Privacy Policy

How Lifelyze collects, uses, and protects your data. Your data lives in your own database and is never sold.

Your data is private, secure, and always yours.

Last updated: November 12, 2026

This Privacy Policy describes how Lifelyze collects, uses, and safeguards your personal information. We are committed to transparency - you can always reach us at hello@lifelyze.com with any questions.

1. Information We Collect

Account Information

Your email address and username, collected when you create an account. We do not collect sensitive data like SSNs or payment card numbers.

Usage Information

Basic metadata such as account creation time and last sign-in time. This helps us maintain the app and detect suspicious activity. To decide what to add to the shared food and exercise catalogs, we also keep anonymous counts: when a search in the food or exercise picker finds nothing, the search word may be added to a tally of how often it was tried, and a barcode that no nutrition database knows is counted in the shared barcode cache. These counts are not linked to your account, and words that look like an email address or a number are discarded. We may also learn that several different people created a custom ingredient or exercise with the same name, but only once at least five people have, and never who they are or what the item contains. The same rule covers the form animations we draw for custom exercises: the review that lets us fix a bad drawing shows an exercise's name only once at least five people share it, or when someone reported that drawing as wrong; every other drawing is reviewed without its name.

App Data

Calendar events, budget items, notes, reminders, health logs, meals, workout templates, workout logs, notifications, and settings you create. This data belongs to you and is stored in your private Firestore database. If you choose to share an item - with a friend in the app, by a public share link, or externally by text, email, or your device's share sheet - a copy of that item leaves your private database (see Information Sharing below). If you report a scanned barcode as the wrong product, your correction is saved to your account so your own scans of it use your version, and a report (the barcode, your corrected values and any note you add) is stored for our team to review the shared product entry. Reviewers see the report but not who sent it, and if you delete your account the reports you filed are kept without your account ID.

Messages & Coaching

When you message another Lifelyze user - 1:1, in a group chat, or as a Coach broadcast - the messages you send are stored so they can be delivered to the people in that conversation. If you become a Coach or join a Coach's plan as a member, we store the coaching relationship (who coaches whom, the plan tier, and the code used to join) so we can manage member Premium access and seats. If you join a Coach's plan, that Coach can see your PROGRESS so they can coach you: your food logging (calories, macros and how often you log), your workouts, training volume and steps, and your weigh-ins and weight trend. Two further categories - your body measurements and your progress photos - are OFF by default and are shared only if you switch them on yourself. Progress photos are never handed to a Coach as a link: each image is served through Lifelyze, which re-checks that the coaching relationship is still active and that you still have photo sharing switched on before every single image loads, so turning it off cuts their access rather than only hiding it. They can also keep a private note about you and send you routines or meal plans, which you can accept or decline. Your Coach can never see your notes, budget, calendar or reminders, can never change or delete anything in your account, and you can turn any of those three categories off at any time on your Coach page without affecting your Premium access. Coaches may also enable automated messages to their members and a weekly summary of their members' progress, sent to the Coach. You can report or block other users, and accounts that abuse messaging or the Coach program may be actioned. Messages and coaching data are never used for advertising and are never sold or shared with third parties.

Location & saved places (optional, off by default)

Lifelyze can optionally attach the place you were when you log a food item, so you can later review where you ate. Automatic capture is OFF by default and only turns on if you enable "Log where you ate" in Diet settings. Even then, Lifelyze never prompts you for location from the food log - it only uses location permission you already granted elsewhere in the app (for example when searching for a place or a gym), so if you have not granted it, nothing is captured. When enabled, the approximate coordinates plus a best-effort place name are stored on that food item in your private Firestore database; to work out the place name, the coordinates are sent to the same free OpenStreetMap-based lookup services the app's location search uses. You can also set a place YOURSELF on any logged item - by picking a saved place, using your current location, or simply typing a restaurant name - and a restaurant you name when using the Ask Claude, Ask Google, Menu or Live Plate flows is recorded as that meal's place. Separately, you can save your own places (for example Home or Work) and star favorites on the Places page; the name, address and coordinates you enter are stored in your private Firestore database and are only used to fill in location fields and label your logs. To offer your recent places, Lifelyze also keeps a short location history: the last 60 places you PICKED in a location field (a search result, your current location or a saved place), with when and how often you picked each. It records only places you chose yourself, never your movements, and is stored in your private Firestore database. You can pause it, remove any entry or clear it all from the Places page. Location is never tracked in the background, never used for advertising, and never sold or shared with third parties. You can turn automatic capture off at any time in Diet settings, revoke location permission in your device settings, delete any saved place or history entry, and clear or change the place recorded on any item.

Health Platform Data (Apple Health / Health Connect)

On iOS you can optionally connect Apple Health, and on Android you can optionally connect Health Connect (a Premium feature on both). With your permission, Lifelyze reads weight, workout, nutrition, step, heart (resting heart rate, heart rate, and heart rate variability) and sleep data that other apps and devices recorded into the platform health store, and writes your Lifelyze weight, calorie, and workout logs back to it. Step, heart and sleep data are read ONLY - Lifelyze never writes them, and never deletes anything from the platform health store. Because any wearable can write to the health store, this is also how data from a smart watch or ring reaches Lifelyze; we have no direct connection to those devices or their makers. Imported data is stored in your private Firestore database alongside your other app data. This health data is never used for advertising and is never sold or shared with third parties. You can disconnect in Settings at any time and revoke permissions in the iOS Health app or the Health Connect app.

Sleep estimates from iPhone motion (optional, off by default)

On iPhone you can optionally turn on "Estimate sleep from my iPhone" (a Premium feature) if you do not wear a sleep-tracking watch. Only then, and only after you allow Motion & Fitness access, Lifelyze reads the last seven days of your iPhone's motion activity (for example walking or stationary) and step counts from Apple's Core Motion framework, on your device, when you open the app. That motion data is processed on your iPhone and never leaves it: it is not uploaded, stored in our database, or sent to any third party. The only thing saved is the result - each night's estimated bedtime, wake time and duration - in your private Firestore database alongside your other sleep data, where it is labelled as an estimate. A night measured by a watch or recorded in Apple Health always replaces an estimate. You can confirm or change an estimated night, turn estimates off at any time in Settings, and revoke Motion & Fitness access in iOS Settings > Privacy & Security. Sleep that your iPhone itself records as time in bed (Apple's "Track Sleep with iPhone") reaches Lifelyze only through Apple Health, as described above.

Apple Calendar Data

On iPhone you can optionally connect the built-in Apple Calendar (a Premium feature). With your permission, Lifelyze reads events from your Apple Calendar and writes your Lifelyze events to it, keeping the two in sync both ways. This happens on your device through Apple's Calendar framework; your calendar events are stored in your private Firestore database alongside your other app data and are never used for advertising, sold, or shared with third parties. You can disconnect in the Calendar settings at any time and revoke permission in iOS Settings.

AI Analysis Data

Nothing is sent to an AI provider until you agree: the first time you use a feature that needs one (MyAI, AI food scanning, AI insights, AI exercise guides), the app asks for your permission and names who receives your data and what is sent. You can withdraw that permission at any time in Settings > Privacy > Allow AI processing; while it is off, no AI feature runs and no weekly AI report or AI digest email is prepared for you. When you use the cross-domain AI Insights (Patterns, Weekly Report) or an AI alert (an alert you describe in your own words, checked against the areas you pick), relevant data from those areas and the words you wrote are sent to Anthropic's Claude API. When you chat with MyAI, your messages, any photos or files (PDF, text, CSV or JSON) you attach and the organizer data the assistant looks up on your behalf (which, when you ask about it, can include health data you imported from Apple Health or Health Connect such as steps, heart and sleep, your saved places and your Life Character) may be sent to Anthropic's Claude API (Premium) or the Google Gemini API (free plan); the per-feature/tool-driven insights use the Google Gemini API. Progress photos are handled more strictly: MyAI can SHOW you your own progress photos in a reply on any plan (they are drawn on your device and never sent to an AI), and on Premium, only when your own message asks about your photos, up to two of them per message are downsized and sent to Anthropic's Claude API so the assistant can look at them for that answer. Photos are never sent to the Google Gemini API, are never sent because of anything other than your own request, and no extra copy is kept by Lifelyze. Files you attach to MyAI are sent only with your message (and its next follow-ups) to answer it; Lifelyze never stores their content - a saved chat keeps only each file's name, type and size so it can show where the file was - and nothing written inside a file is ever treated as a request to change your data. If you dictate a message, your device's own speech recognition turns your voice into text (Apple on iPhone, Google on Android, or your browser's speech service on the web, which in Chrome is Google). On iPhone it runs on the device where supported; otherwise Apple processes the audio under its terms. Lifelyze never records, receives or stores the audio - only the text you then choose to send. When you open the guide for a custom exercise of yours that the app has no animation for, the exercise's name (lowercased, with punctuation removed) and its equipment type are sent to Anthropic's Claude API to draw a form animation; the animation is kept in a shared library under that normalized name, never linked to your account, so anyone else with an exercise of the same name sees the same drawing (the name itself is never shown to them). Our team may see that normalized name when reviewing drawings people reported as wrong, never who made the exercise. Food photo analysis, nutrition label scanning, barcode scanning, and notification summaries use Groq. Secrets, tokens, and push keys are always redacted before any data is sent. Each AI provider processes your data to answer the request and may keep it for a limited period under its own terms, for example for abuse and safety monitoring.

2. How We Use Your Information

Providing and Improving Services

We use your information to deliver Lifelyze's features - calendar management, budget tracking, health tracking, notes, reminders, and AI insights - and to improve them over time.

Communication

We may contact you in response to support inquiries or to notify you of important changes to our services or this policy.

Analytics & Session Recording

We use PostHog for product analytics and session replay (recordings of in-app interactions) to understand how the app is used and to fix problems. Recordings capture screens, taps, and navigation - sensitive fields such as text you type and your budget/health numbers are masked and never recorded. PostHog processes this data on our behalf. You can opt out of analytics and recording anytime in Settings > Privacy.

3. Information Sharing

We do not sell, rent, or trade your personal information to third parties. We may share information only in the following cases:

Sharing You Initiate

When you share an item with a friend inside Lifelyze, a copy of that item is delivered to that friend's account so they can accept it. When you create a public share link, the item you chose (and a generated preview image) becomes accessible to anyone who has that link, even without an account, so they can view and add it - the link is unguessable and you can disable it at any time; we record who adds the item and show you that count. When you share an item externally - by text message, email, or your device's share sheet - the item's details and a generated image leave Lifelyze through the app or service you choose. External delivery is handled by your device and the third-party app you pick, not by us, and is subject to their terms and privacy practices.

Publishing to Discover

Discover is an optional public library. When you choose to publish a meal, meal plan, or workout to Discover, the item you selected (and any photo you attached) becomes visible to all Lifelyze users, who can copy it into their own accounts. You decide each time whether to publish with your username and profile photo or anonymously (listed only as "Community"); we always retain the author account internally for safety and moderation, but it is never shown when you post anonymously. You can unpublish an item at any time, and we may remove content that is reported as inappropriate. Do not publish anything you would not want to be public.

Service Providers

Firebase (Google Cloud) for authentication, database storage, and (for public share links) hosting the shared item's preview image. Anthropic's Claude for cross-domain AI insights, AI alerts (the alerts you describe in your own words), Premium MyAI chat and drawing form animations for custom exercises (only the normalized exercise name and equipment type are sent). Google Gemini for free-plan MyAI chat and tool-driven insights. Groq for food photo analysis, nutrition label scanning, barcode digit extraction, recipe generation, and notification summaries. Google Calendar API, the on-device Apple Calendar (Apple EventKit, iPhone two-way event sync), and the on-device health platform (Apple Health / HealthKit on iOS, Health Connect on Android) for optional integrations. Spotify and Apple Music for optional workout music playback control. The YouTube Data API for exercise tutorial search (only the exercise name is sent). Headlines and links from the public RSS feeds of news publishers that have given us permission to show them, for the optional News tile (our servers read each feed on a schedule into a shared cache; the topics you follow and any topic you type stay on our servers and are only matched against those cached headlines, so no publisher receives anything about you until you tap a headline, which opens on the publisher's own site). Open Food Facts and USDA FoodData Central for barcode nutrition lookups. When you scan a barcode Lifelyze has not looked up before, your device asks Open Food Facts for that product directly, so Open Food Facts receives the barcode number and your device's IP address (never your account details); the product data it returns is passed to our servers and kept in a shared cache, so the next scan of that product is answered without asking again. USDA FoodData Central is only ever asked by our servers. Product data from Open Food Facts is made available under the Open Database License (ODbL) v1.0 (opendatacommons.org/licenses/odbl/1-0); USDA FoodData Central data is in the public domain. Resend for transactional and notification emails (receives your email address and name). RevenueCat, together with the Apple App Store, Google Play, and RevenueCat Web Billing, for subscription billing and payment processing. PostHog for product analytics and session replay. OpenStreetMap Nominatim, Photon (Komoot) and the public OSRM routing service, plus Apple Maps on iPhone, for place search, address lookup and drive-time estimates (they receive the place text or coordinates you search or attach to an event). The Transitous public-transit router (transitous.org), for walking and public transport times between an event's activities (it receives only the two places' coordinates and the departure time). Open-Meteo, to look up the time zone of a place you attach to an event or activity (it receives only that place's approximate coordinates). Openverse and Wikimedia Commons for image search when you publish to Discover (they receive only the search words). Google's public favicon service, to show restaurant logos in the menu list (it receives only the restaurant's website address and your device's IP address, never your account details). If you connect the optional Claude connector (Model Context Protocol), Anthropic's Claude can read and edit the Lifelyze data you authorize (the consent screen lists every category, including imported sleep and heart data), scoped to your account. If you turn on notifications, your device's push address is stored with your account and our server sends notifications through your device or browser maker's push service (Apple Push Notification service, Google Firebase Cloud Messaging, or Mozilla Push); only the notification text is sent.

Legal Authorities

We may disclose your information to legal authorities or government agencies if required by law. Lifelyze is operated in the United States and is primarily subject to US law.

4. Security

Lifelyze uses Firebase Authentication and Firebase Firestore to secure your account and data. Your Firestore data is protected by security rules and encrypted at rest. If your information is ever compromised, we will notify you immediately and take action to resolve the issue.

5. Third-Party Links

Lifelyze may contain links to third-party websites. We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies before sharing any personal information.

6. Your Choices

Update Your Information

You may update your username at any time through your account settings. To change your email, contact us directly.

Delete Your Account

You can delete your account yourself at any time: open Lifelyze, go to Settings, and tap Delete account at the bottom of the page (it appears on every Settings tab, next to Sign out). This permanently removes your account and all associated data, including your calendar events, health and weight logs, meals, notes, reminders, budget items, photos, and messages. It is not a deactivation and it cannot be undone. If you cannot sign in, email hello@lifelyze.com from the address on the account and we will delete it for you.

7. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. Significant updates will be communicated through the application. Continued use of Lifelyze after changes constitutes your acceptance of the revised policy.

Questions about your privacy?

We're happy to help - reach out any time.