What this notice covers
This notice applies to the First Light website at getfirstlight.app, the First Light mobile app and the First Light portal. It does not cover websites or services operated by other organisations.
Information we collect
When you use the website
If you join the wait list, we collect your email address and any optional information you choose to provide: your first name, how you relate to First Light and your due month. Our public website also uses Google Analytics to understand aggregate website use; see Cookies & analytics.
When you create or use an account
First Light uses your name, email address, account identifier and sign-in information to create and protect your account. The service may also hold the journey details you choose to add, such as due-date timing, updates, message drafts, comments and the people or groups with whom you choose to share.
If you add someone to a circle, we may hold the contact details you provide for them, such as a name, email address or mobile number, along with invitation and membership information. Please make sure you have a good reason to provide another person’s contact details.
If you use the mobile app and allow notifications, we may process a device notification token so that the app can receive update alerts. We do not put the personal text of an update into push-notification or email previews.
How we use information
- to run the wait list, account and sharing features;
- to authenticate users and protect accounts and the service;
- to send invitations and updates through the delivery route available for the person you have chosen;
- to respond to requests for help, access or account deletion; and
- to understand and improve the public website using aggregate analytics.
Service providers
First Light uses service providers to operate the product. The current implementation uses Firebase for account authentication and mobile notifications, Microsoft Azure for the application and database environment, Google Analytics for public-site analytics, and SendGrid for email delivery where email delivery is configured. These providers process information only as needed to provide their services.
We may disclose information where required by law or where it is necessary to protect people, the service or our rights.
Keeping information
We keep information for as long as needed to provide the service and deal with operational, security or legal needs. A confirmed retention schedule has not yet been published.
The current in-app account action deactivates the account, hides journeys owned by that account from followers, deactivates push tokens and attempts to disable the associated Firebase sign-in. It is not represented as immediate deletion of every underlying record. See Account deletion for the current process.
Your choices and questions
You can request help with your account or ask a privacy question by emailing [email protected]. Depending on where you live, you may have rights to ask for access to, correction of or deletion of personal information. We will explain the available process when you contact us.
Changes to this notice
We may update this notice as First Light changes. We will post the updated version here and change the date at the top of the page.