Liz — Privacy Policy
Last updated: 11 August 2026
Liz helps someone with memory difficulty by showing reminders and family photos on an always-on tablet, while the people caring for them use a companion phone app. Because that involves photographs of your family and reminders that can touch on health, this policy describes exactly what Liz stores, who can see it, and how to get rid of it.
This policy covers the Liz iOS app and the services behind it.
Who we are
Liz is developed by Justin Wachen. For any question about your data, or to ask us to delete it, contact privacy@lizmemory.com.
What Liz stores
Your account
When you sign up we store your email address and a display name. Passwords are handled by Google Firebase Authentication and are never visible to us.
To confirm your email we send a six-digit code. We store only a salted hash of that code, never the code itself, and it is deleted once used or after ten minutes.
The tablet
A Liz device record holds the first name of the person using it, a short pairing code, and technical status: whether it is online, which screen it is showing, and when it last checked in.
Reminders
Each reminder stores its text, who sent it, whether it repeats and at what time, your time zone, whether it is marked important, and when it was completed.
Reminder text often contains health information — medication names, appointment times. Liz stores it as written and does not analyse it.
Photos
Photos you add are resized, compressed and stored directly in our database as image data, together with anything you type about them: who is in the photo, their relationship, a location and a short message.
Activity
Liz keeps a log of what happened on a device — reminders sent, reminders checked off or undone, photos added, and when the tablet went offline. Each entry records who did it and when.
Notifications
If you allow notifications, we store a push token for your phone so we can tell you when a reminder is completed or the tablet goes offline. We also briefly store delivery receipts from the push service to detect tokens that no longer work.
Voice
Liz does not use your microphone. Voice control was removed before release, and the app no longer requests microphone or speech-recognition access at all.
What Liz does not do
Liz contains no analytics, advertising or tracking software. We do not profile you, we do not sell or share data with advertisers, and there are no third-party trackers in the app.
Who can see your data
Everyone paired to a tablet can see everything on it — all reminders, all photos and the full activity log for that device. Liz is designed for a family sharing the care of one person, so pairing someone to a device gives them that full view. Only share a pairing code with people who should have it.
One caregiver per device is the manager. They can remove other caregivers, rename the device, and delete any reminder or photo. Everyone else can only delete what they added themselves.
We do not disclose your data to anyone else except the service providers below, or where we are legally required to.
Services we rely on
| Service | What it handles |
|---|---|
| Google Firebase (Authentication, Firestore, Cloud Functions) | Accounts, and all stored data. Held on Google Cloud servers in the United States. |
| Resend | Sends verification code emails. Receives your email address and the code. |
| Expo | Delivers push notifications and app updates. Notification text passes through Expo's push service, which means the wording of a completed reminder is visible to it in transit. |
| Apple | Delivers notifications to your device. |
Each handles data under its own privacy policy.
Keeping it and deleting it
Liz keeps your data until you remove it. Nothing is deleted on a schedule.
- A reminder or photo — delete it in the caregiver app. Removal is immediate and
- A whole tablet — deleting a device from the tablet removes the device record
- Disconnecting yourself from a device removes your access and your push token.
- Your account — delete it in the app. Sign out of your device or tablet to reach
- Deleting a caregiver account removes only your access. The tablet and its
- Deleting the account a tablet was set up on removes that tablet and every
- If you'd rather we did it, email privacy@lizmemory.com.
permanent.
and every reminder, photo and activity entry belonging to it. This cannot be undone.
It does not delete the device or its contents, which remain for other caregivers.
the "How will you use Liz?" screen, then tap Delete account. Your account and email are removed immediately.
contents stay for everyone else.
reminder, photo and activity entry on it, and the caregivers connected to it are notified that it's gone.
Deleted data is removed from our live database immediately. It may persist for a short period in Google Cloud's routine backups before being overwritten.
Your rights
Depending on where you live, you may have the right to see the data we hold about you, correct it, get a copy, or have it erased. Write to privacy@lizmemory.com and we will respond.
Most of your data is already visible to you inside the app: reminders and photos in the caregiver tabs, and the full history in the Activity tab.
Children
Liz is not directed at children and we do not knowingly collect data from anyone under 13. It is built for older adults and the people who care for them.
Security
Data is held in Google Firebase and protected by access rules that scope every record to a single tablet, so an account can only reach data for a device it is paired to. Passwords are managed by Firebase Authentication. Verification codes are stored only as salted hashes. API credentials are held in Google Secret Manager and are not shipped inside the app.
No system is perfectly secure, and we cannot guarantee absolute security.
Changes
If this policy changes materially we will update the date above and, where the change affects how your data is used, tell you in the app.