Last updated October 2, 2026
This is the privacy policy for LonelyGirl: the app on Google Play (com.lonelygirl.app) and the App Store, and the website lonelygirl.ca. The short version: we keep what the app needs to work, and nothing else.
Who runs LonelyGirl
LonelyGirl is made and run by Ivy Miranda Wills, an individual developer in Canada. On Google Play it is published under the developer name LonelyGirl, and on the App Store under her own name. When this policy says "we", it means her.
For anything about your data or this policy, email ivywills@hotmail.com. You don't need an account to ask.
What we collect
Your email and password (stored hashed, never readable by us), the profile you fill in, and the things you post: messages, images, event RSVPs, letters. If you sign in with Google or Apple, they share your name and email with us and nothing more.
The profile is a name, a colour, your time zone and country, and if you choose, a job, interests and an age range. No one else sees your age range. The app suggests a time zone and country from your phone's clock and language, and never reads your location.
The "what you're going through" answers from onboarding can be about your health or other private things (anxiety, a chronic illness, sobriety, coming out), so they are treated as sensitive. They are kept apart from your profile, are never shown to anyone, are not used to sort or target you, and can be cleared from Account at any time.
Moderation
Everything you write or upload is checked before it is saved: messages, room descriptions, events, letters, your profile name. Stickers are the exception: a moderator looks at each one before it can be used, and nothing automated sees it. Everything else, the check is automated and runs on Anthropic's Claude. It is sent the words or the picture, not who posted them, and the result is a yes or a no. Anything it refuses is not posted. A short excerpt of what was refused or flagged is kept in a moderation log that only moderators can see, tied to the account, so repeat abuse can be acted on. A person reviews anything a member reports within 24 hours. Letters are anonymous to other members; moderators can see who wrote one when it is reported. A letter to burn is kept on your account so it is there when you come back, is never shown to anyone else, is not checked by the filter, and is erased when you burn it.
What we don't do
No ads, no third-party analytics or tracking SDKs, no selling or sharing your data with anyone. We keep our own simple counts, stored with the rest of your data: which screens were opened, that a post was made (not what it said), whether the app managed to load, whether you are on the web, an iPhone or Android, and the text of any error the app hits so it can be fixed. They exist so we can tell when something is broken, and you can switch them off in Account under Usage counts. We don't use your data for anything except running the app.
Where it lives
Data is stored with Supabase and the site is hosted on Vercel. On iPhone, push notifications go through Apple, which means the app keeps your phone's notification token while notifications are on. The Android app has no push notifications, so it keeps no token. Each of these providers (Supabase, Vercel, Apple, Google, Anthropic) handles data under their own privacy terms and may not use it for anything but the service they provide to us. The shop links out to Shopify, and anything you buy there is handled by Shopify under its own privacy policy. Nothing in the app takes a payment, so we never hold card details.
Keeping it safe
Everything between your device and LonelyGirl travels over an encrypted connection, and Supabase stores it encrypted. Passwords are hashed, so no one can read them, including us. The database checks every request, so an account can only read what it is allowed to see. Moderators see what they need to act on reports and approvals, and only Ivy has direct access to the database.
How long we keep it
What you post stays until you delete it or your account. The usage counts and the moderation log are kept for twelve months and then cleared. Rate-limit counters hold a hashed, unreadable form of your IP address for one day.
Deleting your account
To delete your LonelyGirl account, go to Account → Delete account, in the app or at lonelygirl.ca. It is permanent and happens straight away. If you can't sign in or no longer have the app, email ivywills@hotmail.com from the address on your account and ask for it to be deleted.
Deleting removes your profile, your messages, letters and replies, the stickers and pictures you uploaded, your event RSVPs and your "what you're going through" answers. Rooms and events you started stay for the people in them, with no link to you. Usage counts lose their link to you and are cleared within twelve months. Everything else goes, unless the law requires us to keep it (see Child safety).