Privacy Policy

Data LifeHub Handles

LifeHub stores family data in a private PostgreSQL database on the family's own server, including account records, family memberships, tasks, calendar items, lists, finance records, health records, documents, travel plans, assets, contacts, goals, activity logs, sessions, and notification records.

Sensitive Categories

• Medical, financial, identity, travel, family, and document data can be stored in LifeHub, so the product treats exports, account deletion, invite management, and sensitive downloads as protected actions.
• Private records are scoped to the owning user where the module supports private visibility. Shared records are visible to active family members with access to that family.
• Downloaded exports and files leave LifeHub controls. Store them encrypted and delete temporary copies when no longer needed.

AI Disclosure

AI assistance is reviewable and optional. LifeHub must not use AI to diagnose, provide dose advice, make financial decisions, change health schedules, or silently mutate family records. AI drafts should be checked by a person before use.

Backups And Retention

Production backups are backup sets that include a PostgreSQL database dump, uploaded-file snapshot, storage manifest, and backup-set manifest. Mahan Fathi should copy verified backup sets to encrypted off-server storage and follow the documented retention policy in the Trust Center. Deleted or anonymized account data may remain in backup sets until those sets age out under the configured retention period.

Signing In

• Passwords are stored only as argon2id hashes. Passkeys store a public key on the server; the private key never leaves your device or password manager.
• Authenticator-app secrets are encrypted at rest, and recovery codes are stored only as hashes, so nobody with database access can read them.
• Settings > Devices lists every signed-in browser with its approximate device, IP address, sign-in method, and last activity, so you can sign any of them out.
• Email is optional on a LifeHub server. Without it, verification and reset links are not sent, and recovery codes are the way back into an account.

Belonging To Several Families

One account can belong to more than one family. Each family sees only what is shared in that family, and records marked private stay visible only to you. When you leave a family, your private records from it stay downloadable by you for 30 days and are then deleted.

Export And Deletion

• Every account can download its data from Settings > Data and privacy after confirming it is you with a passkey, authenticator code, or password. A family's Owner and Admins can also download the family archive. Archives are prepared on the server, stored encrypted, kept for 7 days and then deleted, and never include another member's private records.
• Deleting your account starts a 14-day grace period. You are signed out on other devices, and signing in again during those 14 days offers to cancel. After that, sign-in credentials, sessions, reset and verification tokens, recovery codes, passkeys, provider tokens, and private records are removed and the account is anonymized.
• A family you are the only member of is deleted with your account, on the family's own 30-day clock. If others are in a family you own, you must make one of them Owner first.
• These controls stay available even if billing is added later.