Lastly is a personal messaging app that lets you record audio, video, and text messages — called echoes — and deliver them to the people you love at a future date or life event. This Privacy Policy explains what information we collect, how we use it, and how we protect it.
By using Lastly, you agree to the practices described in this policy. If you do not agree, please do not use the app.
Account Information
When you create an account, we collect your full name, email address, and password. This information is used to authenticate you and identify your account.
Phone Numbers
When you add recipients to an echo, we collect their phone numbers for the purpose of delivering SMS notifications. We also collect your phone contacts temporarily when you use the contacts picker — we do not store your full address book.
Echo Content
The core content you create in Lastly — audio recordings, video recordings, text messages, custom backdrop photos, and background music files — is stored securely on our servers. This content is yours. We store it solely to deliver it to your intended recipients.
Transcripts
Audio and video echoes are transcribed to support accessibility and playback features. Transcripts are encrypted using AES-256-GCM encryption before being stored. They are only decrypted at the moment an authorized recipient accesses their echo.
Testament and Witness Information
If you create a Testament echo (our guardian echo system), we collect the names, email addresses, and phone numbers of your designated witnesses and emergency contact. This information is used solely to operate the guardian check-in and escalation system as you have configured it.
Push Notification Tokens
We collect your device's push notification token to send you delivery confirmations, guardian check-in reminders, and other app notifications you have enabled.
Subscription and Purchase Information
Subscription management is handled by RevenueCat. We receive confirmation of your subscription status but do not have access to your payment card details. All payment processing is handled directly by Apple.
Usage Data
We collect basic information about how you interact with the app — such as which features you use and when — to improve the product and diagnose issues.
Lastly includes optional AI features to help you craft your messages. Here is exactly how they work:
Script Generation (AI Assist)
When you use the AI Assist feature, your braindump text and the echo category (e.g. "celebration") are sent to Anthropic's API to generate a polished script. Your raw braindump text is never stored — it exists only in memory during this process and is discarded immediately after the script is returned. No identifying information (name, email, user ID) is sent to Anthropic. Only the generated script is saved, as your echo transcript.
Onboarding Reflection
During onboarding, your answers to optional reflection questions are sent to Anthropic's API to generate a personalized response. These answers are not stored on our servers and no identifying information is included in the request.
Audio and Video Transcription
Audio and video echoes are transcribed using OpenAI's Whisper API. Your audio or video file is sent to OpenAI for processing. No identifying information is included. The resulting transcript is encrypted before being stored on our servers. OpenAI does not retain your audio files after processing.
All AI processing is for the purpose of operating Lastly's features only. We do not use your content to train AI models.
We do not use your information for advertising. We do not sell your data. We do not share your personal content with any third party except as described in this policy.
Lastly uses the following third-party services to operate. Each has its own privacy policy.
Standard echoes are available to recipients for 30 days after delivery. If an echo remains unopened after 30 days, it is permanently deleted from our servers unless you have enabled the "Keep after expiry" option.
View-once echoes are permanently deleted from our servers immediately after the recipient views them.
Testament echoes are never automatically deleted. They are retained until delivered or until you cancel them.
Your account and all associated echoes can be deleted by contacting us at hello@lastlyapp.com. We will process deletion requests within 30 days.
AI processing — raw braindump text and onboarding answers are never stored. Audio files sent for transcription are not retained by OpenAI after processing.
We take the security of your data seriously:
Lastly is rated 4+ and is available to users of all ages. We do not knowingly collect personal information from children under the age of 13 without verifiable parental consent. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it promptly.
The Testament feature, which involves end-of-life planning, includes an acknowledgment that users should be 18 or older to use this specific feature.
You have the right to:
To exercise any of these rights, contact us at hello@lastlyapp.com.
Lastly is operated from Canada. If you are located outside of Canada, your information may be transferred to and processed in Canada and the United States, where our servers and service providers are located. By using Lastly, you consent to this transfer.
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For significant changes, we will notify you through the app or by email. Your continued use of Lastly after changes are posted constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Paul Chang
Lastly
Ontario, Canada
hello@lastlyapp.com
lastlyapp.com