🔏

Privacy Policy

Plain language first, legal language where required. Last updated: June 2026.

⚠️ Draft — Private Beta

This document is a working draft and may change before public launch. It is not yet a final legal text. LifeFolder is preparing privacy-first handling for users in the EU, India and the UAE — we won't claim full regulatory compliance until it is actually implemented and reviewed. Born in Bangalore. Built for the world.

The short version

✓ Your documents belong to you. We process them only to provide LifeFolder to you.
✓ Health data, emergency information and third-party contact details are encrypted at rest.
✓ AI analysis is optional, off-switchable, and never used to train models.
✓ We do not sell data. There is no advertising. There are no trackers on this site.
✓ You can export your data and delete your account at any time in Settings.

1. Controller

[OPERATOR NAME], [STREET], [CITY, COUNTRY] — contact: [EMAIL]. (To be completed before public launch.)

2. What we store

Account data (name, email, hashed password), the documents and metadata you upload, profiles you create for family members, reminders, life events, and a security log of account activity (sign-ins, downloads, shares — never document contents). Payment data is processed by Stripe; card details never reach our servers.

3. Encryption

All traffic is encrypted in transit (TLS). Health-related fields, emergency information, AI query logs and third-party email addresses are additionally encrypted at rest. Details: see our Security page.

4. AI processing

If you use AI features, the relevant file and your question are transmitted encrypted to our AI provider (Anthropic) to generate the answer, and are not used for model training. You can switch AI features off in Settings → AI & Privacy; LifeFolder then works with local suggestions only.

5. Your rights

Access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR). Export your data and delete your account directly in Settings, or contact us at [EMAIL]. You may lodge a complaint with your local supervisory authority.

6. Retention

Your data is kept while your account exists. Deleting your account removes your documents, profiles and metadata; security log entries are deleted after at most 12 months. Backups expire on a rolling basis.

7. Processors

Hosting provider [TBD], Stripe (payments, only when you buy), Anthropic (AI analysis, only when AI is enabled). We conclude data processing agreements with all processors before launch.