Privacy Policy

What We Collect

LyFeOS collects only the information you voluntarily provide through daily reflections, weekly intentions, and account settings. This includes:

• Email address (for authentication and encrypted session management)
• Daily vibe scores and text reflections
• Emotional sentiment tags
• Weekly intentions
• Voice recordings when you dictate (turned into text; LyFeOS never stores audio)
• At each new sign-in: the time, IP address, browser or app, device type and approximate location (for security notices)

How We Use Your Data & AI

Your data is used only to run LyFeOS for you: your reflections, intelligence reports, open loops and intention check-ins. We never sell your personal information or use it for advertising.

AI only with your permission. Some features are made by outside services, and LyFeOS asks before using them. After you first sign in, a screen explains what is shared and offers Allow AI or Not now; you can change your answer anytime in Settings → AI. With AI off, journaling, the breath, the Vault and the Timeline work as usual, and nothing is sent to these services.

With AI on: to write your weekly and Telescope reports, run AI search, notice open loops and check in on your intentions, LyFeOS sends the text of your reflections and intentions to a trusted outside AI service. When you dictate, your recording is sent to an outside speech service, which turns it into text.

These services process your words only to return your result, and their terms do not allow them to use your words to train their AI models. Reports made overnight are sent as one batch and stay with the AI service until LyFeOS collects them, usually within a few hours; LyFeOS then deletes the batch. The AI service may keep a record of requests for up to 55 days, only to detect misuse of its service.

Data Storage & Authenticated Encryption at Rest

All personal reflections, learnings, vault entries, and thoughts are encrypted at rest using military-grade AES-256-GCM authenticated encryption before being written to our database. In the database, your content appears as unreadable cryptographic ciphertext with authentication tags.

Row Level Security (RLS) is strictly enforced in PostgreSQL so only your authenticated session can access your records.

Client-Side Protection & Instant Panic Lock ('L')

To protect your privacy in shared physical spaces (airports, offices, public venues), LyFeOS features an Instant Panic Lock. Pressing the single key 'L' instantly locks your session, clears decrypted data from client memory and viewport, and enforces PIN/session re-authentication.

Voice Dictation

Dictation is available when AI is on. Your recording is sent to the outside speech service only to turn it into text, and the text is placed in your entry. LyFeOS never stores your audio, and the speech service keeps each recording only until the text is back.

Who Else Processes Your Data

Besides the AI and speech services above (only with your permission), LyFeOS relies on a cloud database, and a hosting and email provider, to store your encrypted data, run the app and send its emails. They process data only on our behalf.

Sign-In Security Notices

Whenever your account is signed in to afresh, we email your registered address a short security notice with the time, browser or app, device type, approximate location and IP address of that sign-in, so you can spot one that wasn't you and sign out every other device from Settings. Because it protects your account, this notice is sent even when other LyFeOS emails are paused or unsubscribed.

An IP location service estimates the approximate location of a sign-in for security notices. These sign-in details are encrypted at rest, used only for the notice, and deleted after 90 days.

This product includes GeoLite Data created by MaxMind, available from https://www.maxmind.com.

Account Deletion

You may permanently delete your account at any time from Settings. This action is irreversible and results in the complete, permanent deletion of all your data — reflections, intentions, intelligence reports, and settings. We retain nothing.

Cookies

LyFeOS uses only essential authentication cookies to maintain your login session. We do not use analytics cookies, tracking pixels, or any third-party advertising tools.

Contact

For privacy inquiries, contact connect@lyfeos.in