Privacy policy
Your data, in plain English
The short version comes first. The details follow, and they say the same thing at greater length.
The short version
- Your AI runs on your own key. You connect your own Claude (Anthropic) or OpenAI account. Requests go straight from your phone to that provider. Our server never sees your API key, what you send to the AI, or what it sends back.
- Your calendar stays on your phone. Lifehand reads it on the device and writes time blocks to its own “Lifehand” calendar. Calendar data is never sent to our server.
- We back up your data so a new phone picks up where you left off. Your captures, tasks, projects, plans and reviews are stored on our server (hosted by Supabase), encrypted in transit and at rest. One switch, Back up captures, turns off the backup of what you typed or said and erases our copy.
- You can take it all with you or erase it. Export everything as a JSON file, or delete your account and every server copy, from Settings.
- No ads. No tracking. We never sell your data. The app has no advertising or analytics SDKs.
1. Who we are
Lifehand is made by [LEGAL NAME], [LEGAL ADDRESS: city, state/region, country] (“we”, “us”). We are responsible for the personal data described here (the “controller”, in GDPR terms). Questions go to chris@forcomstudios.com.
2. What we collect
Only what the app needs to sign you in, back up your planner, and send you the notifications you turned on.
| What | Why |
|---|---|
| Account details: your name (if you share it), email address, and a user ID | To create and identify your account. They come from Sign in with Apple, from Google if you choose Google, or from the email address you enter to get a one-time sign-in code. Apple’s “Hide My Email” relay address works. We never receive or store a password. |
| What you create in the app: captures (the text you typed or said), tasks, projects, docs, lists, week and day plans, completed items, weekly reviews, and reminders | To back them up and restore them on a new or second iPhone, and so reminders can fire when the app is closed. Captures are included only while Back up captures is on (it is on by default). |
| Text read from attachments, and the attachment’s file name | When you attach a screenshot, photo or file, the app reads its text on your phone. That text is saved with the capture (and on a task made from it) and backed up with it. The image or file itself is never uploaded. |
| Notification settings: time zone, brief, plan and wrap-up times, quiet hours | To send the Sunday plan, the morning brief and your reminders at the right local time, and to hold non-urgent ones during quiet hours. |
| Push token for each device, app version, and when the device last checked in | To deliver notifications through Apple’s push service and to remove tokens for devices you no longer use. |
| Push log: which kind of notification was sent and whether delivery worked (no notification text) | To find and fix delivery problems. |
| License status: which license you hold and the App Store transaction or website order it came from | To know that your license is active on every device you sign in on, and to count founding licenses. |
| Emails you send us | To answer you. |
3. What we don’t collect
- Your AI API key. It is stored in your iPhone’s Keychain, on that device only, and sent only to the provider you chose.
- Your AI requests and responses. They go directly between your phone and your provider. Our server is not in that path.
- Your calendar. Events are read on your phone. Calendar data never leaves the device.
- Voice recordings. When you talk, Apple’s speech recognition turns your voice into text. Lifehand keeps only the text and never uploads or stores audio. (Where recognition can’t run on the device for your language, Apple may process the audio under Apple’s privacy policy.)
- Your photos, screenshots and files. They stay on your phone. Only the text read from them is saved with the capture.
- Your contacts and location. Lifehand does not read your contacts or use your location.
- Analytics, advertising IDs or tracking. The app contains no analytics or advertising SDKs and does not track you across other companies’ apps or websites.
4. Where it’s stored
On your iPhone. The app keeps its full copy of your data on your phone. That copy is the complete picture; the server holds a backup of it.
On our server. Account details and backed-up data are stored in a database run by Supabase, in the US East (N. Virginia) region. Data is encrypted in transit (TLS) and at rest (AES-256 disk encryption). Every row is locked to your account, so one user can never read another’s data.
What “encrypted” means here. This is not end-to-end encryption. Our server can read your rows. It does so automatically to word your notifications (for example, to put the title of today’s main task in your morning brief). Nobody reads your data in normal operation. We would look at it only if you ask us to help with a problem, or if the law requires it.
5. Your AI provider
Lifehand works with your own API key from Anthropic (Claude, which we recommend) or OpenAI. When you capture something, ask for a week plan or a review, the app sends the request from your phone directly to your provider using your key. You are that provider’s customer, and their terms and privacy policy govern what they do with it:
- Anthropic: privacy policy and commercial terms
- OpenAI: privacy policy and business terms
What is sent: the text of the capture, the current time and your time zone, and, as context, your project names and goals, list names, the names of people and companies you have mentioned, and the titles of up to 40 open tasks. Week plans and reviews send the tasks they are built from, with due dates and time estimates.
What is not sent: your calendar, text read from attachments, the attachments themselves, your account details, or anything to us. Lifehand never trains AI models on your data and never lets anyone else do so through Lifehand. Both providers say that, by default, data sent through their API is not used to train their models; check your provider’s current policy and settings.
The app asks for your permission before the first request goes to your provider. Without a key, captures are sorted by built-in rules on your phone and nothing is sent to any AI provider. Usage is billed to you by the provider; we never see or handle that payment.
6. The capture backup switch
In Settings → Privacy & Data, the Back up captures switch controls whether the raw text of your captures (what you typed or said) is backed up. It is on by default, so a new phone restores everything.
- On: captures are backed up with the rest of your data.
- Off: captures stay only on your phone. Our server copy of your captures is erased at the next sync, and turning the switch back on later does not re-upload older captures. Everything else is still backed up, because the app needs it to restore your planner and send your notifications: tasks (titled in your own words), projects, docs (long text you pasted is kept as a doc, word for word), lists, plans, reviews and the text of reminders.
If you lose your phone with the switch off, those captures cannot be restored. The organized results can.
7. Services we rely on
We do not sell, rent or share your personal data with anyone for their own purposes. These companies process data for us only to run the service:
| Service | What it does with your data |
|---|---|
| Supabase | Hosts our database and server functions (sign-in, backup, notifications). |
| Apple | Sign in with Apple; delivers push notifications (the notification text passes through Apple’s push service); processes App Store purchases. |
| Only if you choose Sign in with Google: confirms your identity and shares your name and email with us. | |
| Your AI provider | Anthropic or OpenAI, under your own account and their terms (section 5). We are not a party to that relationship. |
| Stripe | Processes payment if you buy a license on this website. Stripe handles your card; we receive your email and the order details. |
| Vercel | Hosts this website and keeps standard server logs (such as IP address and browser type) for security. |
We may disclose data if the law requires it, to protect someone’s safety, or as part of a sale or merger of the business, in which case this policy continues to apply to your data.
8. How long we keep it
| Data | Kept until |
|---|---|
| Your captures, tasks, projects, docs, plans and reviews | You delete them or your account. When you delete an item, its content is removed from the server at the next sync; an empty deletion marker (just its ID) stays up to 90 days so your other devices know to delete it too. |
| Captures, with Back up captures off | Erased from the server at the next sync. Nothing is kept. |
| Reminders and scheduled notifications | 30 days after they fire or are cancelled. |
| Push log | 30 days. |
| Push tokens | You sign out on that device, or 180 days without the app checking in. |
| Account details | You delete your account. |
| Database backups | Roll off automatically, at most 30 days after deletion. |
| Support emails | Two years after the conversation ends, then deleted. |
9. Export and deletion
Export
Settings → Privacy & Data → Export everything creates one JSON file with your captures, tasks, projects, docs, lists, plans, completed items, reviews and open questions. The file is yours; we keep no copy of it. To get a copy of what the server holds about you (including account and device records), email us.
Delete
Settings → Privacy & Data → Delete all data, or Account → Delete account, erases your account and every row we hold for you, immediately and permanently, then wipes the app’s data on that phone. Copies inside our database backups expire within 30 days. You can also ask us to delete your account by email from the address on the account.
Deleting your Lifehand account does not delete anything held by your AI provider, or your Apple or Google sign-in. Manage those in your provider account, your Apple Account settings (Sign in with Apple), or your Google Account. Deleting the app without deleting your account leaves your backup on the server so you can restore it later.
10. Your rights
Wherever you live, you can ask us to access, correct, export or delete your data, and we will do it. The app handles export and deletion on its own; for anything else, email chris@forcomstudios.com. We answer within 30 days.
EU, EEA and UK. We process your data to provide the service you asked for (performance of a contract): your account, backup and notifications. We send your requests to your AI provider because you set it up and agreed to it in the app. We keep security and delivery logs for our legitimate interest in running a reliable service. You also have the right to object, to restrict processing, and to complain to your local data protection authority. Your data may be processed outside your country, for example in the United States; where required, we rely on the standard contractual clauses our providers offer.
California and other US states. We do not sell or share personal information, as those laws define it, and we do not use it for targeted advertising. You can exercise your rights without being treated differently.
11. Children
Lifehand is not made for children. It is not directed at anyone under 13, or under 16 where local law sets that age. We do not knowingly collect data from children. If you think a child has created an account, email us and we will delete it.
12. This website
This website does not use advertising, analytics or tracking cookies. If you save a founding spot, we create your Lifehand account with your email address (the same account the app uses) and email you a sign-in link and launch news; every email has an unsubscribe link. If you buy a license on this website, Stripe processes your payment under its own privacy policy, and we receive your email and order details so the license unlocks the app when you sign in with that email.
13. Changes to this policy
If we change this policy, we will update the date at the top and keep the previous versions available on request. If a change affects how your data is used in a meaningful way, such as storing a new kind of data, we will tell you in the app before it takes effect.
14. Contact
[LEGAL NAME]
[LEGAL ADDRESS: city, state/region, country]
Email: chris@forcomstudios.com
For help with the app itself, see Support.