This policy explains what data LifeOS collects, why, and how you can control it. LifeOS is a personal management app (tasks, objectives, planning, journal, identities, habits). By its very nature it handles information that can be sensitive (mood, personal reflections, routines). We take that seriously.
This document was written to describe how the product actually works. It is not legal advice: a review by a legal professional is still recommended before publication. It is a translation of the French original, which remains the reference version.
1. Who is responsible for your data
Service publisher: Théo Cannac, sole trader operating under the business name “Cannac Communication”, SIRET 828 140 160 00015, 36 rue des Fontenelles, 92310 Sèvres, France.
Privacy contact: theocannacpro@gmail.com.
2. The data we collect
- Account: email address and password (the password is never stored in clear text; it is handled by our authentication provider).
- Content you create: tasks, objectives, projects, planner slots, War Map entries, journal, identities and their associated proof, habits, focus sessions, daily and weekly reports.
- Billing: if you subscribe to a paid plan, payment details (card number and so on) are handled directly by Stripe, our payment provider; we neither receive nor store them. We keep only your Stripe customer identifier and the plan you subscribed to.
- Notifications: if you turn on push notifications, your browser sends us a push subscription identifier (no additional personal data).
- Feature requests: the title, detail and votes you post on the roadmap. This content is VISIBLE to other signed-in people, because the roadmap is shared and voting would make no sense otherwise. Do not write there what you do not want seen. You can remove a request you posted at any time.
- API keys: if you create one, we keep its fingerprint (never the key itself), its name, its visible prefix and the date it was last used. A key reads all of your account data: treat it as a password and revoke it if in doubt.
- Technical data: session cookies required to sign in, and appearance preferences (theme, style).
3. Why we use it
Only to run the service you are using: displaying and syncing your content, computing your statistics and streaks, sending you the notifications you turned on, and managing your subscription.
We do not sell any data and we run no targeted advertising.
4. Who we share it with
Only with the providers strictly necessary to run the service:
- Supabase: database hosting and authentication.
- Stripe: payment processing for paid plans.
- Vercel: application hosting, to serve the site and the API.
5. How long we keep it
For as long as your account exists. A deleted task stays recoverable from the Trash until it is permanently deleted. If you delete your account, all your data is erased within the timeframes described in section 7.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data.
- Access and portability: Settings → Data lets you export all of your content (JSON, CSV, PDF) at any time.
- Rectification: directly from the app, on every item.
- Erasure: Settings → Data lets you delete your tasks or your entire account; see section 7.
For any other request, write to us at the address given in section 1.
7. Deleting your account
Settings → Account offers permanent deletion of your account: after confirmation, all of your data (tasks, objectives, journal, identities, habits, planner, statistics, subscription) is permanently erased, along with your authentication account. This cannot be undone.
8. Security
Traffic is encrypted (HTTPS). Access to your data in the database is restricted by row-level security rules: nobody other than you can read or modify your content through the app.
9. Cookies
LifeOS uses cookies strictly necessary to run the service (keeping you signed in). One further cookie, an advertising one, may be set by Meta (Facebook) to measure which ads bring visitors here: it is set ONLY if you accept it in the banner, never before, and refusing changes nothing about the site. Meta then acts as a joint controller and may match this visit with your Facebook or Instagram account if you have one. No audience measurement.
10. Changes
If this policy changes substantially, you will be told in the app before the changes take effect.