Privacy Policy

LifeCharted lets you record and organize your personal history (events, timelines, people, relationships, places, organizations, notes, and uploads) and view it in timeline-style visualizations. Your content is private by default and is shared only when you choose to share it.

A) Account and authentication data

• Email address and basic profile information you provide.
• Authentication data used to sign you in, including OAuth provider identifiers (for example, when you sign in with Google).
• Security-related data such as login timestamps and session identifiers.
• Birth month and year, collected at sign-up to verify you meet our 18+ age requirement and to improve era and timeline suggestions. If your 18th birthday falls within the current calendar month at the time of sign-up, we temporarily use your birth day for that one-time verification check — your birth day is not stored.

B) Life history content you provide

• Events and timelines you create (e.g., residences, jobs, schools, sports, travel, achievements).
• People and relationships you add (including information about living people if you choose to store it).
• Notes, descriptions, tags, and other metadata you attach to records.

C) Media and files

• Photos, documents, and other files you upload, stored using Supabase Storage.
• File metadata (file type, size, and upload timestamps).

D) Payments and subscription data

• Subscription status, plan, and billing events (e.g., renewals, cancellations).
• Payment processing is handled by Stripe. We receive limited billing metadata (customer ID, subscription ID, and payment status). We do not store full card numbers.

E) AI feature inputs and outputs

If you use optional AI features (quick-add events, “write my story”, CV/resume import, and similar), we process the content you submit and the outputs generated for you. AI processing is performed via the Claude API (Anthropic). Only the information you choose to send to these features is transmitted for processing.

F) Voice recordings (Voice Quick Add feature)

If you use the optional Voice Quick Add feature:

• Your browser will request microphone access. You can deny this permission at any time; doing so disables the feature.
• Your voice recording is transmitted over an encrypted connection to a speech-to-text service (Groq as primary; OpenAI Whisper as fallback if Groq is unavailable).
• The resulting text transcript is then sent to the Claude API (Anthropic) for life-event extraction.
• Audio recordings are not stored by us. The audio blob is streamed directly to the transcription service and discarded after the transcript is returned. Only the total seconds of voice recording used per billing cycle are retained for quota tracking.

G) Usage, device, and log data

• IP address, device/browser type, and approximate location derived from IP.
• App interactions (feature usage), performance data, and crash/error logs.
• Cookies or similar technologies used for authentication, security, and preferences.

H) Push notification tokens

If you use the LifeCharted mobile app and grant notification permission, your device's push notification token is collected and stored. This token is used solely to deliver in-app notifications to your device. Delivery is routed through Apple Push Notification service (APNs) on iOS or Google Firebase Cloud Messaging (FCM) on Android. You can revoke notification permission at any time in your device's system settings, which will stop further push notifications. Stored tokens are deleted when you delete your account.

• Provide, maintain, and secure the Service (accounts, data storage, syncing, access control).
• Generate and display your timelines and visualizations.
• Operate AI features you choose to use.
• Process subscriptions, manage billing, and handle customer support.
• Monitor for abuse, troubleshoot issues, and improve reliability and performance.

A) With service providers (subprocessors)

We rely on third parties to operate the Service:

• Supabase — database, authentication, and file storage.
• Stripe — subscription payments and billing.
• Anthropic (Claude API) — AI text processing (quick-add, story generation, CV import, and voice transcript extraction).
• Groq — voice-to-text transcription (Voice Quick Add feature).
• OpenAI (Whisper API) — voice-to-text transcription fallback, used only when Groq is unavailable.
• Resend — transactional and product notification email delivery.
• Apple (APNs) / Google (Firebase Cloud Messaging) — push notification delivery to mobile devices, used only if you have granted notification permission.
• Hosting, monitoring, and infrastructure providers used to run the Service.

We share only what is reasonably necessary for them to provide their services.

B) With other users (only if you enable sharing)

If you invite collaborators or enable sharing features, information is shared according to the permissions and scope you choose.

C) For legal, safety, and enforcement reasons

We may disclose information to comply with law, respond to lawful requests, enforce our Terms, or protect rights, safety, and security.

D) No sale of personal information

We do not sell your personal information.

Your LifeCharted content is private by default. Sharing requires an explicit action by you (for example, inviting someone or creating a shared view). Certain categories of information are especially sensitive (e.g., health, minors' data, exact addresses). We recommend keeping these private unless you have a clear reason to share them.

We retain your information for as long as your account is active or as needed to provide the Service. You can export and delete your data using the in-app tools. After deletion, we remove data from active systems and complete deletion from backups within a reasonable period (typically within 30–90 days, depending on backup cycles).

• Access and update: You can view and edit your records in the app.
• Export: You can export your data (e.g., JSON/CSV) via the export tool.
• Delete: You can delete individual items or your entire account via the delete tool.
• Product notification emails: LifeCharted sends optional product emails including “On This Day” (a monthly digest of life events from the same time of year) and “Weekly Reflect” (a weekly summary). These are enabled by default but you can opt out at any time via the unsubscribe link in any such email or by turning off email notifications in your profile settings. Transactional emails (account security, billing receipts) are not affected by this setting.
• Push notifications: You can disable push notifications at any time through your device's system settings.

We use reasonable administrative, technical, and organizational safeguards to protect information (e.g., encryption in transit, access controls, least-privilege practices, and monitoring). No method of transmission or storage is completely secure.

Text-based AI features (quick-add, story generation, CV/resume import) are optional. When you use them, your submitted text is transmitted to the Claude API (Anthropic) to generate outputs. AI outputs may be inaccurate or incomplete — review and edit before saving or sharing. Your use of AI features is also subject to Anthropic's usage policies.

Voice Quick Add is optional. When you use it:

• Your browser requests microphone permission. You can revoke this in your browser settings at any time.
• Audio is streamed to Groq (or OpenAI Whisper as a fallback) for transcription, then the transcript is sent to Claude (Anthropic) to extract life events.
• We do not store the raw audio recording. A count of seconds used is tracked per billing cycle for quota purposes and deleted when your account is deleted.
• Voice features are subject to Groq's, OpenAI's, and Anthropic's respective usage policies for the data processed by each service.

LifeCharted requires users to be at least 18 years of age. We verify this at account creation by collecting your birth month and year. If your 18th birthday falls within the current calendar month at the time of sign-up, we ask for your birth day as well — solely to complete that verification. Your birth day is used for this check only and is not stored. We retain only your birth month and year.

We do not knowingly collect personal information from anyone under 18. If you believe a person under 18 has created an account, please contact us at [email protected] and we will terminate the account and delete the associated data promptly.

If you access the Service from outside the United States, your information may be processed in the United States and other locations where our service providers operate. Depending on where you live, you may have additional rights under local privacy laws.

We may update this Privacy Policy from time to time. We will update the effective date and, if changes are material, provide notice in-app or by email.

Questions or requests about privacy: [email protected]