Legal

Privacy Policy

How LifeOf collects, uses, and protects your information.

Effective date: 18 May 2026 · Last updated: 18 May 2026

Contents

1. Who we are

2. Scope of this Policy

3. Information we collect

4. How we use your information

5. Legal basis for processing

6. How we share information

7. Third-party services we use

8. International data transfers

9. Data retention

10. Your rights

11. Security

12. Children’s privacy

13. Cookies and tracking

14. Regional disclosures

15. Changes to this Policy

16. Contact us

1. Who we are

LifeOf is a habit tracking application owned and operated by LifeOf Technologies (sole proprietorship of Vimal Kumar Nair P V), registered in Ahmedabad, Gujarat, India. For data protection enquiries: grievance@lifeof.app (DPDPA 2023).

2. Scope of this Policy

Applies to all users of the LifeOf App and lifeof.app website, worldwide. Does not cover Apple App Store, Google Play Store, or Razorpay — those have their own policies.

3. Information we collect

You provide directly

Phone number (OTP login) · Display name and avatar · Monthly income figure (App-only, never shared) · Habit data — names, icons, values, completion records · ThrillQuids and Ancient Gold balances · Adventure’s Guild participation · Feedback and support messages

Collected automatically

Firebase Installation ID, App Check tokens · Anonymous crash reports (Crashlytics) · Approximate region (from phone country code) · Push notification token, app version, OS version

We do NOT collect

Bank account details, payment card numbers, exact location, photos, contacts, microphone, camera, health data, or biometric data.

4. How we use your information

• Provide and maintain the App • Send push notifications • Process subscriptions • Detect and prevent fraud • Fix bugs via Crashlytics • Respond to support requests • Comply with legal obligations

We do not use your data for advertising or AI training.

5. Legal basis for processing

Contract — to provide the App Legitimate interest — crash reports, fraud detection Consent — push notifications Legal obligation — payment record retention

6. How we share information

• Data processors who run the App (Section 7) • Apple/Google/Razorpay for subscription processing • Adventure’s Guild members — limited to display name, avatar, XP • Legal authorities when required by law • Business successors (with prior notice)

We do not sell or share your data with advertisers.

7. Third-party services we use

Google Firebase (Auth, Firestore, FCM, Crashlytics, App Check), Google Play Billing, Apple In-App Purchase, Razorpay, MSG91. For Indian users, data may be stored on Google servers in Asia-Pacific regions.

8. International data transfers

We use Google Cloud Platform. Data may be stored in Asia-Pacific or EU regions. We rely on adequacy decisions, SCCs, and the DPDPA 2023 framework for international transfers.

9. Data retention

Account data — while active Crash reports — 90 days Payment records — 8 years (tax law) Backups — 60 days Support messages — 3 years

After deletion, bulk data removed within 30 days.

10. Your rights

Access, correct, delete, restrict, port, withdraw consent, or complain to your data authority. Contact: privacy@lifeof.app — we respond within 30 days.

11. Security

TLS 1.3 in transit · AES-256 at rest · OTP-only login · Firebase App Check · Restricted production access with audit logging

No system is 100% secure. We notify users and authorities of data breaches within the legally required timeframes.

12. Children’s privacy

Not directed at children under 16. Contact privacy@lifeof.app if you believe your child has an account and we will delete the data.

13. Cookies and tracking

The App does not use cookies. The Site uses only essential cookies — no advertising cookies, no cross-site tracking, no pixel tags.

14. Regional disclosures

EEA / UK / Switzerland (GDPR)

Full rights in Section 10, legal bases in Section 5. Complaints to your local supervisory authority.

California (CCPA / CPRA)

Right to know, delete, opt out of sale/sharing (we do not sell), and non-discrimination.

India (DPDPA 2023)

Grievance Officer: grievance@lifeof.app. Complaints to the Data Protection Board of India.

Brazil (LGPD)

LGPD-compliant. Contact privacy@lifeof.app.

15. Changes to this Policy

Material changes notified via in-app banner and updated “Last updated” date. Continued use after effective date constitutes acceptance.

16. Contact us

Email: privacy@lifeof.app Grievance Officer: grievance@lifeof.app Postal: LifeOf, c/o Vimal Kumar Nair P V, Ahmedabad, Gujarat, India

We respond to all enquiries within 7 business days.

Legal

Privacy Policy

How LifeOf collects, uses, and protects your information.

Effective date: 18 May 2026 · Last updated: 18 May 2026

Contents

1. Who we are

2. Scope of this Policy

3. Information we collect

4. How we use your information

5. Legal basis for processing

6. How we share information

7. Third-party services we use

8. International data transfers

9. Data retention

10. Your rights

11. Security

12. Children’s privacy

13. Cookies and tracking

14. Regional disclosures

15. Changes to this Policy

16. Contact us

1. Who we are

LifeOf is a habit tracking application that helps you build daily habits with a self-funded reward system. The App is owned and operated by LifeOf Technologies (a sole proprietorship of Vimal Kumar Nair P V, hereinafter “LifeOf”, “we”, “us”, or “our”), with its registered place of business in Ahmedabad, Gujarat, India.

For all data protection enquiries, you can reach our Grievance Officer at grievance@lifeof.app, in compliance with India’s Digital Personal Data Protection Act, 2023 (DPDPA 2023).

2. Scope of this Policy

This Privacy Policy applies to all users of the LifeOf mobile application (“the App”) and the lifeof.app website (“the Site”), wherever they are located in the world. It covers personal information you provide to us, information we collect automatically when you use our services, and information we receive from third parties.

This Policy does not cover third-party services you interact with through the App (for example, Apple’s App Store, Google Play Store, or Razorpay). Those services have their own privacy policies, which we encourage you to review.

3. Information we collect

3.1 Information you provide directly

• Phone number — used to create and access your account via OTP authentication. • Display name — the name you enter during onboarding. • Selected avatar — the avatar image you choose from our bundled set. • Monthly income figure — a number you enter during onboarding, used only inside the App. We do not store, verify, or share your actual income with any third party. • Habit data — habit names, icons, daily values, days of week, completion records, reminders, and goals. • ThrillQuids and Ancient Gold balances — virtual in-app values stored against your account. • Adventure’s Guild participation — guild names you join, event participation, and XP earned. • Feedback and support messages — content you send to us via in-app feedback or email.

3.2 Information collected automatically

• Device identifiers (Firebase Installation ID, App Check tokens). • Crash reports (anonymous, via Firebase Crashlytics). • Approximate region, inferred from your phone number country code. • Push notification token (Firebase Cloud Messaging). • App version and operating system version.

3.3 Information from third parties

• Subscription receipts from Apple App Store or Google Play Store for verifying your Adventures Club subscription. • Payment confirmations from Razorpay, for Indian users paying via Razorpay.

3.4 Information we do not collect

We do not collect your real-world bank account information, payment card numbers, exact location, photos or files outside the App, contacts, microphone audio, camera input, health data, biometric data, or any other category of sensitive personal data not listed above.

4. How we use your information

We use your information to:

• Provide and maintain the App’s functionality (account creation, habit tracking, virtual currency balances). • Send you push notifications about habits, rewards, and important account updates. • Process Adventures Club subscriptions and other payments. • Detect and prevent fraud, abuse, and security threats (via App Check Play Integrity). • Improve the App’s performance and fix bugs (via Crashlytics). • Respond to your feedback, support requests, and legal enquiries. • Comply with applicable legal obligations (tax, financial reporting, court orders).

We do not use your information for advertising, profiling for ads, or training AI models.

5. Legal basis for processing

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions requiring a lawful basis under data protection law, we rely on the following legal bases:

• Contract — Processing your phone number, profile data, habits, and balances is necessary to perform our contract with you (providing the App service). • Legitimate interest — Crash reporting, fraud detection, App Check verification, and security monitoring. • Consent — Push notifications (you choose to enable them in your device settings). • Legal obligation — Retention of subscription and payment records for tax compliance, and responses to lawful government requests.

You can withdraw consent for any consent-based processing at any time from your device settings or the App’s settings.

6. How we share information

We share your information only in the following limited circumstances:

• With our data processors who help us run the App (see Section 7). • With payment platforms (Apple, Google, Razorpay) to process your subscription payments. • With other Adventure’s Guild members — visible information is limited (display name, avatar, event participation, XP). Your personal financial data and habit details remain private. • With legal authorities when compelled by law, court order, or to protect rights, safety, or property. • With successors in a corporate transaction — if LifeOf is acquired or merges with another entity, we will notify you and you will have a choice to delete your account.

We do not sell your personal information to third parties. We do not share your information with advertisers.

7. Third-party services we use

The following third parties act as our data processors. Their handling of your information is governed by their own privacy terms:

• Google Firebase Authentication — phone OTP login. • Google Cloud Firestore — storing your habits, balances, and profile. • Google Firebase Cloud Messaging — push notifications. • Google Firebase Crashlytics — anonymous crash reports. • Google Firebase App Check with Play Integrity — fraud prevention. • Google Play Billing — subscription payments on Android. • Apple In-App Purchase — subscription payments on iOS. • Razorpay — alternative payment gateway for Indian users. • MSG91 — SMS OTP delivery for Indian users.

For users in India, your data may be transferred to and stored on servers operated by Google in Asia-Pacific regions, including Singapore and Mumbai data centers.

8. International data transfers

LifeOf is based in India. We use cloud infrastructure provided by Google Cloud Platform, which may store your data on servers located in:

• Asia-Pacific — Mumbai (India), Singapore, Tokyo. • For European users, where required by law, EU-based servers (Frankfurt, Belgium).

When transferring data internationally, we rely on adequacy decisions where applicable, Standard Contractual Clauses (SCCs) approved by the European Commission, and the DPDPA 2023 framework for India-related transfers.

9. Data retention

We retain your data only as long as necessary to provide the service and comply with our legal obligations:

• Active account data (profile, habits, balances) — while your account is active. • Crash reports — up to 90 days (auto-deleted by Firebase). • Subscription and payment records — up to 8 years (Indian tax law requirement). • Encrypted database backups — up to 60 days. • Adventure’s Guild contributions after account deletion — visible as “Former member”. • Support correspondence — up to 3 years.

After account deletion, the bulk of your data is removed within 30 days, with exceptions noted above.

10. Your rights

Depending on your jurisdiction, you may have the right to:

• Access — request a copy of the personal data we hold about you. • Correct — request that inaccurate data be corrected. • Delete — request deletion of your account and associated data. • Object — object to processing based on legitimate interest. • Restrict — request that we limit processing. • Portability — receive a copy of your data in a portable format. • Withdraw consent — for any consent-based processing. • Complain — lodge a complaint with your local data protection authority.

To exercise these rights, contact privacy@lifeof.app. We respond within 30 days. We do not charge for these requests unless they are manifestly unfounded or excessive.

11. Security

We protect your information using:

• TLS 1.3 encryption for all data in transit. • AES-256 encryption for sensitive data at rest in Firestore. • Phone OTP authentication — no passwords are stored on our servers. • Firebase App Check with Play Integrity to block fraudulent client requests. • Restricted access to production data, with audit logging. • Regular security reviews of our cloud infrastructure.

No system is 100% secure. If we discover a personal data breach, we will notify affected users and authorities within the timeframes required by law (72 hours under GDPR; without undue delay under DPDPA 2023).

12. Children’s privacy

LifeOf is not directed at children under 16, and we do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal information, please contact privacy@lifeof.app and we will delete the data.

In jurisdictions where the minimum age is higher (for example, the United States COPPA — under 13), the higher age limit applies.

13. Cookies and tracking

The LifeOf App does not use cookies. The Site (lifeof.app) uses only essential cookies required for the site to function. We do not use advertising cookies, analytics cookies that personally identify you, cross-site tracking, or pixel tags or web beacons for advertising.

14. Regional disclosures

14.1 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

You have rights as described in Section 10. Our legal basis for processing is described in Section 5. You may lodge a complaint with your local supervisory authority. We do not transfer data outside the EEA except with appropriate safeguards (such as SCCs).

14.2 California, USA (CCPA / CPRA)

You have the right to know what categories of personal information we collect, the right to request deletion, the right to opt out of “sale” or “sharing” (we do not sell or share personal information as defined under CCPA), and the right to non-discrimination for exercising these rights.

14.3 India (DPDPA 2023)

LifeOf is a Data Fiduciary under the Digital Personal Data Protection Act, 2023. Our Grievance Officer can be contacted at grievance@lifeof.app. You may also lodge a complaint with the Data Protection Board of India.

Grievance Officer: Vimal Kumar Nair P V, c/o LifeOf, Ahmedabad, Gujarat, India. Email: grievance@lifeof.app.

14.4 Brazil (LGPD)

We comply with the General Data Protection Law (LGPD). You have rights similar to those described in Section 10. Contact our Data Protection Officer at privacy@lifeof.app.

15. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via an in-app banner the next time you open the App, an update to the “Last updated” date at the top of this page, and where required by law, by email or push notification.

Your continued use of the App after the effective date constitutes acceptance of the updated Policy.

16. Contact us

For privacy questions, data subject rights requests, or grievances:

• Email: privacy@lifeof.app • Grievance Officer: grievance@lifeof.app • Postal: LifeOf, c/o Vimal Kumar Nair P V, Ahmedabad, Gujarat, India

We respond to all enquiries within 7 business days.