Privacy Policy
Effective October 28, 2026
LifeFlow is a personal organizer for your money, school, work, schedule, health and notes, with a built-in AI assistant. LifeFlow is operated by Ali Moslli ("we", "us"). This policy explains what information we collect, why, who we share it with, how long we keep it, and the choices you have. We wrote it to match how the app actually works.
The short version
- We collect what you put into LifeFlow and what you choose to connect. We use it only to run LifeFlow for you.
- We do not sell your personal information, we do not use it for advertising, and we do not use it to train AI models.
- Your data is separated from every other account at the database level, and connection tokens are encrypted.
- You can export everything or delete your account and its data at any time from Settings.
1. Information we collect
Information you give us
- Account details: your name, email address, time zone, and a password, which we store only as a salted, one-way hash. If you turn on two-step sign-in, we store an encrypted authenticator secret and hashed backup codes.
- Your content: anything you add, such as accounts and balances, transactions, budgets, goals, bills, classes, assignments, work shifts and pay, calendar events, tasks, notes, files you attach, and settings such as your assistant's name, personality and voice.
- Conversations with your assistant: the messages you type or speak, the assistant's replies, and the actions it took for you. Voice is processed live and we keep a text transcript, not the audio recording.
- Memories: facts and preferences you ask the assistant to remember or approve from its suggestions. You can see, edit and delete each one in Settings.
Information from services you connect
Connections are optional and you can disconnect them at any time.
- Google (Gmail and Google Calendar): if you connect your Google account, we access the email messages, drafts and calendar events needed to answer your requests, for example to find an email, summarize your inbox, draft a reply you review, or show and add calendar events. We store your Google access tokens encrypted. We fetch email content when you ask for it and do not keep a copy of your mailbox. Calendar events you sync are stored so they appear in your plan.
- Apple Health: if you set up the LifeFlow shortcut on your iPhone, it sends the health measurements you choose (for example steps, sleep, active energy, heart rate and weight) to your LifeFlow account. Health data is sensitive, and we treat it that way: it is used only to show you your own health information and to answer your own questions about it.
Information collected automatically
- Security and service records: sign-in times, the device's browser type, IP address used for rate limiting, and a log of sensitive account actions you can view in Settings.
- Assistant usage measurements: for each request, how long it took, how many steps and tools it used, whether it succeeded, and how much AI processing it used. These records do not contain what you said.
- Cookies: we use only essential cookies, to keep you signed in, to complete two-step sign-in, and to remember your light or dark theme. We do not use advertising or cross-site tracking cookies, and we do not use third-party analytics.
2. How we use information
- To provide LifeFlow: showing your day, plans and finances, and letting your assistant read and update your records when you ask.
- To personalize your assistant with the memories and settings you approve.
- To keep your account secure, prevent abuse, and fix problems.
- To measure and improve the speed, reliability and cost of the assistant, using the usage measurements described above.
- To communicate with you about your account or important changes to LifeFlow.
We do not sell or rent personal information, use it for targeted advertising, or use your content, health data or Google data to train artificial intelligence models. We only use your information in other ways with your consent.
3. The AI assistant
When you use the assistant, the parts of your information needed to answer your request (your message, relevant records, relevant approved memories, and, if you ask about them, your email, calendar or health data) are sent to our AI provider, OpenAI, to generate the response. OpenAI processes this under its API terms. Under those terms, OpenAI does not use data sent through its API to train its models by default, and it may retain data for a limited period to detect abuse. We send requests with OpenAI's response storage turned off, and your conversation history is stored in your LifeFlow account, not with OpenAI.
The assistant only changes your data through defined actions, shows you what it changed, and asks for your confirmation before deleting things or sending anything outside LifeFlow, such as an email.
4. Google user data
LifeFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google data only to provide the features you use in LifeFlow; we do not transfer it to others except as needed to provide those features (including to our AI provider to answer your request), to comply with law, or as part of a merger or acquisition with notice to you; we do not use it for advertising; and no person reads it unless you give us permission for a specific message, it is needed for security or legal reasons, or it is aggregated and anonymized for internal operations.
Canvas and school records
If you connect Canvas, LifeFlow reads your active classes and assignments (names, due dates, points and links) with an access token you create. The token is stored encrypted and you can disconnect at any time. LifeFlow never submits work, posts or changes anything in Canvas, and uses this data only to show it to you and help you plan. It is not shared with your school or anyone else. Our assistant never does graded work for you; see Academic integrity.
5. Who we share information with
We share information only with service providers that help us run LifeFlow, under contracts that limit their use of it, and only as needed:
| Provider | Purpose |
|---|---|
| Vercel | Hosting the app |
| Neon | Database hosting |
| OpenAI | Generating assistant responses, including live voice |
| Gmail and Google Calendar, only if you connect them |
We may also disclose information if required by law or to protect the rights, safety and security of our users or the public, and in connection with a merger, acquisition or sale of assets, in which case this policy will continue to apply or you will be notified.
6. How we protect information
- All traffic is encrypted in transit with HTTPS.
- Each account's records are isolated in the database, so one account cannot read another's data.
- Passwords are hashed, sign-in attempts are rate limited, and you can turn on two-step sign-in.
- Tokens for connected services and authenticator secrets are encrypted at rest.
No method of storage or transmission is completely secure, but we work to protect your information and will notify you of a breach affecting it as required by law.
7. How long we keep information
We keep your information for as long as your account exists. When you delete your account, your data is deleted from our database right away; copies in our providers' backups expire within their normal backup periods. Rate-limit records are deleted after about a day, and expired sign-in sessions are cleared automatically. Disconnecting Google removes your stored Google tokens.
8. Your choices and rights
- Access and portability: download all your data from Settings, Privacy & data.
- Correction: edit your profile, records and memories in the app.
- Deletion: delete individual records, memories or conversations, or delete your whole account from Settings.
- Connections: disconnect Google or revoke the Apple Health shortcut at any time. You can also remove LifeFlow's access from your Google account settings.
- Assistant memory: turn memory suggestions off, and review or delete what the assistant remembers.
Depending on where you live, you may have additional rights, such as the right to know what personal information we collect, to correct or delete it, and to not be discriminated against for exercising these rights. California residents: we do not sell or share personal information for cross-context behavioral advertising, and we use sensitive personal information (such as account credentials and health data) only to provide the service you request. To make a request we cannot handle through the app, contact us at alimoslli5@gmail.com. We will verify your request using your account.
9. Children
LifeFlow is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will delete it.
10. International users
LifeFlow is operated from the United States and your information is processed and stored in the United States.
11. Changes to this policy
If we change this policy, we will update the effective date above. If a change materially affects how we use your information, we will tell you in the app before it takes effect.
12. Contact
Questions or requests about privacy: alimoslli5@gmail.com.