Privacy Policy

• We collect what you give us and what the features need. We do not sell your information, and we do not show ads.
• We do not use advertising trackers or third-party analytics.
• Your health readings (heart rate, blood pressure, blood glucose, fasting, body measurements) are visible only to you.
• Some features use an AI service. Section 4 lists exactly what is sent to it.
• Lyfe Synch does not connect to your bank. Finance data is what you type in or ask the assistant to add.
• No online service is perfectly secure, and you are responsible for protecting your password and your device (see sections 12 and 13).

Account information. Your email address, your name and username if you set them, your profile picture if you add one, and your sign-in details. Your password is handled by our authentication provider and stored in scrambled (hashed) form; we never see it.

What you put into the app. Everything you choose to enter or ask the assistant to enter, which can include: tasks, habits and goals; calendar events (and the contents of calendars you link); journal entries and moods; study notes, classes and sessions; clock-in and work shifts; budgets, accounts, balances, transactions, categories and debts; food, water, weight, body measurements, workouts, blood pressure, heart rate, blood glucose, fasting records, recipes, meal plans and progress photos; saved logins in the Passwords section; messages, friend requests and groups; and support tickets you send us.

From your device.If you choose to use them: Android Health Connect (read-only, section 5); the camera, for scanning barcodes and taking photos; the microphone through your device's speech recognition, for voice input to the assistant; your time zone, so dates and times are right; and a push-notification address if you turn on notifications.

Payment information. If you subscribe, payment is handled by Stripe. We receive your plan, subscription status, billing dates and a Stripe customer reference. We never receive or store your card number.

Technical information. Like any website, our hosting provider records technical details of each request, such as your IP address, browser or app type, the page requested and the time. We use this to keep the service running, secure it and fix problems.

Cookies and similar storage. We use only what the app needs to work: a sign-in session, your time zone, your last calendar view, a short-lived marker during password reset, and your appearance choices (light or dark, color theme) saved on your device. The app also uses a service worker so it can load quickly and show notifications. We do not use advertising or cross-site tracking cookies.

• To provide and personalize the features you use: showing your own data back to you, charts, reminders, reports and calculations.
• To run AI features you ask for (section 4).
• To sign you in, send account emails (confirmation, password reset) and process subscriptions.
• To send notifications you have switched on, such as task and event reminders and your weekly report.
• To keep the service safe: preventing abuse, fraud and unauthorized access, and fixing bugs.
• To answer your support requests and to meet legal obligations.

We do not sell your personal information, we do not share it for advertising, and we do not use it to build advertising profiles.

Some features use an AI service provided by Anthropic, a third-party company. Content is sent to it only when you use the feature, and only what that feature needs:

• AI Assistant: the messages you type (or speak) and any photo you attach, plus whatever your own data the assistant looks up or changes to carry out your request (for example your tasks, events, food logs or finance accounts and categories).
• AI Scan: the photo of your meal that you take or choose.
• Meal planner: your calorie and macro goals, eating style, allergies or foods to avoid, and any notes you type.
• AI financial advice (“Money check-in”): only totals and averages, such as average monthly income and spending, balances by kind of account, debt amounts and interest rates, and spending by category name. Account names, payees, memos and individual transactions are not sent, and the answer is not stored.
• Weekly report: a numeric summary of your week, such as counts of tasks done, habit check-offs, workouts, average calories, weight at the start and end of the week, mood counts, study minutes and money in and out. It does not include titles, notes or names.

Heart rate, blood pressure and blood glucose are never sent to any AI feature. Weight entries, including weight that came from Health Connect, are stored with the weights you log by hand, so they can be part of what the assistant tells you about your weight and of your weekly report summary.

We use Anthropic's business API. As of the date above, Anthropic's terms for that API say content sent through it is not used to train its models by default, and we have not opted in to any such use. Anthropic handles the content under its own terms and privacy policy. AI can be wrong or incomplete: please read the disclaimers in our Terms.

Health information can be sensitive, so we treat it separately. You decide what to log, and you can delete any reading from its history list at any time.

Health Connect (Android). If you use the Android app and tap Connect under Settings → Connected devices, Lyfe Synch asks Android Health Connect for permission to readthese types only: heart rate, resting heart rate, blood pressure, blood glucose and weight. You choose which to allow in Android's permission screen and can remove access at any time in Health Connect settings. Lyfe Synch never writes anything back to Health Connect.

Data read from Health Connect is copied into your own Lyfe Synch account so it appears beside the readings you log yourself. Heart rate is stored as an hourly average rather than every raw sample.

• Your health readings are visible only to you. They are never shown to friends, never part of the sharing options in Social, and never sold.
• Health Connect data is used only to show you your own history and charts. It is not used for advertising, marketing, profiling, or to train AI models.
• Heart rate, blood pressure and blood glucose are not sent to AI features. Weight is treated as described in section 4.
• The PDF health report is built on request from your own entries, for you, and is not stored by us.
• Progress photos are stored privately and shown only to you through short-lived links.

Consumer health data.To the extent laws such as Washington's My Health My Data Act apply: the health information we handle is the information listed above, we collect it only from you (and, if you choose, from Health Connect), we use it only to provide the features you asked for, we share it only with the service providers in section 8 that run the service for us, and we never sell it. You may ask us to access or delete it using the contact details in section 17.

Health features are for your own tracking and are not medical advice. See the Terms.

Lyfe Synch is a record-keeping tool. It does not connect to your bank, credit card or brokerage, and it cannot move money. The financial information in the app is what you enter yourself or ask the assistant to enter. It is visible only to you. If we ever add a bank connection, we will update this policy and ask for your clear consent first.

If you use Passwords, the logins you save are encrypted before they are stored, using AES-256-GCM. The key is kept in our server settings, separate from the database. This is not end-to-end encryption: our servers must be able to decrypt your entries to show them to you, so someone who gained access to both our database and our server settings could read them. Keep your most important credentials, such as your email, bank and primary accounts, in a dedicated password manager, and use a strong, unique password for Lyfe Synch.

We use these service providers to run the app. Each receives only what it needs for its job:

• Supabase: database, sign-in and file storage. Holds your account and everything you save.
• Vercel: hosts the website and app, and records standard request logs.
• Stripe: processes subscription payments and stores your payment details.
• Resend: sends account emails (such as sign-up confirmation and password reset) to your email address.
• Anthropic: the AI service described in section 4.
• Food and nutrition sources (USDA FoodData Central, Open Food Facts and Wikipedia/Wikimedia): receive the food name, search words or barcode you look up, to return nutrition details and reference photos. They do not receive your account.
• Frankfurter: provides currency exchange rates. It receives no personal information.
• Linked calendars: if you paste a Google, Apple or Outlook calendar link, our servers download that link on your behalf. The calendar provider sees a request from us for that link.
• Push notification services run by your browser or device maker: carry notifications to your device.
• Speech recognition built into your phone or browser (if you use voice input): your device's provider processes the audio under its own policy. We receive the resulting text.

We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger, sale or reorganization of the service (we would tell you and this policy would continue to apply unless you agreed to a change). Otherwise we share information only with your permission.

• Your username, display name and profile picture can be seen by other signed-in users, for example when they search for your username or you are in a group.
• Friends can see only what you choose to share with them (such as events you mark as shared, or sections you grant access to). You can turn sharing off or remove friends at any time.
• Messages and group posts are visible to the people in that conversation or group, who can copy or screenshot them.
• Health trackers (blood pressure, heart rate, glucose, fasting, body measurements) and your finances are never shared with friends.
• The private link for your calendar (Calendar sync) lets anyone who has it read your events and due tasks, so keep it private. You can reset it at any time to switch the old link off.

• Progress photos are private and are shown only to you through links that expire.
• Photos you attach to foods and profile pictures are stored in a location where each file has a long, hard-to-guess web address. Anyone who has the exact address could open that file, so do not attach photos you consider private.
• Photos you send to AI Scan are sent to the AI service for analysis (section 4).

We keep your information while your account is open. You can delete individual entries inside the app at any time. You can also delete your whole account yourself: in the app go to Settings → Delete my account, or visit lyfesynch.com/delete-account. It takes effect immediately, deletes your account and the data in it (including uploaded files and anything imported from Health Connect), and cancels any subscription so you are not charged again. If you cannot log in, contact us as described in section 17 and we will delete it for you.

A few things may remain for a limited time: payment records that Stripe keeps for tax and legal reasons, copies in our database provider's encrypted backups until they are overwritten (up to about 35 days), short-lived technical logs at our hosting provider, and anything we are legally required to keep. Disconnecting Health Connect stops syncing; readings already imported stay until you delete them or your account.

We use industry-standard safeguards: connections are encrypted with HTTPS, each person's data is separated by database access rules so one account cannot read another's, access to our systems is restricted, and our providers encrypt stored data. Even so, no method of transmission or storage is completely secure and we cannot guarantee absolute security. If a breach affects your information, we will notify you and the authorities as the law requires.

• Keep your password and your devices secure, use a strong unique password, and sign out of shared devices.
• Only enter information you are entitled to share, and do not put other people’s sensitive information into the app without their permission.
• Do not rely on the app as the only copy of anything critical. Keep your own backups of important records.

Depending on where you live (for example California, other US states, the United Kingdom or the European Economic Area), you may have the right to know what we hold about you, get a copy, correct it, delete it, object to or limit certain uses, and withdraw consent. You will not be treated differently for using these rights. To use them, contact us as described in section 17; we may need to confirm it is really you, and we will reply within the time the law requires (generally 30 to 45 days). You can also turn off notifications, disconnect Health Connect, remove friends and sharing, and delete entries yourself in the app. If you are in the EU or UK and are unhappy with our answer, you may complain to your local data protection authority.

We do not track you across other websites, and we do not respond to “Do Not Track” signals because we do not do that kind of tracking.

Lyfe Synch is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a younger person has created an account, contact us and we will delete it.

Our providers may process and store your information in the United States and other countries where they operate. By using the app you understand your information may be transferred to those countries, which may have different data protection laws from yours. We rely on our providers' safeguards for such transfers.

Use the Support form in Settings inside the app. Questions about this policy, data requests and deletion requests all go there.

Nothing in the app is medical, financial, tax, legal or professional advice, and AI output can contain mistakes. Please read the Terms of Service for the full disclaimers.

We may update this policy as the app changes. The date at the top will change, and for significant changes we will tell you in the app or by email. Using the app after a change means you accept the updated policy.