Privacy policy

1. Who is responsible

The controller under the General Data Protection Regulation (GDPR) is:

Email: yaroslavnashyvan@gmail.com
Phone: +491627491111

2. In short

Lifelog is a personal archive: what happened in your life, who was there, what you measured, owned and spent, and what you believed. We keep it so that you can read it back, and for nothing else. There is no advertising, no tracking, no analytics, and nothing on these pages is loaded from anyone else. We do not sell your data or use it to train anything.

Your files and our backups are encrypted at rest. Lifelog is not end-to-end encrypted: the server can read the text of your entries, so that search, charts and the features you turn on work.

3. Your account

You sign in with Coredo Account, our sign-in service, which has its own privacy policy. Lifelog receives your account id, your email address, whether it is verified, your name and your profile photo, and keeps them with your settings and the answers you give when you start. For each device you sign in on, Lifelog keeps a name taken from the browser, and when you signed in and last used it, so that you can end that session in Settings → Devices. Lifelog does not keep your IP address; to limit abuse it keeps a keyed hash of it for a day. The legal basis is the contract of use (Art. 6(1)(b) GDPR).

4. Your archive

Lifelog stores what you enter or import: entries, the links between them, values you measure, their history, where each one came from, and the files you attach. Only you can see your archive. Files are encrypted with a key of your own before they are stored, and that key is itself encrypted. The legal basis is the contract of use (Art. 6(1)(b) GDPR).

Special categories. An archive of a life can hold health data, beliefs and other special categories of data (Art. 9 GDPR). We process them only with your explicit consent (Art. 9(2)(a) GDPR), which you give when you start. You can withdraw it at any time by deleting your account; processing until then remains lawful.

Other people. Your archive may name other people: who was there, who you know. You keep that for your own personal use. We store it for you, show it to no one else and use it for nothing else.

5. Storage you share across apps

Your Coredo Account comes with storage shared by the operator's apps, counted by Crate, which the same operator runs. Crate receives your account id and, for each file, an id and its size: never the file, its name or its type. The legal basis is the contract of use (Art. 6(1)(b) GDPR).

6. AI, only if you turn it on

Lifelog's AI features are off until you turn each one on in Settings → AI, where each says what it sends. Then, and only for that feature, Lifelog sends what the feature needs to Anthropic PBC (USA) through its API: for import help, the text you give it and the names of your kinds and metrics; for questions, your question and what Lifelog found for it in your archive. Your name and email address are never sent, and areas you mark sensitive are left out unless you allow them for that feature. Anthropic does not use what it receives to train its models. AI proposes; nothing it suggests enters your archive until you confirm it. The legal basis is your consent (Art. 6(1)(a) and, for special categories, Art. 9(2)(a) GDPR), which you withdraw by turning the feature off. Transfers to the USA rely on the EU–US Data Privacy Framework or standard contractual clauses (Art. 45, 46 GDPR).

7. Invitations

While Lifelog is in a private beta, people already in can make invitation links. Lifelog keeps a hash of each link, who made it, when, and whether it was used. No email is sent. The legal basis is our legitimate interest in a closed beta (Art. 6(1)(f) GDPR).

8. Cookies and your browser

Lifelog sets only cookies it needs to work (§ 25(2) no. 2 TDDDG), so it asks no consent for them:

• lifelog_session: keeps you signed in on this device; it ends after 30 days unused, after a year in any case, or when you end it;
• lifelog_oauth_state, lifelog_oauth_pkce, lifelog_oauth_return, lifelog_oauth_started and lifelog_oauth_invite: protect a sign-in in progress, 10 minutes.

Your browser also keeps, for you alone, your choice of light or dark theme and the state of a focus timer. None of it is sent anywhere.

9. Who else is involved

Hetzner Online GmbH hosts Lifelog in Germany: the server, the database, file storage and backups, under a data processing agreement (Art. 28 GDPR). Encrypted copies of the backups are kept in a second Hetzner location in Finland. Coredo Account and Crate are run by the same operator. Anthropic receives data only as section 6 says. Beyond that we pass on nothing unless the law requires it.

10. How long

Your archive stays until you delete it. What you delete waits in the Trash until you delete it for good there; a deleted file is unreadable at once. Ended device sessions are removed after 30 days. Text you give import help is kept until it is read, and its proposal until you import or discard it, 7 days at most; Lifelog never keeps a question's or an answer's text. Database backups are encrypted before they are stored, kept 14 days on our storage and 30 days in the second location, so what you delete leaves every backup within 45 days. Files are not in those backups.

Deleting your account removes every row of yours at once, then your files, your photo and your exports. The key of your files goes with it, so no copy of them can be read again.

11. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21), and to withdraw a consent at any time (Art. 7(3)). You can export everything, in open formats, and delete your account in Settings → Data; for anything else, write to the address in section 1. You may also complain to a data protection supervisory authority (Art. 77 GDPR).

There is no automated decision-making within the meaning of Art. 22 GDPR. Lifelog shows your data; it never diagnoses, scores or advises.

12. Changes

We update this policy when Lifelog or the law changes, and the date above says when. See also the terms and the imprint.