LifeFactLifeFact Privacy Policy Effective [DATE]
1. Who we are
LifeFact turns your email history into the statistics of your life: trips, tickets, learning, spending and habits. The data controller is [ENTITY_INTL], [ADDRESS] (for users in the Russia region: [ENTITY_RU], [ADDRESS]).
Contact: [EMAIL_PRIVACY].
2. In short
- Mail access is read-only. We cannot send, delete or change your email.
- We do not store email texts. An email is processed in memory and discarded as soon as events are extracted. We keep only the events found and the numbers calculated.
- We do not analyse personal correspondence. It is detected automatically from technical signals before any AI processing.
- Health and donation data stay hidden until you turn them on, and never appear on share cards.
- We do not sell data, show ads, track you, or train AI models on your email.
3. Data we process
| Data | Source | Purpose |
|---|---|---|
| Account email, Apple or Google identifier | Sign-in | Account, sign-in, support |
| Connected mailbox address; access token or app password (encrypted) | Connecting email | Syncing your email |
| Email metadata: provider message ID, date, sender domain and hash, subject (encrypted), email type | Your mailbox | Linking events to source emails, avoiding reprocessing, showing where a number comes from |
| Extracted events: type (flight, hotel, ticket, purchase, course, subscription…), dates, amounts and currencies, places and cities, names of businesses, events and courses, order items, names of fellow travellers on a booking | Transactional emails | Statistics, dashboards, the facts feed |
| Doctor visits (date, provider, visit type) and donations | Your mailbox | Hidden by default, shown only after you opt in. Diagnoses, prescriptions and test results are never extracted |
| Your corrections, settings and share cards | You | Fixing statistics, sharing |
| Feed impressions and actions | The app | Not showing the same fact twice |
| Subscription details (status, period, transaction ID) | Apple, payment provider | Access to paid features |
We do not collect device location, contacts, photos (the app only saves a card to Photos when you ask), advertising identifiers or card numbers. Card numbers and passport data are masked before processing.
For personal emails we keep only an ID, date and hash, so we do not process them again. Subject and sender are not stored.
4. How email processing works
- Our server lists your emails and their technical headers.
- Newsletters, notifications and personal correspondence are filtered out without being read by a model.
- Transactional emails (receipts, tickets, bookings) are loaded into memory. Some are parsed by deterministic rules. The rest are sent to an AI model (Section 6) that extracts event fields.
- All numbers (amounts, durations, counts) are calculated by code, not by AI.
- The email text is discarded; only the extracted fields are kept.
- When you tap "Show email", we fetch it from your mail provider and display it without storing it.
5. Legal bases
- Contract (Terms of Use): email analysis, statistics, sync, subscription.
- Consent: AI processing of email text (a dedicated screen before the first analysis); showing sensitive categories.
- Legitimate interests: minimal processing of third parties' data that appears in your email (names on bookings, senders), without drawing conclusions about them.
- Legal obligation: accounting, tax, lawful requests.
6. Who we share data with (processors)
Processors act on our instructions under data processing agreements.
| Processor | What | Where |
|---|---|---|
| Cloud hosting: [CLOUD_INTL] for the EU; [CLOUD_RU] for Russia | All stored data | By account region |
| OpenRouter, Inc. — gateway to AI models, and Anthropic, PBC — the Claude model that extracts event fields | Text of transactional emails (receipts, tickets, bookings), without personal correspondence and with card numbers masked, only for the duration of extraction | USA. Data is not used to train models. We do not store email bodies (Section 4). Transfers under SCCs / DPF |
| Apple | Subscription data, Sign in with Apple | Per Apple's terms |
| [PAYMENT_PROVIDER] (web payments) | Payment data | By region |
| Mail providers (Google, Yandex, VK/Mail.ru, your IMAP server) | Read requests on your behalf | — |
| Sign-in code email delivery | Your email address | — |
We never sell or rent data or share it with ad networks or data brokers.
7. Google user data (Gmail)
LifeFact's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. This means:
- Gmail data is used only for user-facing features of LifeFact;
- it is not transferred to others except the processors in Section 6 needed for those features;
- it is never used for advertising or to train generalised AI/ML models;
- no person reads your email unless you explicitly send us a specific email with "Send this email to developers".
8. Sharing
Share cards are created only by you, after a preview. By default they exclude:
- store and venue names;
- addresses;
- booking numbers;
- trip dates;
- sensitive categories.
Private cards are kept for 24 hours. A public link exists only if you create one, lasts 30 days (renewable) and can be revoked with one tap.
9. Retention
| Data | Period |
|---|---|
| Email texts | Not stored; held in memory only during extraction |
| Events, metrics, corrections | While your account exists, or until you disconnect a mailbox and choose to delete its data |
| Disconnecting a mailbox | You choose "Disconnect and delete data" or "Disconnect, keep data" |
| Account deletion | All data deleted within 24 hours; access tokens revoked at providers; backups overwritten within 30 days |
| Payment records | As required by tax law |
10. Security
- TLS 1.2+ in transit.
- Mail tokens and app passwords are encrypted, with keys in a KMS.
- Per-user isolation in the database.
- Email texts are never written to logs.
- Staff access to production data only via audited break-glass procedure.
- Annual CASA security assessment (for Gmail).
11. Where data is stored
- Russia region: on servers in Russia.
- Everyone else: in the EU.
International transfers occur only to processors in Section 6, under appropriate safeguards (SCCs, Data Privacy Framework where applicable).
12. Your rights
You can:
- access and export your data (JSON);
- correct it in the app;
- delete data or your account in Settings;
- withdraw AI-processing consent (analysis of new email stops);
- object to interest profiling;
- complain to your supervisory authority.
California residents: we do not sell or share personal information as defined by the CCPA/CPRA.
Requests: [EMAIL_PRIVACY]; we respond within 30 days.
You can also revoke mail access at the provider: Google — myaccount.google.com/permissions; Yandex — id.yandex.ru; IMAP — delete the app password.
13. Children
LifeFact is not intended for anyone under [16] .
14. Changes
We will notify you in the app at least 14 days before material changes. The effective date is shown at the top.