Privacy policy

Last updated 26 October 2026. Questions: info@lifephant.app

The short version: your documents and data are used to run Lifephant for you, and for nothing else. We don't sell them, don't use them for advertising, and don't use them to train AI models. You can export or delete everything at any time from Settings.

Who we are

Lifephant is operated by [Company legal name], [Registered address, country] ([Company ID / VAT number]), the controller of your personal data under the EU General Data Protection Regulation (GDPR).

What we collect and why

• What you give us: documents, photos, emails you forward, notes, people and dates you add, onboarding answers. Purpose: extracting commitments and dates, reminding you, answering your questions. Legal basis: performance of our contract with you (Art. 6(1)(b)).
• Account data: email address, plan, billing status. Basis: contract; for invoices, legal obligation (Art. 6(1)(c)).
• Product analytics: which features are used (for example "document confirmed"), never the contents of your documents. Basis: legitimate interest in improving the product (Art. 6(1)(f)). Text on screen is masked and session recording is off.

Documents can contain sensitive information about you or others (for example health insurance). Only upload what you're comfortable storing, and only data about other people you're entitled to share.

AI processing

To read documents and answer questions we send the relevant content to our AI provider (Anthropic) through its commercial API. Under its commercial terms, API data is not used to train models. Every AI suggestion is shown to you for confirmation before it is saved. AI never takes actions such as payments or cancellations.

Where data lives and who processes it

Your data is stored in the EU (Frankfurt). We use these processors under data processing agreements:

• Supabase: database and sign-in (EU region)
• Vercel: application hosting (EU region)
• Anthropic: AI document reading and chat. Transfers outside the EU are covered by Standard Contractual Clauses.
• Stripe: payments (we never see your card number)
• PostHog: product analytics (EU cloud)
• Resend: email delivery
• Apple, Google and RevenueCat: in-app purchases on mobile

How long we keep it

Uploaded originals are read and then deleted; we keep the extracted items and a short text excerpt as evidence. Your data stays until you delete it or close your account. Deleted data is removed from backups within 30 days. Billing records are kept as long as tax law requires.

Your rights

You can access, correct, export (Settings → Export) and delete (Settings → Delete my data) your data, object to processing based on legitimate interest, and complain to your data protection authority. Write to info@lifephant.app for anything else. We reply within 30 days.

Security

Encryption in transit (TLS) and at rest, row-level access control in the database, private calendar links you can choose not to share, and least-privilege access for our team.

Children

Lifephant is for adults (16+). Parents may store their children's dates (for example birthdays) as part of managing their household.

Changes

We'll email you before any material change to this policy.