kind and the screen. Never names, notes, photos, voice, dates or email; the plan name is counted, never the price paid, the receipt or the account. On Android the Play install referrer is read on the phone and only a short campaign label from it (never the referrer itself) goes with the first usage count. Firlight keeps no identifier: each time the app opens it uses a new random number, so counts from different days cannot be joined to one person. The counts go encrypted to PostHog in the EU, with no profiles, no session recording and the IP address discarded. Nothing is counted until you turn it on in the app. Turning the switch off in Me → Settings → Usage counts stops further counts; past counts carry no identifier, so they cannot be traced back to you or picked out to delete.
Notifications
Reminders are optional and scheduled on your device. Nothing is sent to us to deliver them. Reminder titles can include a date's name (for example "Mum's birthday is tomorrow"); whether they show on a locked screen follows your phone's lock-screen notification settings.
Install attribution
When you install from Google Play, the app reads the Play install referrer once (for example, which of our posts a link came from) and keeps it on your device. It is not sent to us.
Children
Firlight is intended for adults (18+). It is not directed at children.
Your choices and deletion
You can erase everything at any time from Me → Settings → Erase everything, or by uninstalling the app. Your Google Drive copy, if you made one, is deleted from Me → Settings → Account and backup → Delete Drive copy and disconnect, or from Google Drive's settings. To have an anonymous purchase record deleted from RevenueCat, contact us with the date of purchase. All the steps are on Delete your Firlight data.
Not a medical service
Firlight offers self-help support. It is not therapy, a medical device or an emergency service. If you are in danger, call your local emergency number.
Contact
Questions about privacy: jfpvcorreia@gmail.com.