Privacy Policy

1. Information you give us

• Account information: your name, email address and password, and optionally a display name and profile photo. Passwords are handled by our authentication provider, Supabase, which stores them securely hashed; we never see them.
• Your content: what you create in the Service, including notes, sketches, diagrams, files and photos, tasks, events and projects, entries in your trackers (such as exercise, nutrition, hygiene and sleep, learning, practice, emotions and reflections, meditation, habits and goals), your network of people and relationships, finance, inventory and education records, and your settings. This can include sensitive information you choose to record, such as health, mood or financial details.
• Vault contents: secrets, medical records and documents are encrypted on your device before they are uploaded, so we store only encrypted data we cannot read. Dates and schedules stay unencrypted so reminders work while the vault is locked.
• Information about other people: when you add contacts, invite someone to a workspace by email or share with someone, we process the information you provide about them to deliver that feature. Please only add information you have the right to share.
• Messages you send us, for example when you ask for support.

2. Information we collect automatically

• Technical information: device and browser type, operating system, app version, time zone, language and IP address, as recorded by us and our hosting providers when your device talks to the Service.
• Diagnostics: crash reports and error logs, sent to Sentry, which include technical details and your account ID but not the content of your entries.
• Feedback: when you use Send feedback, we receive your message and, as you choose on the form, a screenshot, technical details (device, system, app version and the recent steps in the app) and your email address so we can reply. It goes to Sentry, as crash reports do. Shake to send feedback reads the phone's motion sensor on the phone itself, only while the app is open; nothing about that is sent.
• Notification tokens: if you allow notifications, a push token so we can deliver reminders and alerts through Expo's push service.
• Usage analytics: only if you opt in under Settings → Data & Privacy, we record which tabs and aspects you open and when, so you can review your own habits. This is off by default and never includes the content of your entries.
• Location: only when you use a location feature (such as weather for where you are or searching for a place), and only with your permission. We store the places you choose to save.

3. Information from other services

• Sign in with Google or Apple: your name, email address (Apple may give us a private relay address) and, if available, profile photo.
• Google Calendar, if you connect it: the events on the calendar you choose (such as titles, times, descriptions, locations and attendees) and the authorization tokens needed to keep them in sync. The long-lived token is encrypted at rest on our servers and is never sent to your device.
• Health Connect, if you turn it on in the Android app: the kinds of data you allow, of exercise sessions, sleep, steps, weight, heart rate and resting heart rate, and the name of the app that recorded each. Section 8 says how it is used.
• Imports, when you use them: the projects, tasks, notes and pages you bring in from Todoist, Notion or Linear, or from a file another app exported (such as Trello, Evernote, TickTick, Asana, a spreadsheet or Markdown notes). They become entries in your account like any you make. A file is read on your device. For Todoist, Notion and Linear you paste a key you make in that service: it is used for that import only and is not saved, on your device or on our servers, and LyfeConnex only reads with it. We keep a record of each import (where it came from, when, how many items it brought, and that service's identifiers for them) so a later import brings only what is new and Undo can take one back.
• Email to Inbox, when you use it: the emails sent to your private LyfeConnex address, with who sent them, their subject, their text and their attachments. Each becomes a task in your Inbox, with the subject as its title, the text in its notes and the attachments as its files, kept like anything you add. The email waits on our servers only until the app makes its task, and is then cleared. Anyone who has the address can send to it, so you can change it at any time in Integrations.
• Payment providers: your plan, subscription status and renewal dates. We never receive your full card number.

4. How we use information

• To provide the Service: store and sync your content across your devices, and power features such as search, statistics, reminders, sharing, workspaces and integrations.
• To manage your plan, process payments and unlock paid features.
• To keep the Service and your account secure, prevent abuse and fix problems.
• To send you service messages, such as account confirmation, password reset and workspace invitation emails, and important notices about the Service.
• To understand and improve reliability using aggregated, de-identified diagnostics.
• To comply with the law and enforce our Terms.

We do not sell your personal information, share it for cross-context behavioural advertising, show you ads, or use your content to train AI models.

5. AI features

AI in LyfeConnex is optional. There are three kinds, and each sends your content to a different place:

• On-device models: a model you install runs on your phone or computer, and what you give it stays there.
• LyfeConnex AI and AI capture: the assistant you use with credits, and the features that read a photo of handwriting, a meal or a maths problem, turn speech or typing into entries, or suggest steps toward a goal. What you send goes through our servers to our AI providers, Anthropic and OpenAI, which write the answer. For the assistant, that includes the entries it reads from the tabs you let it read.
• Your own key: if you add an API key for Anthropic, OpenAI or Google, your device sends requests straight to that provider, under your own agreement with it. Its terms decide what it keeps and how it uses it.

What the assistant can read: every tab at first, and you can switch each one off. It never reads the vault, medical records, documents or a tab under an encrypted lock, whatever the settings. It reads what came from Health Connect only if you allow it (section 8).

What we keep: assistant conversations stay on your device and are not synced to your account, and an incognito chat is not saved at all. Our servers record how many credits each request used and for which feature, not what you wrote or what came back. Error reports name the account and the error, not the content.

Our AI providers process this content for us only to answer the request. Their terms with us do not allow them to train their models on it. They may keep it for a limited time to detect abuse, or longer where the law requires.

When the assistant reads a web page through LyfeConnex, our servers fetch the page and pass its text back without storing it.

We do not use your content to train AI models.

6. How we share information

We share information only in these situations:

• With people you choose: workspace members, the people you share with, anyone who opens a share link you created, and your connections (only the card fields you mark as visible).
• With service providers who process data on our behalf and under our instructions: Supabase (authentication, database, file storage, sync and server functions), Anthropic and OpenAI (LyfeConnex AI and AI capture, when you use them), Resend (emails you ask for, such as digests, alerts and workspace invitations, and receiving the emails sent to your Email to Inbox address, which Resend keeps for up to 30 days), Vercel (web hosting), RevenueCat and Stripe (subscriptions and payments), Apple and Google (sign-in, in-app purchases, and Google Calendar and place search when you use them), Sentry (crash reporting), Expo (push notifications), Open-Meteo (weather and place lookups, which receive only coordinates or search text), Frankfurter (currency rates, which receive no personal information) and PubChem, from the US National Library of Medicine (finding a chemical compound by name in Notes, which receives only the name you search for, and only when you press Find).
• With the service you import from: the key you paste and the requests that read your content go to that service (Todoist, Notion or Linear). In the web app, where the browser cannot reach a service directly, they pass through our servers on the way and back, and nothing is stored there.
• For legal reasons: when required by law or legal process, or when needed to protect the rights, property or safety of our users, the public or us.
• In a business transfer: if we are involved in a merger, acquisition or sale of assets, in which case we will tell you before your information becomes subject to a different privacy policy.

7. Google user data

LyfeConnex's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to show your events in LyfeConnex and keep them in sync with Google. We do not use it for advertising, we do not sell it, and no person reads it unless you ask us to, it is necessary for security, or the law requires it.

8. Health Connect

On Android, LyfeConnex can connect to Health Connect with your permission, which you give, and can withdraw at any time, in Health Connect itself. You choose each kind of data that comes in and each kind that goes out.

• What LyfeConnex reads: the kinds you allow, of exercise sessions, sleep sessions, steps, weight, heart rate and resting heart rate, from the 30 days before you connect and from then on. It reads only while the app is open, when it opens and when you press Sync now.
• How it is used: to show it in your trackers, Statistics and Home, and to recognize the same session recorded in two places so it is kept once. Workouts, nights of sleep and weights become entries in your account, and each day's step and heart-rate totals are saved with your account, so they reach your other devices like anything else you log.
• What LyfeConnex writes: only the workouts, sleep, meditation sessions and weights you log in LyfeConnex, for the kinds you allow, so your other health apps can use them.
• Sharing: Health Connect data is stored and processed for you by Supabase, as all your content is. The assistant reads it only if you turn on Let the assistant use it on the Health Connect card; then the entries it reads to answer you go to the AI you chose (see AI features). A digest or alert you set up can include figures from these entries, sent to your own email address. Otherwise it is not shared with anyone, except as the law requires.
• Never: we do not sell Health Connect data, use it for advertising, or use it to train AI models.
• Your control: change what LyfeConnex may read or write in Health Connect, or turn it off on a phone in Settings › Integrations. Entries brought in stay in LyfeConnex until you delete them, and what LyfeConnex wrote stays in Health Connect until you delete it there. Deleting your account deletes what was brought in with the rest of your content.

The use of information received from Health Connect will adhere to the Health Connect Permissions policy, including the Limited Use requirements.

9. How long we keep information

We keep your information for as long as your account is active. When you delete something, it is removed from the Service; deleted items can remain in our database for a short time so your other devices learn about the deletion before it is purged.

When you delete your account (Settings → Account), we delete your account, your content and your uploaded files from our active systems. Copies may remain in encrypted backups for a limited period, normally no more than thirty days, before they are overwritten. Signing out never deletes your data. We may keep limited records longer where the law requires it, for example billing records.

10. Security

We protect your information with encryption in transit (TLS), encryption at rest by our infrastructure providers, and row-level security rules that keep each account's data separate. Vault contents are encrypted on your device with AES-GCM using a key derived from your master key, and integration tokens are encrypted on our servers. No system is perfectly secure, so please use a strong password and keep your devices protected.

11. Your choices and rights

• See and edit your information in the app at any time.
• Export your data from the Local Storage and export tools in Settings.
• Delete individual items, or your whole account from Settings → Account.
• Turn usage analytics on or off in Settings → Data & Privacy, and manage notifications in Settings.
• Disconnect Google Calendar in Integrations, revoke share links in Connections, and leave workspaces at any time.
• Choose what Health Connect shares with LyfeConnex in Health Connect, and turn it off on a phone in Integrations.

Depending on where you live, including California, New Jersey and other US states with privacy laws, and the European Economic Area and United Kingdom, you may have the right to access, correct, delete or receive a portable copy of your personal information, and to opt out of the sale of personal information, targeted advertising and certain profiling. We do not sell personal information or use it for targeted advertising, and we treat a Global Privacy Control signal as a request to opt out.

To make a request, email support@oneuroslabs.com. We will verify your request, respond within the time the law requires, and not discriminate against you for exercising your rights. You may use an authorized agent where the law allows. If we decline your request, you may appeal by replying to our decision, and if you are not satisfied you may contact your state attorney general or data protection authority.

Sensitive information, such as health or mental-health details, is information you choose to record. By recording it, you consent to our processing it only to provide those features to you. You can withdraw that consent at any time by deleting it.

12. International users

We are based in the United States, and our service providers may process information in the United States and other countries. If you use the Service from the European Economic Area or the United Kingdom, we process your information to perform our contract with you, for our legitimate interests in securing and improving the Service, to meet legal obligations, and with your consent where required (for example for usage analytics and sensitive information). Where required, transfers are protected by appropriate safeguards such as standard contractual clauses.

13. Children

LyfeConnex is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, please contact us and we will delete it.

14. Changes to this policy

We may update this policy from time to time. If a change is material, we will tell you in the app or by email before it takes effect. The date at the top shows when it was last updated.

15. Contact us

Oneuros Laboratories is responsible for your information under this policy. Questions or requests: support@oneuroslabs.com.