Privacy Policy

1. Information We Collect

1.1 Personal Information

We collect personal information that you voluntarily provide when you:

• Create an account and register for our services
• Complete psychological assessments and questionnaires
• Set personal goals and track your progress
• Engage with our chat features and AI-powered coaching
• Subscribe to premium features or make purchases
• Contact us for support or feedback
• Participate in surveys, contests, or promotional activities

1.2 Automatically Collected Information

We automatically collect certain information when you use our services:

• Device Information: Device type, operating system, browser type, screen resolution, device identifiers
• Usage Analytics: Pages visited, features used, time spent, click patterns, navigation paths
• Location Data: General location (city/region level) for content personalization and analytics
• Performance Data: App crashes, error logs, performance metrics
• Biometric Data: Only if explicitly enabled - heart rate data from wearables for wellness tracking

1.3 Third-Party Data

We may receive information from third parties including:

• Social media platforms (if you choose to connect accounts)
• Payment processors and billing providers
• Analytics and advertising partners
• Data aggregators and public databases
• Integration partners (fitness apps, calendar apps, etc.)

2. How We Use Your Information

2.1 Primary Service Functions

• Personalized Content: Create customized audio content, coaching sessions, and recommendations based on your archetype profile and goals
• Progress Tracking: Monitor your personal development journey, track goal completion, and provide insights
• AI-Powered Coaching: Deliver personalized guidance through our AI coaching system
• Assessment Analysis: Process psychological assessments to provide meaningful insights and recommendations
• Community Features: Enable connections with other users (if applicable) while maintaining privacy

2.2 Service Operations

• Account Management: Create and maintain your account, authenticate users, manage subscriptions
• Customer Support: Respond to inquiries, resolve issues, provide technical assistance
• Security: Protect against fraud, unauthorized access, and security threats
• Legal Compliance: Comply with applicable laws, regulations, and legal processes

2.3 Analytics and Improvement

• Service Enhancement: Analyze usage patterns to improve features and user experience
• Research: Conduct anonymized research to advance understanding of personal development
• Performance Optimization: Monitor and improve app performance and reliability
• A/B Testing: Test new features and improvements with user consent

2.4 Communication

• Service Communications: Send account updates, security notifications, service announcements
• Marketing: Send promotional content, newsletters, and personalized offers (with consent)
• Educational Content: Share relevant articles, tips, and resources related to personal development

3. Data Sharing and Disclosure

3.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our services:

• Cloud Infrastructure: Supabase, AWS, Google Cloud for data storage and processing
• Analytics: PostHog, Google Analytics for usage analytics and insights
• AI Services: OpenAI, Replicate for AI-powered features and content generation
• Payment Processing: Stripe, Apple Pay, Google Pay for subscription and payment management
• Communication: Email service providers, push notification services
• Audio Processing: Specialized audio processing services for content creation

3.2 Legal Requirements

We may disclose your information when required by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government requests for national security or law enforcement purposes
• Requests from regulatory authorities
• Legal obligations under applicable privacy laws

3.3 Safety and Security

We may share information to:

• Protect the rights, property, or safety of our users or the public
• Prevent fraud, abuse, or illegal activities
• Respond to emergencies or imminent threats
• Enforce our Terms of Service and other agreements

3.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity, subject to the same privacy protections.

3.5 Consent-Based Sharing

We may share information with your explicit consent for:

• Integration with third-party apps and services
• Research partnerships (anonymized data only)
• Special promotions or collaborations

4. Data Security

4.1 Security Measures

We implement comprehensive security measures to protect your information:

• Encryption: Data encrypted in transit (TLS 1.3) and at rest (AES-256)
• Access Controls: Multi-factor authentication, role-based access, principle of least privilege
• Infrastructure Security: Secure cloud hosting, regular security audits, vulnerability assessments
• Data Minimization: Collect only necessary data, regular data purging, anonymization where possible
• Monitoring: 24/7 security monitoring, intrusion detection, incident response procedures

4.2 Data Processing Safeguards

• Data Loss Prevention: Automated backups, disaster recovery procedures
• Secure Development: Security-first development practices, code reviews, penetration testing
• Employee Training: Regular security training, confidentiality agreements
• Vendor Management: Security assessments of all third-party providers

4.3 Breach Response

In the event of a data breach, we will:

• Contain the breach and assess the impact within 24 hours
• Notify affected users within 72 hours via email and in-app notification
• Report to relevant authorities as required by law
• Provide detailed information about the breach and our response
• Implement additional security measures to prevent future incidents

5. Your Privacy Rights

5.1 Access and Portability

You have the right to:

• Access: Request a copy of all personal information we hold about you
• Portability: Export your data in a structured, machine-readable format
• Transparency: Understand how your data is processed and shared

5.2 Correction and Update

• Correction: Update or correct inaccurate personal information
• Completion: Add missing information to your profile
• Real-time Updates: Most information can be updated directly in the app

5.3 Deletion and Erasure

• Account Deletion: Delete your account and associated data
• Selective Deletion: Delete specific types of data (e.g., assessment results)
• Right to be Forgotten: Complete erasure of personal data (subject to legal requirements)

5.4 Processing Controls

• Consent Withdrawal: Withdraw consent for specific data processing activities
• Processing Restriction: Limit how we process your data
• Objection: Object to certain types of data processing

5.5 Communication Preferences

• Marketing Opt-out: Unsubscribe from marketing communications
• Notification Settings: Control push notifications and email alerts
• Frequency Control: Adjust how often you receive communications

5.6 Exercising Your Rights

To exercise any of these rights:

• Use the privacy settings in your app account
• Email us at [email protected]
• Contact our Data Protection Officer

We will respond to your request within 30 days and may require identity verification.

6. Data Retention

6.1 Retention Periods

6.2 Deletion Process

• Automated Deletion: Data automatically deleted after retention period expires
• Secure Deletion: Data securely overwritten and unrecoverable
• Backup Handling: Data removed from backups within 90 days
• Third-Party Deletion: Request data deletion from service providers

7. International Data Transfers

7.1 Global Operations

We operate globally and may transfer your data to countries outside your jurisdiction. We ensure adequate protection through:

• Adequacy Decisions: Transfers to countries with adequate data protection laws
• Standard Contractual Clauses: EU-approved contracts with data processors
• Binding Corporate Rules: Internal policies ensuring consistent protection
• Certification Programs: Privacy Shield successors and similar frameworks

7.2 Data Localization

Where required by local law, we store data within specific jurisdictions:

• EU Users: Primary data stored within EU/EEA
• UK Users: Data stored within UK or adequacy jurisdictions
• Other Jurisdictions: Compliance with local data residency requirements

8. Children's Privacy

8.1 Age Restrictions

Our services are not intended for children under 18. We do not knowingly collect personal information from children under 18.

8.2 Parental Rights

If we become aware that we have collected personal information from a child under 18:

• We will delete the information immediately
• We will notify parents/guardians
• We will terminate any associated accounts

8.3 Verification

We may implement age verification measures to ensure compliance with children's privacy laws.

9. Third-Party Services

9.1 External Links

Our services may contain links to third-party websites or services. We are not responsible for their privacy practices.

9.2 Social Media Integration

If you connect social media accounts:

• We may access limited profile information
• Your activities may be visible to your social media connections
• Social media privacy policies apply to their services

9.3 Third-Party Analytics

We use third-party analytics services that may collect information about your use of our services and other websites.

10. Cookies and Tracking

10.1 Cookie Usage

We use cookies and similar technologies for:

• Essential Cookies: Required for basic functionality
• Analytics Cookies: Understand usage patterns and improve services
• Preference Cookies: Remember your settings and preferences
• Security Cookies: Protect against fraud and unauthorized access

10.2 Cookie Management

• You can control cookies through your browser settings
• Some features may not work properly if cookies are disabled
• We provide cookie preference centers where available

10.3 Do Not Track

We respect Do Not Track signals and will not track users who have enabled this setting.

11. California Privacy Rights

11.1 CCPA Rights

California residents have additional rights under the California Consumer Privacy Act:

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Deletion of personal information
• Right to Opt-Out: Opt-out of sale of personal information
• Right to Non-Discrimination: Equal service regardless of privacy choices

11.2 Shine the Light

California residents can request information about sharing of personal information for direct marketing purposes.

11.3 Exercising CCPA Rights

Contact us at [email protected] to exercise your California privacy rights.

12. Updates to This Policy

12.1 Policy Changes

We may update this Privacy Policy to reflect:

• Changes in our services or features
• New legal requirements or regulations
• Industry best practices and standards
• User feedback and requests

12.2 Notification of Changes

We will notify you of material changes through:

• Email notification to registered users
• In-app notifications
• Website announcements
• Updated "Last Modified" date

12.3 Consent to Changes

Continued use of our services after policy updates constitutes acceptance of the new terms.

13. Contact Information

14. Jurisdiction and Governing Law

This Privacy Policy is governed by the laws of [State/Country] without regard to conflict of law principles. Any disputes arising from this policy will be resolved in the courts of [Jurisdiction].

15. Acknowledgment

By using The Lifetime Project services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with any part of this policy, please do not use our services.