Privacy Policy

• Account information: email, display name, profile picture (if you sign in with Google) and a one-way hashed password.
• Content you create: tasks, events, habits, routines, goals, journal entries, notes, financial transactions, budgets, health metrics, moods and anything else you enter.
• Preferences: language, time zone, currency, theme and notification settings.
• Technical data: device and browser type, error logs, and push-notification subscriptions if you enable them.
• Content you send to AI or voice features (see sections 3 and 4).

We do not collect precise location, phone contacts or payment card data.

• To provide the app and sync it across your devices.
• To send reminders, notifications and essential account emails (for example sign-up confirmation and password reset).
• To create Ori's summaries, suggestions and answers when you use AI features.
• To keep the service secure, prevent abuse, fix bugs and improve reliability.

We do not use your data for advertising and we never sell your data to anyone.

When you use AI Coach Ori, voice quick add, brain dump to calendar, the weekly letter, receipt scanning or other AI features, the content needed for that request (for example the sentence you typed, a trimmed weekly summary, a downscaled receipt photo) is sent to the OpenAI-compatible AI model provider configured by the LifeOS administrator to generate a response.

• Only the data needed for the request is sent; receipt photos are not stored.
• AI results are saved to your data only after you confirm them.
• Ori may keep short “memories” to personalize answers; you can view and delete them in the app.
• Core features keep working if you don't use AI.

When you talk to Ori, your browser may recognize speech on its own. Otherwise the recording is sent to a speech-to-text provider (for example ElevenLabs, Fish Audio or an OpenAI-compatible provider) only to transcribe it. Spoken replies may use a text-to-speech service. We don't keep recordings after they are processed.

LifeOS may use data from Google in two ways, only when you choose to:

• Sign in with Google: we receive your name, email address and profile picture to create and sign in to your account.
• Google Drive backup: LifeOS requests only the https://www.googleapis.com/auth/drive.file scope, which gives access only to files LifeOS creates or that you open with LifeOS. We use it to save, list, download and delete LifeOS backup files in your Drive. We do not read, scan or modify any other files.

LifeOS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

• We use Google data only to provide the backup and sign-in features you see in the app.
• We do not transfer Google data to third parties except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.
• We do not use Google data for advertising, do not sell it, and do not use it to train AI models.
• No human reads your Google data unless you consent, or it is needed for security or legal reasons.
• Drive access tokens are never included in backups. You can disconnect in Settings or at myaccount.google.com/permissions.

Your data is stored in a Supabase database operated by Lovable Cloud. Connections are always encrypted (HTTPS/TLS). Access is limited to your own account by database-level security policies, and provider API keys are encrypted at rest. A copy of your data is also kept on your device so the app works offline. No system is perfectly secure, but we take reasonable measures to protect your data.

We do not sell, rent or trade personal data. We share data only with service providers that help run LifeOS, and only as needed:

• Hosting and authentication: Supabase / Lovable Cloud.
• AI: OpenAI-compatible model providers configured by the administrator.
• Voice: ElevenLabs, Fish Audio or OpenAI-compatible providers.
• Email: a transactional email service (for example Resend or SMTP).
• Push notifications: your browser's or operating system's push service.
• Google, when you use Sign in with Google or Drive backup.

We may disclose data when required by law.

We keep your data while your account is active. Items you delete go to Trash and may be permanently removed later. When you ask us to delete your account, we delete the account and your personal data within a reasonable time, except where the law requires us to keep it. Backups in your Google Drive belong to you and you can delete them yourself.

• View and edit your data in the app.
• Export all your data: Settings → Data → Export all data.
• Delete your data: Settings → Data → Delete everything & start over, or delete individual items.
• Delete your account: email bilonglo9x@gmail.com from your account's email address; we handle requests within 30 days.
• Revoke Google access at any time.

Depending on where you live, you may have additional rights under data-protection laws (such as the GDPR or Vietnam's Decree 13/2023/ND-CP). Contact us to exercise them.

LifeOS uses localStorage, IndexedDB and the service-worker cache on your device to keep you signed in, remember preferences (language, theme) and work offline. We do not use third-party advertising or tracking cookies. Clearing site data in your browser signs you out on that device.

LifeOS is not intended for children under 13 (or the minimum age required where you live). We do not knowingly collect children's data. If you believe a child has given us data, contact us and we will delete it.

Our infrastructure and AI providers may process data in countries other than where you live. We only use providers with appropriate data-protection commitments.

We may update this policy. The effective date at the top will change; for significant changes we will notify you in the app or by email before they take effect.

For any privacy question or request, email bilonglo9x@gmail.com.