Language: English · 中文
Privacy Policy
Last updated: July 29, 2026
This policy describes how LifeVector handles personal data for users outside mainland China. It is written for our current App Store storefronts listed below. It is not legal advice and does not create compliance obligations under mainland China law.
LifeVector ("the app", "we", "us", or "our") is provided by an individual independent developer (a natural person operating under the LifeVector / HumanPlan brand — not a company, corporation, or other registered legal entity). This Privacy Policy explains what information we collect, how we use it, with whom it is shared, how long we keep it, and the choices available to you.
By creating an account or using the app, you acknowledge this Policy. Related documents: Terms of Service and AI Disclosure.
Privacy requests: support@lifevector.net.
1. Who Is Responsible
For privacy purposes, that individual developer is the data controller (or equivalent under applicable law) for personal data processed to provide the app and related backend services. Contact: support@lifevector.net.
Apple Inc. and its affiliates process App Store account, billing, HealthKit / system permission frameworks, and related platform data under Apple’s own terms and policies. Third-party processors we use are described in Section 5.
2. Scope and Geographic Availability
- This Policy applies to the LifeVector iOS app and the backend services we operate to support it (authentication assistance, AI proxy, profile sync, subscription verification, product metrics, and related APIs).
- LifeVector is intended for users outside mainland China. We do not currently offer the app for distribution or public use in mainland China.
- Current App Store storefronts (v1): United States, Canada, Australia, New Zealand, Japan, South Korea, Singapore, Malaysia, Hong Kong, Taiwan, Macao, and South Africa. We may add or remove storefronts over time. We do not currently distribute on EU storefronts (GDPR / DSA deferred) or the United Kingdom storefront.
- If you access the service while traveling outside these storefronts, this Policy still describes our practices; mandatory local consumer or privacy rights may still protect you.
3. Information We Collect
We collect only what is needed to run LifeVector. Categories below include data you provide, data created through use of the app, and data generated with your permission on device.
3.1 Account and identity
- Sign-in identifiers from Sign in with Apple and/or email authentication (via Firebase Authentication), Firebase user ID, and optional email address or display name / nickname.
- We do not require a public social profile. Apple may provide a private relay email if you choose Hide My Email.
3.2 App content you create
- On device (SwiftData): goals, milestones, tasks, subtasks, focus sessions, streaks, achievements, templates / dimensions, weekly review inputs, AI chat history kept in the app, optional avatar (system icon or image you choose), and related progress data.
- Server profile snapshot (when signed in): we may upload a snapshot so you can restore progress across devices or reinstalls. The snapshot typically includes nickname, onboarding / preference fields (for example ultimate goal text and pain-point text you entered), dimension progress, goals, tasks, and sync metadata. We do not currently include custom avatar image bytes in the server snapshot (avatar images remain on device unless a future version discloses otherwise).
- We do not use CloudKit / iCloud database sync for your LifeVector store.
3.3 AI conversations
- Messages you send to the AI coach and model replies, used to generate suggestions during your session and to enforce safety / rate limits.
- Requests are sent through our self-hosted proxy to third-party model providers. See the AI Disclosure.
3.4 Health data (optional — Apple Health / HealthKit)
- Only with your explicit HealthKit permission, we may read sleep duration, step count, workout duration, mindfulness minutes, and active energy.
- Uses: estimate today’s intensity (light / steady / deep), surface energy-aware suggestions, and award Health-dimension XP.
- When you use AI features with HealthKit enabled, limited health summaries (for example sleep hours or steps) may be included in the prompt so suggestions can adapt to your current state.
- We do not use HealthKit data for advertising, data brokers, or sale. You can revoke access in iOS Settings → Privacy & Security → Health. Core planning features remain usable without HealthKit.
3.5 Calendar data (optional — EventKit)
- With your permission, we may read calendar events to estimate today’s busy minutes, free windows, and schedule load, and to show event previews inside the Plan calendar.
- We do not create, modify, or delete calendar events. Calendar contents are processed primarily on device; we do not sell calendar data.
3.6 Reminders and external imports (optional)
- With your permission, we may read incomplete Apple Reminders so you can import them as tasks. We do not modify or delete system reminders.
- If you paste text or import from supported external sources, the content you choose to import becomes part of your app content (Section 3.2).
3.7 Camera / photos (optional)
- Camera or photo library access is used only if you choose to set a custom avatar. We do not access your camera or library in the background.
3.8 Local notifications (optional)
- With your permission, we may schedule local notifications on your device (for example daily reminders, task reminders, evening shutdown, or AI-care nudges).
- These notifications are generated on device. We do not sell notification content. You can revoke notification permission in iOS Settings.
3.9 Subscription and purchase data
- Apple subscription status, product identifiers, original transaction ID, app account token, and related entitlement data used to verify Pro access, restore purchases, prevent fraud, and provide support.
- Payments are processed by Apple. We do not receive your full payment card number.
3.10 Product analytics and diagnostics
- We collect event-based product metrics needed to operate and improve the app (for example onboarding steps, feature usage, focus sessions started/completed, paywall / subscription funnel steps, retention markers, activation events, AI-care signals, and similar product events).
- Typical fields: event name, UTC day, locale / language, app version, platform (iOS), coarse market cluster / country code derived from device locale settings (not continuous GPS tracking), entry point, and optional non-sensitive payload fields tied to the event.
- We may also receive anonymized or pseudonymized crash / stability signals and security events (such as request ID, user ID, model, status, and IP address on our proxy audit logs).
- Authentication / security systems (for example Firebase Authentication) may process device or installation identifiers as needed to secure sessions. We do not use App Tracking Transparency / IDFA for cross-app advertising.
- These metrics are not used to build advertising profiles and are not sold to advertisers.
3.11 Device and technical data
- IP address (seen by our servers / proxy), approximate region inferred from network or locale settings, timestamps, and request metadata needed for authentication, rate limiting, abuse prevention, and debugging.
3.12 Information we do not seek
- We do not ask for government ID numbers, precise continuous GPS tracking, contacts lists, or microphone access for the core product.
- We do not use third-party advertising SDKs for cross-context behavioral advertising inside the app.
4. How We Use Information
- Provide, maintain, and secure core features (planning, goals, focus, gamified progress, account sync).
- Generate personalized AI coach replies, plans, weekly reviews, and energy-aware suggestions.
- Schedule optional local reminders you enable.
- Verify subscriptions, enforce free-tier quotas, and prevent fraud, abuse, and security threats.
- Measure product performance with aggregated or event-level analytics and improve reliability.
- Respond to support requests and comply with legal obligations.
We do not use your personal content (goals, tasks, chat, health summaries) to train our own foundation models. Third-party model providers process prompts solely to generate a reply under their terms; we configure our integration to avoid using your content to train those providers where the provider offers that control. See the AI Disclosure.
5. How We Share Information (Processors and Recipients)
We do not sell your personal information. We do not share personal information with advertising networks for cross-context behavioral advertising. We share data only as needed to operate the service:
- Apple: Sign in with Apple, App Store billing / StoreKit, HealthKit / EventKit / notification permission frameworks, and related Apple services under Apple’s policies.
- Google Firebase Authentication: account authentication and session tokens when Firebase is configured.
- Hosting / infrastructure: our API and legal pages are hosted on cloud infrastructure (currently including Railway-hosted services). Hosting providers process technical data incidental to running servers.
- AI model providers: depending on availability and tier, providers may include OpenAI, DeepSeek, and Meta Llama models hosted via Groq / Together or similar compatible providers. We send conversation content and limited context needed for a reply; we do not intentionally send your Apple ID password or raw payment card data.
- Legal / safety: we may disclose information if required by law, valid legal process, or to protect users, the public, or the service from fraud, security, or imminent harm.
- Transfer of the service: if the individual operator sells or transfers the LifeVector service or related assets, personal data may transfer as part of that transaction subject to continued confidentiality commitments and notice where required.
6. Legal Bases (where a lawful-basis regime applies)
Where a law such as UK GDPR (if applicable to you) or a similar regime applies, we rely on one or more of the following bases:
- Contract: to provide the app features you request (account, sync, AI replies, subscription verification).
- Legitimate interests: to secure the service, prevent abuse, debug failures, and understand product usage in a privacy-respecting way.
- Consent: for optional permissions such as HealthKit, calendars, reminders, camera / photos, and notifications where consent is required.
- Legal obligation: when we must retain or disclose information to comply with law.
You may withdraw consent for optional permissions in iOS Settings without affecting processing that is still necessary to provide the core service you choose to use.
7. International Transfers
Our servers and third-party processors may be located outside your country of residence (including the United States and other regions). Where required, we rely on appropriate safeguards such as Standard Contractual Clauses, provider contractual commitments, and technical measures (encryption in transit, access controls).
8. Data Retention
| Category |
Typical retention |
| Account & synced profile snapshots |
While your account is active; deleted or de-identified when you delete your account, except limited residual copies needed for security, fraud prevention, dispute resolution, or legal compliance (usually short-lived backups). |
| AI proxy audit logs |
Only as reasonably necessary for security, debugging, quota enforcement, and operations (typically shorter than account content; commonly up to ~90 days unless an investigation requires longer). |
| Product metrics |
Kept in identifiable or pseudonymous form only as long as needed for product analytics (commonly up to ~24 months), then aggregated or deleted. |
| Subscription / App Store records |
As needed to verify entitlements and as required by Apple transaction records and applicable tax / accounting rules. |
| On-device data |
Remains on your device until you delete content, delete your account (which clears local session data we control in-app), or uninstall the app. |
When you delete your account from Settings → Delete account, we: (1) delete the remote profile snapshot under our control; (2) delete or sign out the Firebase Authentication account where configured; and (3) wipe local LifeVector account data on the device. Residual items that may remain include Apple’s own App Store transaction records, short-lived security / audit logs, and aggregated metrics that no longer identify you. Deleting your LifeVector account does not cancel an Apple subscription — cancel in iOS Settings → Apple ID → Subscriptions.
9. Your Rights and Choices
- Access & correction: view and edit much of your data inside the app.
- Portability: email support@lifevector.net to request an export of personal data under our control. We aim to provide a machine-readable copy of your server-side profile snapshot and account identifiers where available.
- Delete: Settings → Delete account. Deletion is permanent for data under our control, subject to the retention exceptions above.
- Permissions: revoke Health, Calendars, Reminders, Camera, Photos, and Notifications in iOS Settings.
- AI history: clear chat history in the AI coach; stop using AI features at any time.
- Marketing: we do not run third-party ad networks inside the app. Transactional / product emails (for example verification) may still be sent when you use email sign-in.
9.1 United States — California (CCPA/CPRA) and similar state laws
Notice at collection. We collect the categories in Section 3 for the purposes in Section 4. In the prior 12 months we have disclosed personal information only to service providers / processors listed in Section 5 for business purposes (operating the app), not for cross-context behavioral advertising.
- You may have the right to know, access, correct, delete, and opt out of “sale” or certain “sharing” of personal information.
- We do not sell personal information and we do not share personal information for cross-context behavioral advertising. Because we do not sell or share in that sense, we do not currently operate a “Do Not Sell or Share My Personal Information” cookie banner; email us if you still wish to record an opt-out preference.
- We do not use or disclose sensitive personal information (such as HealthKit data) for purposes other than providing the features you request, short-term transient use, security, or other purposes permitted by law. You may limit sensitive PI by revoking HealthKit access in iOS Settings.
- We do not knowingly sell or share personal information of consumers under 16.
- To exercise rights, email support@lifevector.net. We will not discriminate against you for exercising privacy rights. We may need to verify your request (for example by confirming control of the email or Sign in with Apple identity linked to the account).
9.2 Canada, Australia, and New Zealand
If PIPEDA (Canada), the Australian Privacy Act / Australian Privacy Principles, New Zealand Privacy Act, or similar rules apply, you may have rights to access and correct personal information and to complain to your local privacy regulator. Email us first so we can help.
9.3 Japan, Korea, Singapore, Malaysia, Hong Kong, Taiwan, Macao
If APPI (Japan), PIPA (Korea), PDPA (Singapore / Malaysia), PDPO (Hong Kong), PDPA (Taiwan), or comparable rules in Macao apply, you may have rights to access, correct, delete, or withdraw consent for optional processing, subject to local exceptions. Email support@lifevector.net. Where local law provides stronger protections than this Policy, we follow the stronger rule to the extent it applies to us.
9.4 South Africa (POPIA)
If POPIA applies, you may request access to or correction of personal information we hold, and lodge a complaint with the Information Regulator where appropriate. Contact us first at the email below.
9.5 United Kingdom / European Union
LifeVector is not currently distributed on UK or EU App Store storefronts. If you nevertheless use the service from the UK or EU, applicable rights under UK GDPR / GDPR (access, rectification, erasure, restriction, portability, objection, and complaint to a supervisory authority) may still apply to the extent the law reaches our processing. Contact us first. If we expand to those storefronts, we will update this Policy before or at launch.
10. Children's Privacy
LifeVector is not directed to children under 13 (or the higher age required in your region for digital consent — for example higher thresholds that may apply in parts of Asia). We do not knowingly collect personal information from children under that age. The App Store age rating describes content suitability; it does not lower the eligibility age in our Terms of Service. If you believe a child has provided personal information, contact us and we will delete it.
11. Security
We use industry-standard measures appropriate to an indie-operated service, including HTTPS/TLS in transit, authenticated API access (Firebase ID tokens where configured), rate limiting, and least-privilege access to production systems. No method of transmission or storage is 100% secure; please use a strong device passcode and keep iOS updated.
12. AI Disclosure
AI coach responses are generated by large language models and may be inaccurate, incomplete, or biased. They are not medical, legal, financial, or psychological advice. Details: AI Disclosure.
13. Changes
We may update this Policy. We will revise the “Last updated” date above. For material changes, we will provide in-app notice or another reasonable form of notice. Continued use after the effective date constitutes acceptance where permitted by law.
14. Contact
Privacy requests and questions: support@lifevector.net.
Please include enough detail for us to verify your request (for example the email or Sign in with Apple identity associated with your account). We aim to respond within 30 days, or sooner where local law requires.