Privacy Policy

Who we are

LifeBase is provided by Jaylon Poole. Contact [email protected] for privacy, safety, support, and deletion questions.

Account and device information

We process your name, email address, account identifiers, authentication information, and device notification token to create and protect your account and deliver requested features. Passwords are handled by Supabase Auth. The app protects active credentials using the iOS Keychain.

Your content

Personal tasks, roles, goals, templates, and notes are stored in your account’s local device storage. Shared domains, memberships, invitations, tasks, messages, and in-app notifications are processed by our Supabase backend. Previously saved cloud documents and AI planning records remain associated with their owner until deleted. Shared content is visible to authorized members of its domain.

AI actions and service providers

When you choose to use the LifeBase organizing agent, your messages, selected domain identifier, permitted role names and identifiers, local date, and time zone are sent through LifeBase to OpenAI. Existing task and note contents are not sent unless you include them in your message. The agent produces answers, clarification questions, and drafts; this version cannot save those drafts as tasks or notes or send messages to other members.

Your agent conversations and edited drafts are stored in your private LifeBase account history. Domain members and administrators cannot access another user's agent history. OpenAI also maintains the corresponding agent session to support follow-up messages. Agent history is separate from domain member messages. You may delete individual agent conversations. LifeBase removes its stored conversation and queues deletion of the corresponding OpenAI session, retrying if the provider is temporarily unavailable. Account deletion also queues this cleanup. Provider security and legally required records may have separate retention rules. The agent's private-history label describes access by other LifeBase users; it does not mean your text stays only on your device.

When you explicitly confirm an agenda upload, the selected file is sent through LifeBase to OpenAI to generate an outline. LifeBase does not save the original uploaded agenda. Generated notes you save remain on your device. Existing AI writing and nutrition services process only content supplied to those actions; nutrition lookups may use USDA FoodData Central and official food sources. The existing single-action AI requests disable response storage; agent conversations use provider session storage for follow-up messages. OpenAI generally retains abuse-monitoring logs for up to 30 days, with exceptions for legal or security needs. Supabase provides authentication and cloud storage/database services; Resend delivers domain invitation emails. These providers process data to operate the requested features.

Messages and community safety

Messages are protected in transit and restricted by account and domain permissions; they are not end-to-end encrypted. LifeBase applies local server-side rules for abusive language and spam. Message text is not sent to an outside AI moderation service. Reports include the selected message and your reason/explanation, visible only to authorized LifeBase moderators. You can report messages, block members, and appeal moderation decisions through support.

Notifications and operational records

LifeBase schedules personal reminders locally and stores shared-domain notification content and device tokens on its backend. Service providers process technical request and security logs needed to operate and protect the service. We do not use advertising trackers, sell your information, or track you across other companies’ apps and websites.

Retention and deletion

Use Settings → Delete Account to permanently delete your cloud account, private cloud records, authored message text, and this device’s account data. Before deletion, transfer owned shared domains to a member who accepts ownership or explicitly choose to delete them. Sole-member domains are deleted with the account. Shared tasks in retained domains remain under Deleted member with your attribution and assignments removed. Associated invitation, notification, and report copies are cleaned up. Other members may have made independent copies that LifeBase cannot remove.

Safety records and backups

Report evidence and explanations are erased 90 days after resolution; deletion also erases the deleted account’s message text from report evidence. Minimal moderation action records and hashed deletion receipts are retained for accountability and reliable deletion retries without storing message text in those records. The current Supabase Free plan provides one day of API/database logs and no customer-accessible scheduled database backups. Resend’s standard retention for email content and delivery logs is 30 days. Provider security or legally required records may follow separate retention periods. LifeBase does not maintain separate database exports or backups. If a backup must be restored, completed deletions must be reapplied before normal access resumes.

Your choices

You can edit or delete content, manage notification and calendar permissions in iOS Settings, decline AI uploads, block members, and delete your account. Contact support for access or privacy requests involving records you cannot manage in the app. Keep the app installed until account deletion confirms completion so it can finish clearing local files.