Lifefy

Privacy Policy

Effective Date: 30 April 2026 Last Updated: 30 April 2026 Contact: admin@lifefy.ai

Quick summary. Lifefy is a wellness and informational app, not a medical device. We deliberately collect the minimum information needed to deliver your features — no first/last name, no date of birth, no phone number, no location data, no advertising trackers. Your health data is never sold, never used for advertising, and never shared with third parties beyond the named processors required to run the service. You can access, correct, export, or delete your data at any time, from inside the app or by emailing us.

1. Who we are

Lifefy ("Lifefy", "we", "us") provides a personal wellness app available on iOS and Android. You can reach us at admin@lifefy.ai. The Lifefy Grievance Officer (India) is reachable at the same address (see §22).

2. What Lifefy is — and is not

Lifefy is a wellness and informational tool. The Lifefy Score, biomarker trend charts, articles, and Lifefy Coach replies are intended to help you understand your own health data and adopt evidence-based habits.

Lifefy is not a medical device, does not provide medical diagnoses, does not prescribe or change medications, and is not a substitute for professional medical advice. Reference ranges shown in the app are informational and should be discussed with a qualified healthcare provider before any clinical decision. Any urgent concern (chest pain, suicidal thoughts, severe symptoms) should be directed to local emergency services immediately.

3. Information we collect

We collect the minimum information needed to deliver your features.

3.1 Profile information you provide

Field	Purpose	Required?
Display name (free text — your choice)	Personalises the in-app greeting	Yes
Age (number)	Adjusts health benchmarks (HR, HRV, lab ranges) by age	Yes
Gender	Adjusts benchmarks (Hb, ferritin, body composition) and powers female-stage features (Cycle)	Yes
Height + weight	Computes BMI and waist-to-height ratio	Yes
Country / region	Applies region-correct lab reference ranges and regulations	Yes
Email address	Auth credential only. Never displayed in any social surface, never shared externally for marketing	Yes
Diet, cuisine, conditions disclosed, allergies, medications, family history, wellness goals	Personalises Coach replies, recipe suggestions, score interpretation	Optional
Life stage (e.g. Universal, Cycle, Trying-to-conceive)	Personalises sidebar items, articles, Coach context	Optional, default Universal

3.2 Health data from Apple Health (HealthKit, iOS) and Google Health Connect (Android)

Read-only, only with your explicit permission, used only to compute the Lifefy Score and surface trend charts:

Data type	Source	Used by
Sleep (asleep, deep, REM, light, awake, in/out of bed)	HealthKit + Health Connect	Lifefy Score (sleep domain), Score Breakdown
Resting heart rate	HealthKit + Health Connect	Lifefy Score (cardiovascular domain), Biomarker Trends
Heart rate variability (SDNN)	HealthKit + Health Connect	Lifefy Score (recovery domain), Biomarker Trends, Coach context
Steps	HealthKit + Health Connect	Lifefy Score (activity domain), home step ring
Respiratory rate	HealthKit + Health Connect	Lifefy Score (recovery domain)
Weight, height	HealthKit + Health Connect	BMI + waist-to-height ratio

3.3 Health data you provide directly

Lab and medical reports you upload as images or PDFs. We extract clinical biomarkers (name, value, unit, reference range, test date) into structured fields; the source document is stored encrypted at rest.
Daily check-ins (mood, stress, energy, optional notes).
Mental-health screenings you complete in-app (PHQ-9, GAD-7). Scores are stored; raw question-by-question responses stay local except for the safety flag on PHQ-9 question 9.
Cycle / period logs, if you have selected the Cycle life stage. Phase tracking and symptom logs only — never any fertility-window or sex-determination inference (PCPNDT-clean by design, India).
Medication reminder schedules.

3.4 In-app activity

Lifefy Coach chats — your messages and the Coach replies, stored on Lifefy servers so the Coach has memory of prior conversations.
Articles you open or dismiss — to avoid re-recommending content and to surface the next-step article.
Score history — your daily Lifefy Score values, used for trends.
Crash reports — anonymised; user identifier hashed; biomarker / mental-health / pregnancy fields scrubbed before transmission.

3.5 What we deliberately do not collect

First name, last name, or any legal-identity field.
Date of birth (we use age as a number).
Phone number (used only as a transient delivery channel for medication reminders or invitations, never stored in your profile).
Precise location.
Contacts list, calendar, microphone, browsing history, or social media data.
Advertising identifiers (we do not use them and never connect to ad networks).

3.6 What we do not access from HealthKit / Health Connect

We have explicitly removed permissions for: blood pressure (only available via your uploaded lab reports if you choose to share them), active calories burned, distance, floors climbed, body fat, body temperature, blood oxygen (SpO2), basal metabolic rate, and any data type not listed in §3.2 above. This complies with Google Play's Health Connect "Minimum Scope" policy and Apple HealthKit's data-minimisation guidance.

4. How we use your information

Strictly to deliver the Lifefy product to you:

Compute your Lifefy Score and surface trends.
Generate informational wellness suggestions through the Lifefy Coach.
Surface relevant evidence-based articles based on your stage and recent activity.
Allow you to share an opt-in level of summary information with your nominated Care Circle.
Honour data-rights requests (access, correction, deletion, export).
Detect and respond to security incidents.

We do not use your data for advertising, retargeting, scoring against other users, sale to brokers, training generative AI models we don't operate, or marketing to third parties.

5. Apple Health (HealthKit) — required disclosure

Lifefy integrates with Apple's HealthKit framework on iOS. Apple App Store guideline 5.1.1(i) requires the following:

HealthKit data is read-only and only with your explicit permission. We do not write to Apple Health.
HealthKit data is used exclusively to provide health-related features described in this policy.
HealthKit data is never shared with or sold to third parties.
HealthKit data is never used for advertising, marketing, or analytics unrelated to your health.
HealthKit data is stored on your device and, where you have enabled cloud sync, in encrypted Lifefy storage in your region.
Data minimisation: we request only the specific data types listed in §3.2 above.

6. Google Health Connect — required disclosure

Lifefy integrates with Google Health Connect on Android. Per Google Play's Health Connect policy:

Lifefy requests only the seven permissions listed in §3.2 above. Each is tied to a user-visible feature.
Permissions are read-only; Lifefy does not write to Health Connect.
Health Connect data is never shared with third parties for advertising, marketing, or analytics.
You can revoke any permission at any time in your device's Settings → Apps → Lifefy → Permissions, or from inside Health Connect.

7. Lifefy Coach (AI)

The Lifefy Coach is powered by Anthropic Claude, a generative-AI model hosted in the United States by Anthropic, PBC.

When you send a message to the Coach, a context bundle (your profile, recent score, latest biomarker summary, life stage, last few coach turns) and your message are sent to Anthropic's API to generate a reply.
Anthropic does not retain API messages for training and does not store Lifefy conversation data beyond the duration of the API call. Anthropic is SOC 2 Type II certified and bound by a Data Processing Agreement with Lifefy.
Lifefy stores your Coach conversation on Lifefy servers (in your region) so the Coach can reference prior discussions.
The Coach is a wellness coach. It will not diagnose, prescribe, change medication, or replace clinical advice. Where appropriate, it directs you to your healthcare provider or to emergency services.

8. Camera and photo library

We request camera and photo library access only when you upload an image of a lab report or medical document for storage and biomarker extraction. We do not use camera or photo access in the background. Images are sent to Lifefy's encrypted storage and are never shared with third parties.

9. Push notifications

We use Firebase Cloud Messaging (Google) to deliver push notifications: morning Lifefy Score summary, medication reminders you have scheduled, weekly health summary, Care Circle activity if enabled. Each notification category can be turned off independently in Settings → Notifications.

10. Care Circle (family sharing)

Care Circle lets you share an opt-in summary of your health information with a small group of family members. Three sharing tiers:

Score — Lifefy Score number only.
Score + Metrics — Score plus selected biomarker trends.
Full Summary — Score, biomarkers, and stage-specific summaries.

You set the tier per member, you can revoke access at any time from Settings → Care Circle, and revocation is immediate (the other party loses access from their next app open). All Care Circle reads are recorded in an audit log you can review (Settings → Privacy → Data access log). Sensitive data — pregnancy stage, postpartum mental-health screens, loss-recovery — is never auto-shared even on the Full Summary tier; it requires an additional opt-in for each one.

11. Sub-processors and third-party services

Lifefy uses the following processors. Each is bound by a Data Processing Agreement and processes your data only on Lifefy's instructions.

Processor	Purpose	Region	Safeguard
Supabase (Postgres, Auth, Storage)	Primary database, authentication, file storage	Mumbai (`ap-south-1`) for Indian users, Singapore (`ap-southeast-1`) for AU/UK/other	Standard Contractual Clauses, encryption at rest
Anthropic (Claude API)	Lifefy Coach replies	United States	DPA, no-training commitment, no-retention commitment, SCCs
Apple (HealthKit, Push Notification Service)	iOS health data + push delivery	Apple regions	Apple's HealthKit data agreement
Google (Health Connect, Firebase Cloud Messaging, Google Sign-In)	Android health data, push delivery, optional sign-in	Google regions	Standard Google DPA
Sentry	Crash and error reporting	EU / US	DPA, PHI scrubber applied before transmission
Firebase Crashlytics	Mobile crash reports	Google regions	DPA

We do not use advertising networks, analytics SDKs that fingerprint, social-login providers beyond Google + Apple Sign-In, or marketing-automation platforms.

12. Data security

Encryption at rest: AES-256 across all Lifefy databases and object storage.
Encryption in transit: TLS 1.3 with certificate pinning on the Supabase API host (mobile client).
Access controls: Row-level security in Postgres restricts every read/write to the authenticated user. Service-role access is restricted to deploy-time CI runners and a small number of named engineers; all service-role access is audit-logged.
PHI scrubber: Crash reports sent to Sentry have user identifiers hashed and biomarker / mental-health / pregnancy values stripped before transmission.
Append-only audit trail of T0-classified reads (biomarkers, mental health, pregnancy) with chained checksums.
Penetration testing: annual external security assessment; vulnerability disclosure programme at admin@lifefy.ai.

13. Data retention and deletion

Data	Retention
Active account data	As long as your account is active
Inactive account	All data deleted after 3 years of no app open
Wearable timeseries	13 months rolling
Lab reports	Retained until account deletion
Coach conversations	Retained until account deletion
Crash reports (Sentry)	90 days
Audit logs	7 years (legal-requirement floor) after which they are pseudonymised
Backups	30 days after data deletion request, then permanently destroyed

You can delete your account and all associated personal data at any time:

In-app: Settings → Privacy → Delete Account (immediate; soft-deleted for 7 days then irrevocably purged).
By email: send a deletion request to admin@lifefy.ai. We respond within 30 days.
Web form: a public deletion form is available at the URL listed in the app stores' "Account Deletion" field.

After deletion, anonymised aggregate metrics may persist (e.g. cohort statistics with k-anonymity ≥ 50). No data linkable back to you survives.

14. International data transfers

Where your data is transferred outside your country of residence (for example, Indian or UK users' coach messages routed to Anthropic in the US), we rely on:

Standard Contractual Clauses (European Commission and UK ICO approved) with each processor.
Adequacy decisions where they apply.
Explicit consent, which you give at signup and can withdraw at any time.

For Indian users, our primary database is hosted in Mumbai (ap-south-1). Cross-border transfer happens only for the AI Coach feature (Anthropic in US) and only the data needed for that single API call.

15. Your rights

You have the following rights, exercisable in-app or by emailing admin@lifefy.ai. We respond within 30 days.

Right	What it means
Access	Receive a copy of all personal data we hold about you, in a portable JSON / CSV format
Rectification	Correct any inaccurate or incomplete data
Erasure ("right to be forgotten")	Delete your account and all associated personal data
Restriction	Pause processing of specific categories pending review
Portability	Export your data in a structured, commonly used, machine-readable format
Object	Object to specific processing activities
Withdraw consent	Withdraw consent for any optional processing without penalty
Not be subject to automated decisions	See §16 on the Lifefy Score
Lodge a complaint	Complain to your data protection authority (see §22 for the relevant authority by region)

Region-specific overlays apply — see §22, §23, §24, §25.

16. Automated decision-making

The Lifefy Score is computed automatically from your wearable data and biomarkers. It is informational only — it does not produce legal or similarly significant effects on you, does not gate access to any service, and is not shared with insurers, employers, or any third party. You can request a human explanation of how your score was calculated, request that it be hidden from your view (Settings → Privacy → Hide Lifefy Score), or delete your data entirely.

The Lifefy Coach uses generative AI to produce text replies grounded in your data. Coach output is not a clinical decision; it is one input among many you should consider. You can disable the Coach (Settings → Privacy → What Lifefy Coach knows) to suppress the slots it can read.

17. Children's data

Lifefy is for users aged 18 and over. We do not knowingly collect data from anyone under 18. Care Circle members under 18 require verifiable parental consent before any data is shared with them or with the account holder; consent must be provided in-app at the time the member is added. If we discover an under-18 has signed up without parental consent, we delete the account and notify the parent or guardian where contact information is available.

18. Breach notification

In the event of a personal-data breach that is likely to result in a risk to your rights and freedoms, we will:

Notify the relevant supervisory authority within 72 hours of becoming aware (GDPR Article 33).
Notify affected users without undue delay (GDPR Article 34) — typically the same day, by in-app notice and email.
Notify the Indian Data Protection Board within the timeframe required by the DPDP Act 2023.
For US-based covered events, follow HIPAA-aligned notification standards including the 60-day window.

Our breach-notification runbook is internal but the resulting communication to you will include: what happened, what data was affected, what we are doing about it, what you should do, and how to contact our Grievance Officer.

19. Cookies and tracking

The Lifefy mobile app does not use cookies or any web tracking. The Lifefy website (lifefy.ai) uses only essential cookies for the site to function (no advertising, no analytics that fingerprint, no third-party trackers). If we ever add analytics, we will require opt-in consent in regions where consent-first is required.

20. Updates to this policy

We may update this policy from time to time. Material changes will be communicated via:

An in-app notification the next time you open the app.
An email to your account email address (where consent for service emails has been given).

The "Last Updated" date at the top of this page reflects the most recent edit. The "Effective Date" reflects the date the current version takes effect for you.

21. Contact

For privacy questions, data-rights requests, or a copy of any of the agreements referenced in this policy:

Email: admin@lifefy.ai
Postal address: [Lifefy registered office address — populate before publishing]
Lifefy Grievance Officer (India): admin@lifefy.ai (response within 7 working days; resolution within 30 days)

22. India — DPDP Act 2023 provisions

Lifefy complies with India's Digital Personal Data Protection Act 2023 ("DPDP Act") for users in India.

Lawful basis: explicit, informed consent given at signup. You may withdraw consent at any time without penalty.
Notice: this policy is the formal notice required under DPDP §5. A Hindi translation is available on request.
Data minimisation: we collect only data needed for features you use (DPDP §4(2)).
Cross-border transfer: Indian user data is hosted in Mumbai. Coach messages are transiently sent to Anthropic in the US for AI processing only; no Indian user data is retained outside India by sub-processors.
Children's data: Lifefy is 18+. Verifiable parental consent is required before sharing any data with a Care Circle member under 18.
Significant Data Fiduciary obligations: when notified by the Data Protection Board that Lifefy qualifies as a Significant Data Fiduciary (DPDP §10), we will appoint a Data Protection Officer and update this policy with their contact details.
Grievance Officer: admin@lifefy.ai. We respond within 7 working days; resolution within 30 days.
Data Principal rights: access, correction, erasure, nominate a representative for exercise of rights in case of incapacity or death, grievance redressal, and complaint to the Data Protection Board of India.
Breach notification: we notify the Data Protection Board and affected users within the timelines required by the Act.

23. Australia — Privacy Act 1988 + Australian Privacy Principles

Lifefy complies with the Australian Privacy Act 1988 and the 13 Australian Privacy Principles (APPs).

We adhere to APP 1 (open and transparent management), APP 5 (notification), APP 6 (use and disclosure), APP 11 (security), APP 12 (access), APP 13 (correction).
Australian users may request access to their personal information at any time; we respond within 30 days.
Australian users may complain to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au if they believe their data has been mishandled. We will cooperate fully with any OAIC inquiry.
For Notifiable Data Breaches we follow the Privacy Amendment (Notifiable Data Breaches) Act 2017 timelines.

24. United Kingdom and European Union — UK GDPR + EU GDPR

Lifefy complies with the UK GDPR and the EU GDPR for users in those regions.

Lawful basis: consent (Article 6(1)(a)); for special category health data, explicit consent (Article 9(2)(a)).
Data Controller: Lifefy. We do not have an EU representative at this time; one will be appointed before EU launch.
Rights: access, rectification, erasure, restriction, portability, objection, automated-decision rights (Articles 15–22).
Right to lodge a complaint: with the UK Information Commissioner's Office (ICO) at ico.org.uk, or with the relevant national data protection authority in your country of residence.
International transfers: rely on Standard Contractual Clauses (UK Addendum where applicable) for transfers to the US and elsewhere.
DPO: not required at current scale (Article 37); a DPO will be appointed when processing thresholds under Article 37 are met. Until then, all DPO-equivalent communications are handled by admin@lifefy.ai.
Breach notification: ICO / supervisory authority within 72 hours; users without undue delay.

25. United States — California Consumer Privacy Act (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act and California Privacy Rights Act give you the following rights:

Right to know what personal information we collect, use, disclose, and share.
Right to delete personal information collected from you, subject to certain exceptions.
Right to correct inaccurate personal information.
Right to opt out of sale or sharing — Lifefy does not sell or share your personal information for cross-context behavioural advertising. You have nothing to opt out of, but we honour Global Privacy Control signals where received.
Right to limit use of sensitive personal information — health data is treated as sensitive personal information; we use it only for the purposes disclosed in this policy.
Right to non-discrimination for exercising any of the above.

To exercise any of these rights, email admin@lifefy.ai. We respond within 45 days. We do not require a Cal. Civ. Code §1798.130-style verification beyond confirming you are the account holder.

This policy was last reviewed for completeness on 30 April 2026 and meets the disclosure requirements of: Apple App Store Guideline 5.1.1, Google Play User Data Policy + Health Connect Policy, EU GDPR, UK GDPR, Indian DPDP Act 2023, Australian Privacy Act 1988 + APPs, and CCPA / CPRA.