Lifetime Privacy Policy

Updated 8 October 2026.

Who we are

Lifetime is an iOS and macOS application. The provider of Lifetime ("we", "us") is the data controller for the personal data described in this policy and is established in the United Kingdom. Contact us at email@bogdans.website.

Scope

This policy describes the personal data we process when you use Lifetime, the purposes and legal bases for that processing, who receives the data, how long it is kept, and the rights available to you.

Data held in your Apple account

Lifetime reads and writes the following through Apple's frameworks, under your own Apple account:

  • Calendar events and reminders, in Apple's Calendar and Reminders databases.
  • Journal entries and application data, in your private iCloud database and in local device storage.
  • Sleep sessions and workouts, read from Apple Health with your permission.

This data is stored by Apple and syncs between your devices under your Apple account. We are neither controller nor processor of it, and it is not transmitted to our servers except as described under "Plus subscription" below.

Health data is used only to show your sleep and workouts on your timeline and, if you turn on "Include Sleep and Workouts", to let the AI assistant you connect answer you about your sleep and exercise. It is not used for advertising, and it is not sold.

Plus subscription

Lifetime offers one paid subscription, Plus. Each of its features below sends data to our server only after you confirm what it sends.

Tag suggestions

To suggest tags for an entry, Lifetime sends the entry's title and notes, your tag names and how often you use them to our server, which forwards them to OpenAI. The title can be the title of an event you focused on.

Our server does not store the tag request or its reply, and does not record them in logs. OpenAI may retain them for up to 30 days to operate its service and to investigate abuse. Under OpenAI's API terms they are not used to train its models.

Our server counts the tag suggestions each subscription requests per day.

Your journal in your AI assistant

If you tap "Connect to Claude" or "Connect to ChatGPT" and confirm, our server keeps a copy of your journal, so that the AI assistant you connect can read and change it. For each connected iCloud account, the copy holds:

  • The start and end time, title, notes, tags and source of each journal entry, and the time of its last change. The title can be the title of an event you focused on.
  • Deleted entries, with their start and end times but without their titles, notes and tags, so that every device deletes them too.
  • Your time zone, the names of the calendars Lifetime shows, your wake and sleep times, and the time of the last sync.
  • The end date of your Plus subscription. While it is past, your assistant cannot read or change the copy.
  • If you turn on "Include Sleep and Workouts": the sleep sessions and workouts from your devices that have them, with their times and type, and the time they were last sent. Sleep stages, heart rate, energy and distance stay on your device.

Every device signed in to your iCloud account syncs with the copy while Lifetime is open on it. Changes that your assistant makes to the copy are applied to your journal on each device.

Your assistant is Claude, made by Anthropic, or ChatGPT, made by OpenAI, or both. It reaches the copy through a private link that your device makes. You can reset the link or disconnect at any time. The terms and privacy policy of your assistant's maker govern what your assistant keeps of what it reads.

Usage and crash data

Lifetime sends crash reports and usage data to help us improve the app. This data never includes your calendar, journal or health data, and it is not linked to you. PostHog stores it for us in the European Union. You can turn it off at any time in Settings > Privacy.

Identifiers

Lifetime has no user account and no login. Our server knows your copy and your subscription only by pseudonymous identifiers that are specific to Lifetime. They contain no name, email address or profile, and we cannot link them to you.

Purchases are processed by Apple. Our server checks your subscription with Apple and keeps its end date. We do not receive your payment card details, billing address or Apple Account details.

Purposes and legal bases

  • Verifying your subscription, suggesting tags, and keeping and syncing the copy of your journal: performance of our contract with you, GDPR Article 6(1)(b).
  • Counting tag suggestions per subscription: our legitimate interest in preventing abuse and controlling the cost of the service, Article 6(1)(f).
  • Usage and crash data: our legitimate interest in fixing faults and improving the app, Article 6(1)(f).
  • Journal titles and notes can reveal information about your health. We process them only on your explicit consent, Article 9(2)(a): for tag suggestions, which you give when you allow them, and for the copy of your journal, which you give when you connect each assistant.
  • Sleep and workout data is special category data under Article 9. We send it to our server and make it available to your assistant only on your explicit consent, Article 9(2)(a), which you give when you turn on "Include Sleep and Workouts".

You may withdraw your consent at any time on the Plus page in Settings: turn off Suggest Tags Automatically, turn off Include Sleep and Workouts, or tap Delete Synced Data. Delete Synced Data disconnects both assistants. With Suggest Tags Automatically off, Lifetime sends titles and notes for tag suggestions only when you tap the suggest button.

Recipients

  • Supabase, our processor, which hosts our server and stores the copy of your journal in Ireland.
  • OpenAI, for tag suggestions.
  • PostHog, our processor, which stores usage and crash data in the European Union.
  • Anthropic, when you connect Claude. Claude reads and changes the copy through the link that you add to it.
  • OpenAI, when you connect ChatGPT. ChatGPT reads and changes the copy through the link that you add to it.
  • Apple, for App Store purchase processing and for storage and syncing of the data held in your own Apple account.

We do not sell personal data and we do not share it for advertising purposes.

International transfers

Supabase stores the copy of your journal in Ireland, and PostHog stores usage and crash data in the European Union. UK adequacy regulations cover both. OpenAI processes tag suggestions in the United States. Where a provider transfers data outside the UK and the EEA, the transfer is made under the European Commission's standard contractual clauses and the UK international data transfer addendum, as incorporated into our agreements with each provider.

Retention and deletion

  • The copy of your journal, with its deleted entries and its sleep and workout data: until you tap Delete Synced Data on any of your devices, or 180 days after the last sync, whichever comes first. Delete All Data on the Data page also deletes the copy.
  • Sleep and workout data: deleted from our server when you turn off Include Sleep and Workouts on any device.
  • The private link: Reset Link ends it at once and makes a new one. Delete Synced Data ends it for good.
  • Request logs, with IP addresses: up to 7 days.
  • Tag suggestion counts: deleted after 3 days.
  • Tag suggestion requests: retained by OpenAI for up to 30 days, then deleted.
  • Usage and crash data: up to 1 year.

Security

The copy of your journal is encrypted in transit and at rest. No one at Lifetime reads it.

Advertising, tracking and automated decision-making

Lifetime shows no ads and does not track you across other companies' apps or websites. We do not carry out automated decision-making that produces legal effects concerning you or similarly significantly affects you.

Your rights

Under the GDPR and the UK GDPR you have the right of access, and the rights to rectification, erasure, restriction of processing, data portability and objection, as well as the right to withdraw consent at any time. To exercise any of these rights, contact us at email@bogdans.website.

Because Lifetime has no account, we cannot identify you from your name or email address. You can delete the copy of your journal yourself at any time with Delete Synced Data. For any other request, contact us and we will explain how to find your records.

You may lodge a complaint with your national supervisory authority, or with the Information Commissioner's Office (ico.org.uk), the United Kingdom's supervisory authority.

Children

Lifetime is not directed at children under 16, and we do not knowingly process their personal data.

Changes

The current version of this policy is published with the date on which it took effect. We notify material changes in the application.

Contact

email@bogdans.website