Data Policy
Last updated 19 September 2026
This data policy explains how Liso stores, protects and deletes the data held about you when you use Liso — the Liso app and website. Please read it together with our Privacy Policy, which describes what we collect and who we share it with.
1. What we hold, why, and for how long
| Data | Why we hold it | How long |
|---|---|---|
| Account details: name, email, phone number, country code, profile photo, Google account ID | Your account and signing in | Until you delete your account |
| Sign-in codes | Signing in and registering | 10 minutes, and each code works once |
| Sign-in sessions | Keeping you signed in | 30 days, then you sign in again |
| Notes, prayer requests, ratings, saved plans and cart items | The features you use | Until you delete them or ask us to delete your data |
| Reading progress, completed plans and notifications | Tracking your progress and telling you about it | Until you ask us to delete your data (notifications are removed when you delete your account) |
| Plans you own and your subscription | Giving you access | For as long as you have access and as our records require |
| Payment records: payment method, reference, transaction ID, amount, currency, date and outcome | Accounting, refunds and preventing fraud | As long as accounting and tax rules require, including after you delete your account |
| Push-notification tokens (app) | Sending notifications to your device | Until the token stops working or you ask us to delete it |
| Analytics, crash and performance data (app) | Improving Liso and fixing problems | As set by each provider's retention policy |
| Blog view counts | Counting how many people read an article | Kept as statistics, using a one-way code that is not linked to your account |
2. Where your data is stored
Your data is stored on servers run for us and by the service providers named in our Privacy Policy. Profile photos and other images are stored with Bunny.net. Card and bank details stay with the payment provider (Paystack, Google Play or the App Store) and never reach our servers.
3. How we protect it
- Data travels between your device and Liso over an encrypted connection (HTTPS).
- Liso does not use passwords. You sign in with a one-time code that expires after 10 minutes and works only once, or with Google.
- Sign-in sessions expire after 30 days.
- Each payment is recorded once, and the same payment cannot be applied twice.
- Access to personal data is limited to the people and services that need it to run Liso.
4. Deleting your data
Deleting your account from your profile immediately removes your account details, sign-in codes, plan ratings and notifications. To have the rest of your data deleted — notes, prayer requests, reading progress, saved plans and device tokens — email info@mylisoapp.com from the email address on your account. We will act on the request within 30 days. Payment and subscription records are kept for as long as accounting and tax rules require.
5. Getting a copy of your data
To request a copy of the data we hold about you, email info@mylisoapp.com from the email address on your account. We will reply within 30 days.
6. If something goes wrong
If a security breach is likely to put you at risk, we will tell you, and the relevant authorities where the law requires, without undue delay.
7. Contact
Liso — info@mylisoapp.com