Privacy Policy

1. Scope

This policy covers the LifeCord web application, related API endpoints, session management, cloud synchronization, and optional third-party integrations the user connects.

The service is operated by the Application operator. A company legal name is not invented in this text; a support email address is used for contact.

2. Data we collect

LifeCord processes only data necessary to provide the service or data you enter. Main categories include:

• Account information: name, email, authentication identifiers, and profile preferences.
• Authentication and session data: session cookies / session tokens, session durations, and device/session metadata (e.g. last activity, device or session labels).
• Workspace content: tasks, notes, habits, goals, plans, shopping lists, activity records, and other content you create in personal / couple / family workspaces.
• Calendar integration data: when you connect Google Calendar, authorized calendar and event information and sync status.
• Gmail integration data (when enabled): only message summaries / metadata needed for the requested feature; not used for advertising.
• Finance data: transactions, budget / account records, and shared expense information you enter or import (for informational / personal tracking purposes).
• Smart-home integration data (when enabled): connection configuration and status summaries related to Home Assistant or similar systems you connect.
• Technical logs and security events: error, access, and security-related event records (limited and proportionate where possible).

3. Cookies, localStorage, and cloud source of truth

LifeCord may use cookies for session management. On-device localStorage may be used for preferences, temporary cache, and offline / fast-load experience.

localStorage is a device-specific cache / preference layer; the durable cloud source of truth is the Postgres database. Multi-device synchronization runs through this cloud source.

You can clear cookies and local storage in browser settings; this may end your session or delete local cache.

4. Processing purposes

Your data is processed for the following purposes:

• Account creation, sign-in, session security, and device / session management.
• Providing personal and shared workspace features.
• Multi-device synchronization, notifications, and (when enabled) real-time / polling-based updates.
• Running optional third-party integrations (e.g. Google Calendar / Gmail, smart home) with your authorization.
• Security, abuse prevention, debugging, and service continuity.
• Fulfilling user-requested data export and account deletion requests.

5. Use of Google API data

When you connect your Google account, LifeCord may access data through Google APIs only to provide the integrations you request. Typical examples: Google Calendar events and (if the feature is enabled) limited Gmail message / metadata access.

Google user data is not sold. It is not used for ad targeting, ad measurement, or building a standalone advertising profile.

Access depends on your authorization and can be revoked from Google account settings or LifeCord connection management. After revocation, new access stops; remaining local / server records are cleared according to deletion or disconnect flows.

External connection tokens (access / refresh tokens) are stored with at-rest encryption where implemented in the application. LifeCord does not claim end-to-end encryption.

LifeCord aims to use Google user data in a manner consistent with the Google API Services User Data Policy (including Limited Use requirements) to the extent applicable. This statement is not a certificate or independent audit claim.

6. Third-party services

Infrastructure providers are used to deliver the service. These providers may technically process data to host or run the service. Absolute statements such as “data is never shared” are not used.

• Vercel — application hosting and edge / server execution.
• Neon — Postgres database hosting.
• Google APIs — calendar / Gmail integrations with user authorization.
• GitHub — source code and deployment integration; not used as a product database for end-user content (except deployment logs / CI; user workspace data is not stored there).

7. Security measures

LifeCord applies reasonable technical and administrative measures such as authentication, session management, access controls, encrypted storage of external integration tokens (where implemented), and production configuration controls.

No online service is 100% secure. In the event of an unusual security incident, reasonable notification and risk-mitigation steps are taken.

8. Retention periods

Account and workspace data are retained to provide the service while the account is active. Sessions may end by expiry or by user / system revocation.

After an account deletion request, data is intended to be removed from production systems within a reasonable time, subject to legal obligations and security backups. Delayed cleanup may occur in restore-from-backup scenarios.

Technical logs may be kept for periods proportionate to security and operational needs.

9. User rights

Within applicable law, you may request access, correction, deletion, restriction of processing, and (where applicable) portability.

LifeCord may offer in-product data export features. Account deletion requests can be submitted via the support email; identity verification may be required.

In shared (couple / family) workspaces, other members may also access content; deletion or access requests depend on workspace membership and your permissions.

10. Children / minors

LifeCord is not directed at children under 13. If it becomes known that data of a minor was knowingly collected, reasonable steps are taken to close the account and delete the data.

11. International data processing

Infrastructure providers (e.g. Vercel, Neon, Google) may process or host data in different countries. By using the service, you acknowledge that such transfers may be necessary to provide the service.

12. Policy changes

This policy may be updated from time to time. For material changes, the “Last updated” date is refreshed and, where possible, notice is provided via the application or site. Continued use after publication of an updated policy may constitute acceptance of the changes.

13. Contact

For privacy questions, data export, or account deletion requests: the support email address (Contact link in the page footer). Include your LifeCord account email in your request.