DRAFT, NOT FOR PUBLICATION. First draft, 27 October 2026, written from the app's real data flows. It needs a solicitor's review before it is published, in particular the legal bases, the analytics position, the international transfers and the US state sections. Placeholders are in
[[double brackets]]. Notes for the reviewer are in blocks starting "Reviewer:", and must be removed before publishing.
mylife/ privacy policy
Last updated: [[date of publication]]
This policy explains what mylife/ collects, why, who helps us run it, how long we keep things and what you can do about it. We have tried to write it the way the app talks: plainly.
1. Who we are
mylife/ is made by Embrace AI Solutions Ltd, a company registered in England and Wales (company number [[company number]]), whose registered office is at [[registered address]]. We are the controller of your personal data, and we are registered with the Information Commissioner's Office under number [[ICO registration number]].
Contact us about anything in this policy at [[contact email]].
2. The short version
- Everything you keep in mylife/ belongs to your account, and the database refuses to show it to anyone else unless you choose to share it with a friend.
- Your mate runs on AI from two companies, Anthropic and OpenAI. Before it does anything, the app shows you exactly what each of them receives, and nothing goes to them until you agree. Neither uses it to train their AI.
- We do not sell your data, we do not show ads, and we do not track you across other companies' apps or websites.
- You can export everything, or delete your account and everything in it, from the app at any time.
- mylife/ is for people aged 16 and over.
3. What we collect
Things you give us
| What | Examples |
|---|---|
| Your account | Email address, password (stored only as a secure hash by our sign-in provider), or your Sign in with Apple or Google identity; your name (optional), username, profile photo (optional), date of birth |
| Memories | Photos, videos, voice notes and written memories; their titles, tags and notes; the words spoken in them (transcribed); when and where a photo was taken, if the photo itself records it |
| Life admin | Bills, documents, renewals, insurance, vehicles, property, warranties, subscriptions, travel and important dates, with their amounts, dates and notes |
| Money | Budgets, the spends you log, and your private notes of who owes what |
| Health | Water, meals and exercise you log; medications, their schedules and which doses you took or skipped; health items in your life admin; and, if you connect it, a daily summary from Apple Health of your steps, workouts and sleep |
| Chats | What you say to your mate and what it replies; facts your mate keeps about you so it can help (you can see, edit and delete every one of these) |
| Friends | Who you are friends with, what you let each friend see, your messages and voice notes to them, plans and shared lists |
| Other things you keep | Lists, your bucket list and its photos, what you have watched and your ratings, text and speech you translate |
| The vault | Notes and files you put in the vault. These are encrypted on your phone with a key made from your own answers. We store only the encrypted version and cannot read it |
| Reports | If you report a person, a message or a mate reply: what you reported, the reason and any words you add |
| Choices | Your consent to the AI providers and the terms (with the time you gave it), notification settings, quiet hours, your mate's name and settings, and your home area if you set one for weather |
| Setting up | What brought you here, what you want to keep track of, and which AI assistant you used before, if you tell us. If you bring over what that assistant knew, the answer you paste in is read by Anthropic to pick out facts, and only the ones you tick are kept |
Things collected as you use the app
| What | Why |
|---|---|
| Your home area, rounded to about a kilometre | Only if you set it, for weather alerts |
| Your time zone | So reminders, quiet hours and "today" are right where you are |
| Push notification tokens and device name | To send notifications to your phone |
| App activity: app opens, daily check-ins, setup steps, and counts of things kept | To understand how the app is used and keep it working. These events never contain what you wrote, said or photographed |
| Crash and error reports | To find and fix problems. They carry your account id, never your name or content |
| AI usage records: which AI feature ran, when, and how much it cost | To keep costs in check, enforce fair-use limits and investigate problems |
| Subscription status: your plan, trial and renewal dates, and the store you bought through | To unlock the app for subscribers |
Things we never collect
Your contacts or address book, your live location (other than the rounded home area you choose to set), advertising identifiers, or your payment card details (the App Store, Google Play or our payment provider handle those).
4. Why we use it, and our legal bases
UK data protection law asks us to say which legal basis we rely on for each use.
| Use | Legal basis |
|---|---|
| Running your account and every feature you use: keeping your memories and records, reminders, reports, the mate, friends and chats | Contract: it is the service you signed up for |
| Your health information (see section 5) | Explicit consent, which you give in the app, plus contract |
| Sending what a task needs to our AI providers (section 6) | Contract, and we ask for your agreement first in the app |
| Checking you are 16 or over | Legitimate interests (keeping the service for people old enough to use it) and contract |
| Keeping the service safe: limits on use, preventing abuse and fraud, handling reports, removing content that breaks the house rules | Legitimate interests in a safe, affordable service |
| App activity and crash reports | Legitimate interests in understanding and improving the app and fixing faults |
| Subscriptions, payments and keeping financial records | Contract and legal obligation |
| Service messages: password resets, sign-up confirmation, essential notices | Contract |
| Answering lawful requests from authorities | Legal obligation |
We do not use your data for marketing, and we do not send marketing emails. [[If marketing is ever added, it will be opt-in and this section will say so.]]
Reviewer: app activity analytics run through an SDK that stores an identifier on the device. Please confirm whether PECR (as amended by the Data (Use and Access) Act 2025) lets us rely on the statistical-purposes exemption with an opt-out, or whether consent is needed. There is no in-app analytics switch today; one can be added.
5. Health information
Some of what you keep is health information, which the law treats as a special category of data. We only collect it because you choose to log it or connect Apple Health, and we rely on your explicit consent, which you give in the app before your mate starts and again before Apple Health is connected.
- Apple Health is read only. The app reads steps, workouts and sleep on your phone and keeps a daily summary on your account. It never writes to Apple Health.
- Health information is used only to give you the features you asked for. It is never used for advertising, never sold and never shared with anyone except the providers who run the service (section 8).
- You can withdraw your consent by disconnecting Apple Health, deleting what you have logged, or deleting your account. Withdrawing does not affect what happened before.
6. The AI in mylife/
Your mate and several features run on AI from two companies. Before your mate starts, the app names them and says what each receives:
- Anthropic (who make Claude) runs your mate. It receives what a task needs: your chats, and the memories, photos, admin, money, health and medication you ask about, plus your Apple Health summary if you connect it. It also titles and tags new memories (from a small copy of a photo), translates, picks things to watch, and writes your weekly and monthly reports. If you bring your mate into a chat with a friend, it sees that chat's recent messages to answer.
- OpenAI turns voice notes and the sound on your videos into words, and reads the words of your memories and searches so search can find things by meaning.
Under their commercial terms, neither company uses this data to train its models, and each keeps it only for a limited period for safety and abuse monitoring (currently up to about 30 days) before deleting it. [[Reviewer: confirm against the signed data processing terms with both.]]
Your mate only ever sees your own things. It cannot see anyone else's account, and it never tells a friend anything private about you.
AI can be wrong. Your mate does not make decisions about you that have legal or similarly significant effects. Its suggestions are suggestions, and you can undo anything it does in the app.
7. What your friends see
Friends see only what you choose, set separately for each friend: today, your name and photo, and your calendar dates. Anyone who is not your friend sees only your username. Messages you send to a friend stay in their chat even if you later delete your account, but without your name.
A list drop link lets anyone who has the link view and add to that one list without an account. Share it only with people you trust, and turn it off from the list at any time.
8. Who helps us run mylife/
We use these providers to run the service. Each acts on our instructions, under a contract that requires them to protect your data, and none may use it for its own purposes.
| Provider | What they do | Where |
|---|---|---|
| Supabase | Hosting: the database, file storage, sign-in and server functions | EU (Paris) |
| Anthropic | AI for the mate and AI features | US |
| OpenAI | Speech to text and search by meaning | US |
| Apple | Sign in with Apple, push notifications, WeatherKit (your rounded home area, for the forecast), App Store subscriptions | Global |
| Sign in with Google | Global | |
| Expo (650 Industries) | Relays push notifications to Apple | US |
| RevenueCat | Keeps track of your subscription across the App Store, Google Play and our website | US |
| Stripe | Payments, if you subscribe on our website | US and EU |
| Resend | Sends account emails (sign-up confirmation, password reset) | US |
| PostHog | App activity analytics | EU |
| Sentry | Crash and error reports | [[EU or US]] |
We may also share data if the law requires it, to protect someone's safety, or as part of a sale or reorganisation of the business (in which case this policy would continue to apply).
9. International transfers
Your data is hosted in the EU. Some providers above are in the US or process data there. When data goes outside the UK, we make sure it is protected by one of the safeguards UK law allows: the UK-US Data Bridge for certified companies, or the UK International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses. [[Reviewer: confirm the mechanism for each US provider.]]
10. How long we keep things
| Data | How long |
|---|---|
| Your memories, records, chats, lists and settings | Until you delete them or your account |
| A memory you delete, and its files | 30 days (so you can get it back), then deleted for good |
| Your account, when you delete it | Deleted straight away, with its records and files; any file that could not be removed at once is cleared shortly after |
| AI usage and security records | 24 months |
| App activity events | 13 months |
| Notification history | 13 months |
| Medication dose history | 400 days |
| Reminders that have been sent or cancelled | 180 days |
| Push tokens from phones we no longer see | 180 days |
| Subscription webhook records | 180 days |
| Reports you file, and what they concern | [[period to decide, for example 24 months]] |
| Payment and tax records for website subscriptions | 6 years, as UK tax law requires |
| Backups | Deleted data can remain in encrypted backups for up to [[backup retention period]] before it is overwritten |
| Data held by the AI providers | Up to about 30 days (section 6) |
11. Keeping it safe
- Every table in our database refuses to show or change anything that is not yours, and the app can only change the things it genuinely needs to.
- Everything travels encrypted, and is encrypted at rest by our hosting provider.
- Your sign-in is kept in your iPhone's Keychain.
- The vault is encrypted on your phone. We never see your answers or its contents, which also means we cannot recover it if you forget them.
- The keys that reach our providers never ship in the app.
No system is perfectly secure. If something goes wrong that puts you at risk, we will tell you and the regulator as the law requires.
12. Your rights
You can:
- See and take your data. Export everything you have kept from You, then Account, then Export your data, or ask us for a copy.
- Correct it. Most things can be edited in the app; ask us about the rest.
- Delete it. Delete anything in the app, or your whole account from You, then Account.
- Object or restrict our use of your data where we rely on legitimate interests.
- Withdraw consent at any time (see sections 5 and 6), without affecting what happened before.
Email [[contact email]] for anything the app does not do itself. We reply within a month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk), though we would like the chance to put it right first.
13. If you live in the US
What we collect, in the categories US state laws use: identifiers (email, account id, username, push tokens); customer records (name, date of birth); commercial information (your subscription); internet or app activity (app usage events); geolocation (the place a photo was taken, and your rounded home area if you set it); audio and visual information (photos, videos, voice notes); inferences (the facts your mate keeps about you); and sensitive personal information (health information, precise location from photos, your account login, and the contents of your messages). Sections 3 and 4 explain where each comes from and why.
We do not sell or share your personal information for cross-context behavioural advertising, and we have not done so in the past 12 months. We use sensitive personal information only to provide the service you asked for.
Your rights, depending on the state you live in, include knowing what we collect, getting a copy, correcting it, deleting it, and not being treated differently for using these rights. Email [[contact email]], or use export and delete in the app. If we turn down a request, you can appeal by replying to our answer.
Reviewer: please check whether Washington's My Health My Data Act and Nevada's consumer health data law apply on a US launch. If they do, they need a separate consumer health data policy linked from the home page and separate consent to collect and to share consumer health data.
14. Children
mylife/ is only for people aged 16 or over. The app asks for a date of birth and turns away anyone under 16. If we learn that someone under 16 has an account, we delete it.
[[Solicitor to check: 16 and 17 year olds are children under the UK Children's Code (the ICO's Age Appropriate Design Code), which asks for high privacy settings by default and a child-friendly version of this notice.]]
15. On your phone
The app stores your sign-in in the Keychain, and keeps some of your data on the phone so it loads quickly and works without a signal. Signing out ends the session and clears the app's copy of your account, its notifications and any export files; pictures you have viewed can stay in the phone's image cache until the system clears it. [[Owner: clearing the image cache on sign-out would let this sentence be shorter.]] The app asks for the camera, photos, microphone and location only when you first use something that needs them, and for notifications once during setup. You can change any of these in your iPhone's settings.
16. Changes to this policy
If we change this policy in a way that matters, we will tell you in the app before the change takes effect. The date at the top shows when it last changed.
17. Contact
Embrace AI Solutions Ltd, [[registered address]] [[contact email]]