Privacy Policy

• We don't sell your information, and we don't use it for ads. The Life App has no ads and no advertising trackers.
• Your mood and Care data are yours. We ask your permission before saving mood check-ins or your Care history. They are never shown to your Teams, and turning the permission off deletes them.
• Juni's writing help uses Google's Gemini, only if you turn it on. Some of your information then goes to Google to write insights and answer your questions. Section 3 lists exactly what is sent.
• Analytics you can turn off. We use PostHog to see which features get used, so we can make the app better. In the UK, EU, EEA and Switzerland it's off until you say yes; elsewhere it's on, and you can turn it off any time in Settings (Section 6 has the details). It never gets what you type, your mood ratings or your notes.
• You're in control. In Settings > Privacy & data you can change your permissions, download all your data, and delete your account.

Information you give us

• Account information. Your email address, password (stored in hashed form by our sign-in provider), first name, optional last name, optional display name, and date of birth.
• Onboarding choices. What you'd like Juni to help with (up to three, such as "Staying focused" or "Handling big feelings") and your first goal, project and task.
• Planning content. Your tasks, projects and goals, including titles, descriptions, links you add, due dates, importance, urgency, difficulty, time estimates, focus time and completion.
• Mood check-ins (only with your permission). Your mood and energy ratings (1 to 5), feelings you tag (such as calm, anxious or sad), and an optional short note of up to 280 characters.
• Care history (only with your permission). Which Care practices and tools you finish and when, such as a breathing practice or Nightly Unwind.
• Your choices. Favorites you save, your settings, and your answers to our permission questions.
• Questions to Juni. Questions you type to Juni, up to 300 characters. We don't store them (see Section 3).
• Teams. Teams you create or join, tasks you share with a Team, and the email addresses of people you invite.
• Subscription. Your plan, trial and renewal dates, and subscription status. Card details go to Stripe, never to us.
• Support. Messages you send to help@thelifeapp.ai.

Information collected automatically

• Activity in the app. Points earned, badges, your Care streak, and Juni's insights along with the summaries used to create them.
• Time zone. Detected from your device, so days and streaks match your local time.
• Technical data. Your IP address, browser and device type, and server logs kept by our hosting providers, plus page-speed measurements from Vercel Speed Insights.
• Usage analytics (unless you turn it off, or until you say yes in the UK and EU; see Section 6). Which pages and screens you visit, which buttons you tap (never the text on them), and events such as "task completed" with counts and settings, plus your browser and device type, app version, IP address and the approximate location it suggests. Linked to an internal ID, never your name or email.
• Cookies and local storage. What's needed to run the Services, and analytics cookies only as described in Section 6.

Information from other sources

• Sign-in services. If you sign in with Google, Apple or Microsoft, we receive your email address. Our sign-in provider also stores the basic profile details that service sends, such as your name.
• Stripe. Whether your payment succeeded and the status of your subscription.
• Teammates. Your email address, if someone invites you to a Team.
• Crowdfunding. If you back The Life App on a crowdfunding platform such as Kickstarter, we receive your name, email address and reward tier from that platform so we can deliver your reward.

Voice dictation. If you use the microphone button to dictate, your browser asks for permission to use your microphone, and its own speech service turns your speech into text. For example, in Chrome that service is run by Google. We receive only the text, never the audio.

What we don't collect: precise location, your contacts, photos, or data from Apple Health, Google Health Connect or your calendar.

We use your information only for the purposes below. For users in the UK and EU, each purpose also names our legal basis under the UK and EU GDPR.

• To run the Services. We create your account, save your plans, calculate points and badges, and power Teams. Legal basis: performing our contract with you.
• To confirm you're an adult. We check your date of birth at sign-up and delete the account if you're under 18. Legal basis: legal obligation and our legitimate interest in keeping the Services adults-only.
• To save mood and Care data. We store your check-ins and Care history, and use them to count your Care streak and show your mood trends. Legal basis: your explicit consent.
• For Juni's writing help. We create your daily insight, weekly review and schedule ideas, and answer open questions you ask (see Section 3). Legal basis: your consent, and your explicit consent where health data is included.
• For subscriptions. We start your trial, manage your plan and unlock Premium. Legal basis: performing our contract with you.
• To send emails you need. Sign-up confirmations, password resets, Team invitations you ask us to send, and service notices. Legal basis: performing our contract, and legal obligation where notices are required.
• For support. We answer your questions and fix problems. Legal basis: performing our contract and our legitimate interests.
• For safety and security. We prevent fraud and abuse, protect accounts and enforce our Terms. Legal basis: our legitimate interests and legal obligation.
• To show crisis resources. What you type to Juni or add as a check-in note is checked automatically for words that may signal a crisis, so we can show you 988 and other support. No person reads it, the check isn't stored, and we don't contact anyone. Legal basis: vital interests and our legitimate interests.
• To improve the Services. We measure page speed and use product analytics (Section 6) to see which features help people and to fix problems. Legal basis: your consent for analytics (we ask first in the UK and EU); our legitimate interests for page-speed measurement.
• To comply with the law. We respond to lawful requests and meet record-keeping duties. Legal basis: legal obligation.

What we don't do: we don't sell your information, use it for advertising, or build advertising profiles. We don't use your mood check-ins, notes or questions to train AI models. We don't use your health information for any purpose you haven't agreed to; a new purpose needs your separate consent first.

De-identified data. We may create aggregated data that can't reasonably identify you (for example, "40% of users finished a practice this week"). We won't try to re-identify it.

Automated decisions. Juni makes suggestions only. We don't make decisions with legal or similarly significant effects about you by automated means.

Juni is software, not a person. Some of Juni's features use Google's Gemini service, which uses artificial intelligence. They're off until you say yes: we ask the first time a feature would use it, and you can turn it on or off at any time in Settings > Privacy & data. Mood details are included only if you've also agreed to us saving your check-ins and Care history. Without it, Juni still answers the questions it can from your own numbers, and your weekly review is written without Gemini.

Here is what we send to Google for each feature:

• Daily insight. Your Care streak, points, task counts and completion rate, planned versus actual time, when you get the most done, and the names of your projects with how many tasks you finished in each. With mood consent, we also send your average mood and energy and your most-tagged feelings.
• Weekly review. Summaries of your week (counts, averages and patterns). With mood consent, this includes your average mood and energy. We don't send task titles or notes.
• Schedule ideas. Today's open task titles, with their importance, urgency, difficulty, length and time.
• Ask Juni. The question you type, plus summaries such as your points, tasks per week, Care activity, badge names and most-used practice. With mood consent, we also send your average mood and energy and your most-tagged feelings. Many common questions are answered on our own servers without Gemini.

What we never send: your name, email address, date of birth, task descriptions, or mood check-in notes.

What we keep. We store Juni's insights, reviews and schedule ideas, and a copy of the summary we sent, so you can see past ones, for 12 months (Section 5). We don't store the questions you ask Juni, only a daily count of them.

How Google uses it. Google processes this information on our behalf as our service provider, under its API terms. Google may keep it for a limited time to detect abuse, as those terms allow.

Use with care. Please don't include other people's private details in what you type to Juni.

We share information only as described here.

Service providers process information for us under contracts that limit their use of it to providing their service to us. They are:

• Supabase, for our database, sign-in and file storage, in the United States.
• Vercel, for website and app hosting and page-speed measurement, in the United States.
• Google (Gemini), for Juni's writing help if you turn it on (see Section 3), in the United States.
• Brevo, for sending account emails and Team invitations, in the European Union.
• PostHog, for product analytics as described in Section 6, in the United States.

Stripe. When you buy Premium on our website, Stripe sells it to you as merchant of record. Stripe receives your email address and an internal account ID from us, collects your payment details directly, and uses your information under its own privacy policy to process payments, calculate tax and prevent fraud.

Sign-in services. If you sign in with Google, Apple or Microsoft, that service shares your email address with us at your direction, under its own privacy policy.

Your Teams. Members of a Team can see every task in that Team, along with the display name and email address of the person who created or is assigned each task. They also see each member's display name (or email address, if no display name is set). Anyone with a Team invite link can see who sent it for 7 days. Your mood check-ins, Care history, points and streaks are never shared with Teams.

People you invite. When you invite someone by email, Brevo sends them a message with your display name and the Team's name.

Legal and safety. We may disclose information if we believe in good faith it is required by law, or needed to protect someone's safety, our users, or the Services.

Business transfers. If we're involved in a merger, acquisition or sale of assets, information may transfer to the new owner, who must keep honoring this policy. We'll tell you before your health information is handled under a different privacy policy.

What we never do. We don't sell personal information, and we don't share it for cross-context behavioral (targeted) advertising, as those terms are defined in California law. We don't give health or wellness information to advertisers, data brokers, or anyone for marketing.

We keep personal information only as long as we need it for the purposes in this policy.

• Account and planning content is kept while your account is open, and deleted as soon as you delete your account.
• Mood check-ins and Care history are kept while your account is open and your permission is on. If you say no, or turn it off later, we delete them right away, along with Juni's insights and reviews built from them.
• Juni's insights, weekly reviews and schedule ideas, and the summaries stored with them, are deleted after 12 months.
• Questions you ask Juni are never stored. The daily count of them is deleted after 30 days.
• Under-18 sign-ups are deleted immediately, and the date of birth is never saved.
• Team invitations: invite links expire after 7 days, and invitations (with any invitee email address) are deleted after 30 days.
• Database backups are overwritten within 7 days, so deleted data leaves our backups within a week.
• Analytics data is kept by PostHog for up to 1 year on our current plan (up to 7 years on a paid plan). Ask us and we'll delete the analytics linked to your account.
• Server logs are kept by our hosting providers for a limited time, generally no more than 90 days.
• Support emails are kept for up to 2 years after the conversation ends.
• Payment and tax records are kept by Stripe, as merchant of record, for as long as the law requires.
• De-identified, aggregated data may be kept indefinitely.

We use these cookies and browser storage to run the Services:

• Keeping you signed in (our sign-in provider's session cookies)
• Remembering your theme (light or dark), a dismissed tip, and your focus-timer, vibration and narration-voice settings
• Briefly holding your email address (for 30 minutes) while you confirm a new account
• Remembering your analytics choice, and whether your region needs the analytics banner (the region only, never your location)

We measure how fast pages load with Vercel Speed Insights. It uses no cookies and doesn't build a profile of you.

Product analytics (PostHog). To understand which features help people, we use PostHog. While analytics is on, PostHog sets an analytics cookie and records the usage described in Section 1. We don't record your screen. It never receives what you type, your mood or energy ratings, the feelings you tag, your notes, or your questions to Juni. Anything about mood check-ins, the Nightly Unwind and Care practices (which practice you finished, and even page views and taps on those screens) is sent only if you've also agreed to us saving your check-ins and Care history. PostHog processes this for us in the United States and may not use it for its own purposes.

Your choice. If you have an account, it depends on where you were when you signed up (we keep only whether that region asks first, never your location). In the UK, EU, EEA or Switzerland (or somewhere we can't tell), analytics is off until you say yes: we ask you once with a card on your Home screen. Elsewhere, it's on once you've agreed to this policy. Either way you can change it any time in Settings > Privacy & data ("Share how I use the app"), and turning it off also stops the analytics our servers send about what you save. When you visit our website without signing in from the UK, EU, EEA or Switzerland (or somewhere we can't tell), we ask first with a banner; elsewhere it's on unless you say no. You can change your website choice any time with "Analytics choices" at the bottom of our website.

Global Privacy Control and Do Not Track. If your browser sends either signal, we treat it as a no in that browser: nothing is sent from it, and we don't show the banner or the Home card there. If analytics was on for your account only because of where you signed up, we also save that no to your account, which stops the analytics our servers send. If you've said yes yourself in Settings, turn it off there to also stop the analytics our servers send about what you save.

We don't use advertising cookies, tracking pixels or advertising identifiers, and we don't track you across other websites or apps.

Some information in The Life App may be "consumer health data" under laws like Washington's My Health My Data Act, Nevada's SB 370 and Connecticut's privacy law. It may also be "special category" health data under the UK and EU GDPR. We treat it with the same care everywhere. Our Consumer Health Data Privacy Policy gives the full details.

• What we collect: mood and energy ratings, feelings you tag, check-in notes, the Care practices you finish and when, onboarding choices about your wellbeing (such as "Handling big feelings"), and insights Juni draws from these.
• Your consent comes first. We ask your permission before saving it, separately from our Terms. Until you say yes, nothing is saved, and the rest of The Life App still works. We'll ask again, separately, before sharing it with anyone other than our service providers.
• Who receives it: our service providers for hosting (Supabase, Vercel); Google (Gemini) if you turn on Juni's writing help, as described in Section 3; and PostHog while analytics is on, which learns which Care practices you open and finish and that you completed a check-in, never your ratings, feelings or notes. We don't sell it, and we never share it with advertisers or data brokers.
• Your rights: to confirm whether we collect it, see it, get a list of everyone we've shared it with, withdraw consent, and have it deleted. See Section 8.

Wherever you live, you can:

• Download your data. Settings > Privacy & data > Export my data gives you a file with everything saved in your account, straight away.
• Correct your information in the app (name, tasks, plans) or by emailing us.
• Change your permissions. Turn "Keep my check-ins and Care history," "Juni's writing help" or "Share how I use the app" on or off in Settings > Privacy & data. Turning off check-ins and Care history deletes them, and the insights built from them. Turning off Juni's writing help stops anything new being sent to Google. Withdrawing doesn't affect what we did before.
• Delete your account. Settings > Privacy & data > Delete account deletes your account and everything in it right away, and cancels a website subscription. You can also delete tasks and other items one by one in the app.

U.S. state rights. Depending on your state (for example, California, Colorado, Connecticut, Virginia, Texas, Oregon, Washington or Nevada), you may also have the right to know what we collect and share, to limit our use of sensitive information, and to opt out of sales, targeted advertising and profiling. We don't sell information, use it for targeted advertising, or profile you in ways that have legal or similarly significant effects. We use sensitive information only to provide the features you ask for.

UK and EU rights. Under the UK GDPR and EU GDPR, you have the right to access, correct and delete your personal data, restrict or object to our use of it, receive it in a portable format, and withdraw consent at any time. You can also complain to your data protection authority. In the UK, that is the Information Commissioner's Office (ico.org.uk); in the EU, it is the authority in your country. We'd appreciate the chance to help first.

Other requests. For anything you can't do in Settings, or if you can't sign in, email help@thelifeapp.ai from your account email. We may need to confirm your identity first. You can use an authorized agent, and we may ask for proof that they're authorized. We'll respond within 45 days in the U.S., or one month in the UK and EU, and tell you if we need more time as the law allows.

Appeals (U.S.). If we deny your request, you can appeal by replying to our decision or emailing help@thelifeapp.ai with "Appeal" in the subject. If you're not satisfied, you can contact your state attorney general.

No discrimination. We won't treat you differently for using your privacy rights.

In the past 12 months, we collected these categories of personal information: identifiers (such as email address and name); commercial information (your subscription); internet or electronic network activity (app activity and server logs); sensitive personal information (account login, date of birth and health information you provide with consent); and inferences drawn from your activity to personalize Juni's insights.

We collect them from the sources in Section 1, use them for the purposes in Section 2, and disclose them to the recipients in Section 4 for business purposes. We don't sell or share personal information, and we have no actual knowledge of selling or sharing information about anyone under 16. Retention periods are in Section 5.

Shine the Light. We don't disclose personal information to third parties for their own direct marketing.

We use administrative, technical and physical safeguards designed to protect your information. These include encryption in transit, database access controls that block direct public access to your data, keeping secret keys on our servers and out of the app, and limiting staff access to what each person needs.

No system is perfectly secure, so we can't guarantee absolute security. Please use a strong, unique password. If a breach affects your information, we'll notify you and the authorities as the law requires. This includes the FTC's Health Breach Notification Rule where it applies, and the UK and EU duty to notify within 72 hours where required.

The Life App is for adults 18 and older. We ask for your date of birth when you sign up. If you're under 18, we delete the account and don't keep your details. If you believe someone under 18 has given us information, contact help@thelifeapp.ai and we'll delete it.

We're based in the United States, and your information is stored and processed in the United States, where our main service providers are. Brevo, our email provider, processes data in the European Union.

UK and EU users. ArrowHound Studios LLC is the controller of your personal data. When your data is transferred from the UK or EU to the United States, we rely on the EU–U.S. Data Privacy Framework and its UK Extension, where our providers are certified, or on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. You can ask us for a copy of the safeguards we use.

We may update this policy as the Services or the law change. We'll post the new version with a new "Last updated" date. For material changes, we'll tell you in the app or by email before they take effect. We'll ask for your consent before using information we already have in a materially different way, or before using health information for a new purpose.

ArrowHound Studios LLC (d/b/a The Life App) · help@thelifeapp.ai