Privacy Policy

Your entries are saved on your device. Here is what we process for accounts, optional cloud backup and sync, and online features.

Last Updated: October 17, 2026

Lifetimed ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our application.

Data Storage

  • • Local Storage: Entries such as tasks, moments, journals and saved connections are stored on your device. Once the app has loaded, you can work with locally saved entries offline. After a successful online setup, the mobile app can reopen with its cached offline interface and saved local entries. Sign-in, cloud sync, purchases, weather and cloud AI require a connection.
  • • Cloud Choices: Cloud backup & sync is optional. When enabled, it uploads your entries and synced attachments. Account information, preferences, device records and subscription status are processed separately when you sign in, even if content backup is off. Online features send the information needed for the feature you choose.
  • • Account & Access: New installs require an account and an active subscription after initial onboarding. You can personalize your setup and capture your first items before creating an account. Some earlier installs retain account-free access. Export and account deletion remain available without an active subscription.
  • • Birthday & AI Eligibility: The birthday you enter during setup or in your profile is stored on your device. When you sign in, the full birthday used for cloud AI eligibility is also stored as account metadata, separately from optional content backup. We use it to check whether you are at least 18 before allowing cloud AI in Plus or Pro. Starter has no AI, and this check does not restrict manual app features.

Data We Collect

  • If you sign in:
  • • Email address (used for sign-in and account recovery), and — if you sign in with Google or Apple — the name and profile picture your provider shares with us; Apple's Hide My Email relay addresses are supported
  • • Transactional email delivery records (sign-in links, receipts, renewal notices) held by our email provider, Resend
  • • A device record per linked device (random identifier, device name), account preferences and consent choices
  • • Your self-reported birthday, when provided, to determine cloud AI eligibility; we do not verify it against identity documents
  • • Subscription status and identifiers (managed by Stripe on the web and RevenueCat / Apple / Google on mobile; payment card details are handled by the payment provider)
  • If you enable Cloud Backup & Sync:
  • • Your saved entries, including journals, people, places and any health, fitness or financial information you choose to record. Backups use AES-256-GCM encryption before upload, and sync changes are encrypted at rest. Lifetimed manages the keys and can decrypt this cloud content to provide backup and sync; this is not end-to-end encryption with keys controlled only by you.
  • • Photo, audio and file attachments you sync, stored as ordinary files in your account's private storage so they can be restored on your other devices. The app does not encrypt these files before upload.
  • If you enable Usage & Diagnostics (optional, off by default):
  • • Signed-in reports contain feature visits, button action categories, technical error categories, app release identifiers, bundle coordinates and page performance measurements (loading, responsiveness and layout stability). Performance reports contain numeric measurements and a broad entry-feature category, not page URLs or element details. On iOS, reports can include WebKit content-process terminations. Reports exclude entry text, health values, searches, filenames, messages, photos and location; they do not include full operating-system crash dumps. Reports are deleted after 30 days and when your account is deleted.
  • • Independently of optional reports, aggregate database, file-storage, backup and sync statistics and categorized server failures help us operate the service. We do not inspect your saved content to produce those statistics. Button activity counts interactions, not proof that an action completed.
  • If you use AI Features (optional):
  • • Credit balances, purchase identifiers, refund records and AI usage counts are processed on Lifetimed servers. Usage records contain the operation, credit charge, provider/model and token counts; they do not contain your prompts, journal content, images or transcripts.
  • • Text, images, voice notes, files, or links you explicitly submit for AI analysis (e.g. Smart Capture, Drop Ingestion, Compass, photo-to-moment)
  • • After you allow AI, captures and reviews you choose to process send their content and selected context through Lifetimed's servers to Google Gemini or OpenAI. Providers may retain requests or use them under their applicable service terms and settings; we do not promise zero retention.
  • • Live dictation can use Apple's speech service on iOS or your browser vendor's speech recognition service on the web; those services may process audio on their servers. Cloud transcription sends recordings to OpenAI.
  • If you use Health features (optional):
  • • Symptoms, medications, workouts and check-ins are saved on your device. If you enable Cloud Backup & Sync, those records can be included in backups and sync changes using the server-managed encryption described above. AI processes selected content or context only with your permission.
  • If you use Weather Features (optional):
  • • The city you set, and — only if you grant location permission — your approximate device coordinates (or, as a fallback, IP-based location), which are sent to WeatherAPI to fetch local weather when Coarse GPS weather is selected

How We Use Your Data

  • • Cloud Backup & Sync: Store encrypted backups and sync your changes across your signed-in devices
  • • AI Processing: Extract tasks, moments, and people, draft moments from photos, and generate summaries, reviews, and insights (e.g. Compass) from content you submit
  • • AI Eligibility: Check your self-reported birthday and subscription before allowing cloud AI; your permission to share content is a separate choice
  • • Places: Optional location reminders check location while the app is open, matching nearby saved places after a short stay. A small list of recently surfaced places and areas stays on this device for up to 30 days. For areas without a saved place, the retained key includes latitude and longitude rounded to three decimal places. No background movement history is collected. Saving a place stores its chosen coordinates with that place; saved coordinates can be uploaded when Cloud Backup & Sync is enabled.
  • • Weather: Fetch current weather for the city you set (or, with your permission, your approximate location)
  • • We do NOT sell your personal data. We share information with service providers to deliver the features described here.
  • • We do NOT use your data for advertising
  • • Lifetimed does NOT train AI models on your data. Third-party processing is governed by each provider's policies.

Third-Party Services

  • • Supabase: Authentication, account preferences, encrypted backups and sync records, and private file storage
  • • Cloudflare Turnstile: Where enabled on authentication forms, bot protection processes technical security signals such as IP address, browser information and the site origin under its privacy addendum. Lifetimed does not send journal entries or other saved content to this security check.
  • • Google Gemini: Primary cloud text and image analysis, subject to its API terms and data-use policies
  • • OpenAI: Fallback cloud text and image analysis, and audio transcription, subject to its privacy policy and applicable API data policies
  • • Speech Recognition: Apple on iOS, or your browser vendor's speech service on the web, may process live dictation audio under their own privacy policies
  • • WeatherAPI: Weather data for the city you set, or your approximate coordinates when you grant location permission (used only to fetch current weather; optional place reminders match location on your device)
  • • Stripe: Payment processing for web subscriptions (we don't store payment details)
  • • RevenueCat: Subscription and AI credit purchase management, including App Store purchases and RevenueCat web checkout
  • • Apple/Google: In-app purchase processing on iOS/Android devices, and optional sign-in (Sign in with Apple, Google Sign-In)
  • • Resend: Delivery of transactional email (sign-in links, receipts, account notices)

These services receive the information needed for the feature you use. Their own terms, retention rules and privacy policies also apply. Cloud content can be processed by Lifetimed and these providers; local storage does not make cloud services inaccessible to the service operator.

Optional Integrations

  • • Apple Calendar and Reminders: On iPhone, access requires your system permission. Lifetimed reads the calendars or lists and date ranges you choose. Selected imports become your Lifetimed records; those records follow your normal backup, sync and AI choices. Exports and two-way updates write only the items or sources you explicitly enable. Automatic updates run while the app is in the foreground.
  • • Apple Health: With your permission, Lifetimed reads steps, walking and running distance, active energy, sleep and workouts to display a recent activity summary on your iPhone. HealthKit readings remain in memory and clear when you leave the screen, change accounts or background the app. They are never written to Lifetimed's database, cloud services, AI, logs or backups. This is separate from health information you manually record in Lifetimed.
  • • Google Calendar: Connecting Calendar is separate from Google sign-in. Lifetimed's servers process authorized calendar lists and selected events to provide previews, imports, exports and optional two-way updates. OAuth credentials are encrypted on the server, bound to your Lifetimed account and excluded from portable backups. Disconnecting removes the stored credentials and attempts to revoke the dedicated Google grant; imported Lifetimed records remain until you delete them.
  • • Lifetimed's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Calendar data is not sold or used for advertising or model training.
  • • Notes and shared content: Content you explicitly share to Lifetimed is saved in your Inbox. Sharing a note does not grant access to your full Notes library.

Security Measures

  • • Encryption: AES-256-GCM for cloud backups and encrypted sync storage, using keys managed by Lifetimed. Synced attachments and readable account metadata are separate from those encrypted records.
  • • Transport Security: Cloud connections use HTTPS.
  • • Access Control: Authentication and account permissions restrict access to cloud records and files.
  • • Service Protections: Input validation, request limits and browser security headers help protect the service. No security measure guarantees protection against every threat.

Your Rights

  • • Access: Export all your data at any time in multiple formats
  • • Deletion: Clear this device's data in Settings › Privacy, or delete your account and cloud data in Settings › Account. Clearing local data or turning off sync does not delete an existing cloud copy.
  • • Portability: Export to JSON, CSV, Markdown, or PDF
  • • Control: Choose exactly what features to use and what data to share

Data Retention

  • • Local data: Retained until you delete it
  • • Cloud backups, sync changes and synced files: Retained until you delete them or your account; older backups are pruned automatically.
  • • AI requests: Providers may retain content under their applicable terms. AI-generated results you save remain in your local archive and, if enabled, cloud sync. Operational service logs may also be retained for security and reliability.
  • • Account, preferences, subscription, device, credit wallet and AI request records are removed from Lifetimed when you delete your account. Purchase and credit ledger records retain transaction IDs, account identifiers and amounts to reconcile payments and prevent transaction replay; they contain no journal content or prompts. Payment providers retain their own billing records.
  • • Authorized platform administrators can view account metadata, billing status, aggregate analytics and operational health, and make audited plan or credit adjustments. The platform dashboard does not expose your private journal entries, files or AI prompts.
  • • Email delivery and hosting logs: Retained under the service provider's policies for delivery, security and reliability.
  • • Withdrawing consent: Turn off AI in Settings › Privacy to stop new AI requests. Requests already transmitted may finish processing and follow the provider's retention rules. Revoke location or notification access in device settings. Turn off cloud sync to stop new content uploads; delete your account to remove existing cloud data.

Contact Us

For privacy concerns or data requests, contact us at: hello@lifetimed.app

Positive Social Digital Limited
Nairobi, Kenya