1. Who handles your information
LifeOf is operated by VIMAL KUMAR NAIR PV in India. The owner handles privacy, account-deletion and safety requests at hello@lifeof.app.
2. Account and profile information
We process the account identifiers and information supplied through Google or Apple sign-in, such as your name and email where available. We store profile information you provide, including country, currency, salary or budgeting values and selected profile or cover images. Accounts created with earlier versions may also contain a phone number previously provided.
3. Activity and selected uploads
We store your habits, goals, schedules, completions, history, Ancient Gold and ThrillQuids records, Guild participation and selected habit or feedback images. Feedback includes the message and attachments you send. Avoid uploading information that is unnecessary for the feature or request.
4. Why we use it
We use this information to operate and support LifeOf, synchronise your data, calculate your habit and budgeting progress, provide reminders, deliver the Guild features you choose, verify access and purchases, investigate problems and protect accounts. We do not use your habits, goals, budgeting values, profile or uploads for advertising, promotion or AI training, and we do not sell them. The ads measurement in section 9 is the only advertising use.
5. What other users can see
Guild members can see your chosen name/avatar and role, relevant Expedition participation and contribution progress, and linked habit titles included in Guild activity. Signed-in people searching Guilds can see searchable Guild names, descriptions, logos and cover images. A private Guild still shares content with its members.
6. Purchases and service providers
Google Play or Apple handles the store purchase. LifeOf processes transaction and subscription-status information to associate valid access with your account. We use Firebase services for authentication, database and image storage, backend operations, notifications, app-integrity checks and remote app settings (Remote Config, which also holds the country rules for ads measurement). Their applicable privacy and processing terms describe their handling of service data. Meta Platforms also receives the information described in section 9.
On the LifeOf website, Google Analytics 4 runs automatically when a page loads. It measures page views, referring-site information, approved campaign labels (when present), and clicks on our App Store and Google Play links. External referrers are limited to their origin, and page URLs omit query parameters except for approved campaign labels. Google may use first-party analytics cookies and collect browser and device details and your IP address at collection to estimate general location and support security; Google states it discards IP addresses before logging. We do not send LifeOf account IDs, names, email addresses, habits, profile information, photos or budget records to Google Analytics. Learn more in Google Analytics data safeguards.
7. Notifications and diagnostics
Reminders use the schedules you choose and the device permissions you allow; some notifications use a device notification token. You can manage notification permission in system settings. These app versions include no Crashlytics or analytics SDK reporting. Meta's SDK is included only for the ads measurement in section 9. Necessary service and app-integrity checks can process device or installation information. Your device or app store may collect diagnostics according to its own settings and policies. Diagnostics uploaded by earlier versions follow the provider's retention lifecycle.
8. Friend rewards
With each habit tick the app sends a one-way code made from this phone's own ID (Android's ID for LifeOf, or a random ID kept on your iPhone), so a friend reward is paid only on a phone that never had another LifeOf account. We keep only that code and a one-way code of the first account seen on the phone, also after account deletion, to prevent reward abuse.
9. Ads measurement
We use ads measurement to see which of our ads on Facebook and Instagram bring people to LifeOf. It counts downloads only: purchases in LifeOf are never reported to Meta. In most countries it runs for everyone. In the EU, the EEA, the UK and Switzerland, and wherever our country rules say so, LifeOf asks you first and sends nothing to Meta unless you say yes; there you can change your answer any time in the app (More, then Settings, then Ads measurement).
When it runs, the app uses Meta's SDK to send Meta Platforms that you installed or opened LifeOf, with device information such as the device model, operating system, app version, language and time zone, together with your IP address, Meta's install ID for this phone, which ad or store link led to the install and, on Android, your device's advertising ID. On iPhone, LifeOf does not ask for Apple's tracking permission, so Meta receives no advertising ID. Your habits, goals, budget values, photos and profile are never sent.
Third parties, including Meta, may collect or receive information from LifeOf and from other apps and websites, and use it to provide measurement services and to target and deliver ads. Meta handles this information under its own terms and its Privacy Policy (facebook.com/privacy/policy).
You can limit this: where LifeOf asks first, switch Ads measurement off in the app; on Android, delete or reset your advertising ID in your device's privacy or ads settings; and in Meta's Accounts Center, choose not to use activity from other businesses for your ads (the setting is called “Activity from other businesses”, or “Activity information from ad partners” in some countries). Information already sent stays with Meta under its policies.
10. Location and protection
Our Firestore database is hosted in the United States, and Firebase Authentication processes data in the United States. Other providers and services may process data in their own locations. We use authentication, access rules and other security controls; authorised service providers and administrators also need access to operate and support the service.
11. Retention, deletion and requests
You can start account deletion by opening More, then Delete Account, then Delete permanently. The process removes the account and associated app data covered by the deletion workflow, including owned feedback and purchase-entitlement records. Some shared records are anonymised and limited safety/deletion records can remain, including the one-way codes described in section 8. Deleting the account does not cancel a store subscription.
Guild report evidence is retained for 30 days from submission. Expired evidence becomes unavailable and is scheduled for cleanup. Reports refer to the original shared image rather than retaining a separate image copy. Minimal active removal or restriction records remain as needed to enforce and reverse a safety action; account deletion covers the account's owned markers.
Daily database backups are retained for 14 days. Point-in-time recovery covers up to seven days, and configured Storage soft deletion lasts seven days. These are separate recovery mechanisms, not a promise that every record is erased on one deadline. Provider systems have their own removal periods.
Contact hello@lifeof.app to request access, correction, export, deletion or help with a privacy complaint. We verify that a request relates to your account, use a private response route and apply the response deadlines required for your request. Do not send passwords, full payment-card details or unnecessary identity documents. Your rights depend on applicable law, including any right to complain to a relevant authority.
12. Age and changes
Store age and update approvals: We use store-provided age ranges, verification and parental-approval signals only to control age access and required update approvals. LifeOf requests no date of birth, ID or selfie and retains no raw age response. On supported Apple devices, iCloud stores only the handled update/action under a coded LifeOf account reference. On account deletion, we attempt to remove that record from the currently available iCloud account. Sync is asynchronous; offline devices or inaccessible Apple accounts may retain a copy. LifeOf cannot centrally delete data in other Apple accounts.
LifeOf is intended for people aged 13 and older, subject to the requirements that apply where they live. Contact hello@lifeof.app with a concern about a child's account. We will publish the current privacy notice and explain material changes as required by applicable law. A privacy notice explains processing; it does not itself replace consent where consent is required.
For questions about your information or to exercise your privacy rights, contact hello@lifeof.app.