Privacy Policy

1.At a glance

This Privacy Policy explains what personal information we collect, where it comes from, how we use it, who we disclose it to, how long we keep it, and the rights and choices you have. Health information has its own, more detailed policy: the Consumer Health Data Privacy Policy. Information about children is covered in more detail in our Children’s Privacy Notice.

2.Who we are

LifeAnchor is a product of Ashlar Enterprises LLC, an Oklahoma limited liability company (“Ashlar”, “we”, “us” or “our”). Ashlar decides how and why personal information in LifeAnchor is processed, so Ashlar is the business (or “controller”) responsible for it under privacy law.

Our office is at 9905 S Pennsylvania Ave, Suite A, Oklahoma City, OK 73159. You can reach us about anything in this policy at [email protected] or (405) 957-9360.

3.What this policy covers

This policy applies to personal information we process through LifeAnchor, including the website at lifeanchor.online, the LifeAnchor web app, and the LifeAnchor apps for iOS and Android (which are shells around the same web app and follow the same policy). It also covers the emails we send you about your account and the support we provide.

It does not cover services you connect to LifeAnchor (such as Google, Microsoft, Apple iCloud, Oura, Dexcom, Tidepool or your AI provider) or websites we link to (such as a pharmacy’s website). Those companies handle information under their own privacy policies and your agreements with them.

LifeAnchor is organised around a household: a family account with one primary account holder (the head of household), an optional co-head, adult members and child members. When this policy says “you”, it means anyone whose information is in LifeAnchor, whether you signed up yourself or were added by your household.

4.Where your information comes from

We collect personal information from four sources:

• You. When you sign up, set up your profile, and use LifeAnchor’s modules, you give us information directly — for example, a calendar event, a budget, a medication you log, a recipe, a resume or a document you upload to the Vault.
• Your household. Other members of your household can enter information about you. Most importantly, a parent or guardian enters information about the children they add, and an account holder can add members, record shared calendar events, assign chores, or log information for the family. If someone else added you to a household, they gave us your name and the details they chose to enter.
• Services you connect. If you choose to connect an outside account — a mailbox, calendar or contacts account, a health device or service, an AI provider, or Google or GitHub for sign-in where offered — we receive the information that service sends us under the access you approve. We describe these below and in our AI Notice.
• Automatically, when you use LifeAnchor. Our servers record certain technical and usage information, such as your IP address and browser type in security and audit logs, and simple records of which features members use.

We do not buy personal information, and we do not collect information about you from data brokers or advertising networks.

5.The information we collect

Which of the following we hold about you depends on which modules your household uses and what you and your household choose to enter. Many fields are optional.

If you connect Google or GitHub to sign in (where offered), we receive basic profile information from that service, such as your name and email address, so we can create and sign you in to your account.

6.Sensitive information

Some of what families keep in LifeAnchor is sensitive: health information, identity documents and numbers, financial account numbers, the contents of email you connect, account sign-in credentials, and information about children. We collect and use sensitive information only to provide the features you or your household use, to keep LifeAnchor secure, and to meet our legal obligations. We do not use it to infer things about you for any other purpose.

Health information is subject to extra rules in LifeAnchor: sensitive health categories are hidden from other household members unless access is explicitly granted, access to health information is recorded in a tamper-evident audit log, and health data is sent to an AI provider only under the conditions described in our AI Notice.

7.How we use your information

We use personal information for these purposes:

• To provide LifeAnchor. To create and run your account and household; to store, display and organise what you enter; to sync with services you connect; to send transactional emails such as sign-in links, verification codes and invitations; and to run the features you turn on.
• To keep LifeAnchor and your household secure. To authenticate you, require two-step verification where enabled, end sessions after inactivity, rate-limit requests, check for bots at sign-up where enabled, enforce household permissions, keep audit logs of access to health information and AI use, investigate suspicious activity and prevent fraud and abuse.
• To support you. To answer your questions, fix problems, act on feedback and bug reports, and administer your plan and add-ons.
• To understand and improve LifeAnchor. We look at simple usage records to understand which features are used and to spot members who may need help getting the most out of LifeAnchor. Aggregate reports built from these records leave out sensitive actions. We do not use third-party analytics tools to do this.
• To meet legal obligations and protect rights. To comply with law and legal process, respond to lawful requests, handle privacy requests, enforce our Terms of Service and Acceptable Use Policy, and protect the rights, safety and property of our users, Ashlar and others.

If we want to use personal information for a purpose that is materially different from these, we will tell you first and, where the law requires it, ask for your consent.

8.What we do not do

• We do not sell personal information, and we have not sold it in the past 12 months.
• We do not share personal information for cross-context behavioral advertising, and we do not use it for targeted advertising.
• We do not show ads in LifeAnchor and do not work with ad networks.
• We do not use analytics or tracking tools — no Google Analytics, no advertising pixels, no session recording.
• We do not buy from or sell to data brokers.
• We do not sell health data, and we do not use it for advertising.
• Ashlar does not train AI models on your data. LifeAnchor does not supply its own AI; AI features run on the AI provider account your family connects (see How AI features handle your data).
• We do not connect to your bank or store retailer passwords. Kitchen features do not connect to retailer accounts; “placing an order” only creates a list or reminder for you.
• We do not collect fingerprints, face data or other biometrics. If you lock the mobile app with your device’s biometrics, that happens on your device and LifeAnchor never receives it.

9.Who in your household can see your information

LifeAnchor is built for sharing within a family, so other members of your household can see some of your information. Our database enforces these rules on every request; they are not just hidden in the interface.

• General household information — such as the calendar, chores and the parts of Finance a member has access to — is visible to household members according to the household’s settings and the per-member permissions the account holder sets.
• Health information is decided per person and per category. If you are an adult, other members of your household cannot see your health information unless you share it or grant them access. Sensitive categories — mental health, reproductive health, health documents, device integrations and the health timeline — are visible to someone else only with an explicit grant. Members can use sharing settings to share or withhold particular metrics. A parent or guardian (the head or co-head) can see a minor’s non-sensitive health information; sensitive categories still need an explicit grant.
• The Vital Documents Vault is private to the document’s owner by default. Documents are shared one at a time, and a guardian can see a child’s documents only where a guardianship has been set up.
• Calculator memory and AI conversation history are visible only to you.
• Co-ops. If your household joins a homeschool co-op, a child’s label and bio in that co-op are visible to the other families in it.
• Emergency Card. If you set up an Emergency Card, the information on it is shown to anyone with the card’s link or access, for a limited time. See Emergency Card.

The account holder controls household settings and permissions. If you have questions about what a particular member can see, ask your household’s account holder or contact us.

If a member is removed from a household, their account is deactivated and detached from the household. Their data is kept until deletion is requested (see Retention).

10.How we disclose information

We disclose personal information only in the following ways.

Service providers. We use a small number of companies to run LifeAnchor for us. They may use personal information only to provide their services to us and not for their own purposes. They are:

• Supabase, Inc. — database, authentication, file storage and realtime updates, hosted in the United States. Holds all account data.
• DigitalOcean, LLC — application hosting in the United States. Data passes through its servers as the app runs.
• Resend — sends some of our emails, such as two-step verification codes and project invitations. Receives the recipient’s email address and the content of the email (for example, the code or the inviter’s and project’s names).
• Cloudflare, Inc. — bot protection (Turnstile) at sign-up, where enabled. Receives browser and device signals and your IP address.
• OpenStreetMap services (Overpass API and Nominatim) — gym search and looking up your household’s weather location. Gym search receives only the centre point of a ZIP code, never your address; location lookup receives the city or ZIP text you typed.
• Open-Meteo — weather forecasts. Receives the coordinates of your household’s weather location.
• Open Food Facts — barcode and food search. Receives the barcode or search text.

Our current list is kept in our Subprocessors page, which we update when it changes. Ashlar also uses its own internal customer-management system to provide support, administer plans and handle feedback. It holds the account holder’s name, email, phone number, plan and status, household members’ names and types, and add-ons, plus any feedback text and page address you submit. It is operated by Ashlar, not a third party.

Services you connect. When you connect an outside account, information flows between LifeAnchor and that service under your own account and terms with it. For example: if you connect Gmail, LifeAnchor can read your mailbox; if you connect Outlook, LifeAnchor can read and send mail and read and update your calendar and contacts; if you connect Oura, Dexcom or Tidepool, LifeAnchor receives your device data. Where a connection allows LifeAnchor to write (such as sending mail or adding an event to Outlook), we send the information needed to carry out what you asked. Which permissions each connection uses is shown when you connect it and described in our AI Notice and Subprocessors page. You can disconnect at any time.

AI providers your family chooses. When a member uses an AI feature, the request — including any personal, health or financial information that feature needs — is sent to the AI provider your family connected (such as Anthropic, OpenAI or Google), under your family’s own account and that provider’s terms. See How AI features handle your data.

Websites you ask us to fetch. If you import a recipe or a job posting from a web address, our server requests that page from the website. The website sees a request from our server, not your personal information.

Ashlar staff. Authorised Ashlar staff can access account information when needed to provide support, keep LifeAnchor secure, or meet legal obligations. They use controlled support tools rather than direct database access. Exporting a household’s data in bulk is limited to super-administrators, requires a written justification and is logged. Emergency access to health information is time-limited (60 minutes) and logged.

Legal requirements and protection. We may disclose information if we believe in good faith it is required by law, subpoena, court order or other legal process; to respond to a lawful request from a government authority; or to protect the rights, property or safety of our users, Ashlar or the public, including to prevent fraud or address security issues. Where the law allows, we will try to tell you before disclosing your information in response to a legal demand.

Business transfers. If Ashlar is involved in a merger, acquisition, financing, reorganisation, bankruptcy or sale of all or part of its business, personal information may be transferred as part of that transaction. The recipient will be required to honour this policy, and we will notify you before your information becomes subject to a materially different privacy policy.

With your consent or at your direction. We will disclose information in other ways if you ask us to or agree to it.

11.How AI features handle your data

LifeAnchor does not supply AI. Instead, your family’s admin connects your family’s own account or API key with Anthropic, OpenAI, Google (Gemini) or another provider that uses an OpenAI-compatible interface. When a member uses an AI feature, the information that feature needs is sent to that provider under your family’s account and the provider’s terms and privacy policy, and the provider bills your family directly. Ashlar does not train AI models on your data.

We add our own safeguards:

• Health information is sent only to first-party Anthropic, OpenAI or Google connections that an admin has confirmed. Health-related AI is blocked for children under 13, and members under 18 get stricter rules in the AI coach.
• Finance AI is off unless your family turns it on, is available only to adults, and never sends account names or numbers, notes or member names.
• AI features do not interpret vital readings, diagnose, or calculate or adjust insulin or medication doses.
• AI conversation history is saved only if the member opts in, is visible only to that member, and can be deleted at any time.
• We log every AI request for security, but the log keeps only a fingerprint of the prompt, not its content.

Voice input in the fitness companion uses your browser’s built-in speech recognition, which is processed by your browser’s maker under its own privacy terms. Meeting transcription in the Prompter tool uses your family’s OpenAI key. More detail is in our AI Notice.

12.How we protect your information

We use administrative, technical and physical safeguards designed to protect personal information. Among other things:

• All connections to LifeAnchor use HTTPS (TLS), with HSTS and strict security headers.
• Every database table is protected by row-level security, and automated tests regularly try to read data across households to check that these protections hold.
• Our hosting providers encrypt stored data. On top of that, we separately encrypt certain especially sensitive data, including Vault documents (each with its own key), identity numbers on profiles, bank routing and account numbers, credentials and tokens for connected email, calendar, contacts and health-device accounts, AI keys, health-goal notes and attachments, and medication label photos.
• Access to health information is recorded in an append-only, hash-chained audit log, and every AI request is logged.
• Two-step verification by emailed code is available for adult accounts where enabled, and sessions end after a period of inactivity and after a maximum length.
• We rate-limit sign-up, AI and other endpoints, and staff access is controlled and logged as described above.

If we discover a breach of unsecured health information, we will notify affected people and the Federal Trade Commission as the FTC Health Breach Notification Rule requires, and we will notify people and authorities of other breaches as applicable law requires. You can help by using a strong, unique password, keeping your email account secure (because sign-in links and codes are sent there), and telling us at once if you suspect unauthorised access. More detail is in our Security page.

13.How long we keep information

We keep account data while your account is active. Once we have verified a request to delete your account or data, we delete it within 30 days. The exceptions are:

• A record of your privacy request (date, type, how it was made, outcome and the reason for any denial), kept for 24 months and used only to show we handled requests properly.
• A minimal record that the account was deleted (identifiers and a hashed email address only), kept for 24 months so the account stays deleted, for example if a backup is ever restored.
• Proof that you accepted our Terms of Service (account identifier, hashed email address, Terms version and date), kept for 5 years after the account closes to enforce the Terms, including the arbitration agreement.
• Billing and tax records, once paid billing begins (nothing is charged during the beta) — billing details only, kept for 7 years.
• Anything under a legal hold or a law-enforcement preservation request, only until it is released.
• The health-information audit log, which we keep for at least six years as a security record.
• Encrypted backups. Our database backups are kept for about 7 days on a rolling basis, so deleted data leaves them within 30 days as they expire. Backups are not restored except for disaster recovery, and if one is, we re-apply deletions.

When a Vault document is deleted, its encryption key is destroyed immediately, so the document can no longer be read. AI conversation history is kept only if you opt in, and you can delete it at any time; our AI request log keeps only a fingerprint of each prompt. Usage records are kept only as long as they are useful for the purposes above and are deleted with the account. If a member is removed from a household, their data is kept until deletion is requested.

More detail is in our Data Retention page.

14.Your rights and choices

Depending on where you live, you may have some or all of the rights below. We offer them to all LifeAnchor users regardless of where they live, subject to the limits the law allows.

• Access and copy. Ask us to confirm whether we process your personal information and to give you a copy of it, in a portable format where feasible.
• Correct. Ask us to correct inaccurate information. You can also edit most information directly in LifeAnchor.
• Delete. Ask us to delete your personal information or your account.
• Withdraw consent. Where we rely on your consent — for example, for health information — withdraw it at any time. Withdrawing consent does not affect processing that already happened.
• Opt out of sale, sharing, targeted advertising and profiling. We do not sell or share personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects, so there is nothing to opt out of. You may still send us an opt-out request, and we will record it.
• Limit use of sensitive information. We already use sensitive information only to provide LifeAnchor and for the other purposes the law permits.
• Appeal. If we decline your request, you can appeal our decision.
• Non-discrimination. We will not discriminate against you for exercising your privacy rights.

You also have choices inside LifeAnchor: you decide which modules and integrations to use, you can disconnect an outside service at any time, you can choose whether to save AI conversation history and delete it, members can share or withhold health metrics, and the account holder can change household permissions.

15.How to make a privacy request

Email [email protected] and tell us what you would like us to do. There is not yet a self-service button for deleting an account; deletion is handled by email.

• Verification. To protect your information, we verify your identity before acting. Usually we ask you to write from, or confirm a message sent to, the email address on your account. For sensitive requests we may ask for more information, which we will use only to verify you.
• Requests about a child or another member. A parent or guardian can make requests about the children in their household. An account holder’s request to delete a whole household affects every member, so we may contact adult members first.
• Authorised agents. You can ask someone to make a request for you. We will ask for written permission signed by you (or a valid power of attorney) and may ask you to verify your identity with us directly.
• Timing. We respond within 45 days of receiving your request. If we need more time, we may extend this once by up to a further 45 days and will tell you why. Once we have verified a deletion request, we complete the deletion within 30 days.
• Cost. Requests are free. If requests are manifestly unfounded, excessive or repetitive, we may decline them or charge a reasonable fee, as the law allows, and will explain why.
• Appeals. If we decline your request, reply to our decision email with the word “Appeal” and tell us why. We will respond within 45 days and explain our decision. If we deny your appeal, you can contact your state attorney general; Washington residents can file a complaint with the Washington Attorney General.

16.Additional information for residents of certain US states

Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Jersey, New Hampshire, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Nebraska, Rhode Island and other states with comprehensive privacy laws have rights under those laws, to the extent the laws apply to us. Depending on where you live, these may include the rights to confirm and access your personal information, to obtain a portable copy, to correct it, to delete it, to opt out of sale, targeted advertising and certain profiling, and to appeal a decision about your request. Some states also give you the right to obtain a list of the categories of third parties (or, in some states, the specific third parties) to whom we have disclosed your information; ask us and we will provide it.

Several of these laws treat health information, information about children, government identifiers, financial account details and account credentials as sensitive data that may be processed only with consent or only as necessary to provide the service. We process sensitive data only to provide the features you or your household choose to use, and we ask for consent where the law requires it — for example, for health information, as described in our Consumer Health Data Privacy Policy, and for children’s information, as described in our Children’s Privacy Notice.

We do not sell personal information, do not process it for targeted advertising, and do not use it for profiling in furtherance of decisions that produce legal or similarly significant effects. We do not knowingly sell or share the personal information of anyone under 18. You can make any of these requests as described in How to make a privacy request.

Washington and Nevada residents: our Consumer Health Data Privacy Policy describes your rights in consumer health data under Washington’s My Health My Data Act and Nevada law.

17.California residents

If you live in California, the California Consumer Privacy Act (as amended by the California Privacy Rights Act) gives you the rights to know, access, delete and correct your personal information, to opt out of its sale or sharing, to limit the use of sensitive personal information, and not to be discriminated against for exercising these rights. In the past 12 months we have collected the categories of personal information below and disclosed them for business purposes as shown. We have not sold or shared any of them.

The sources of this information, our purposes for collecting it and how long we keep it are described in the sections above. We use sensitive personal information only for purposes the CCPA permits, such as providing the services you request and keeping LifeAnchor secure, so we do not offer a separate right to limit. California’s “Shine the Light” law lets residents ask about disclosures to third parties for their direct-marketing purposes; we make no such disclosures.

To exercise your California rights, follow the steps in How to make a privacy request, including through an authorised agent.

18.Global Privacy Control and Do Not Track

Global Privacy Control (GPC) is a browser setting that tells websites you want to opt out of the sale or sharing of your personal information. We honour GPC: we treat it as a valid opt-out request for that browser. Because we do not sell or share personal information or use it for targeted advertising, nothing about how LifeAnchor treats you changes when the signal is on.

Some browsers also send a “Do Not Track” signal. We do not track you across other websites, so there is no cross-site tracking for the signal to turn off. See our Cookies & Local Storage Notice for the cookies and storage LifeAnchor uses.

19.Children

People who sign up for LifeAnchor must be 18 or older. Children and teens may use LifeAnchor only as members of a household, added by a parent or legal guardian who is the household’s account holder or admin. Children cannot sign themselves up, and we do not send emails to child members.

Our Children’s Privacy Notice explains what we collect about children, how parents consent and control it, and what happens when a child turns 18. If we learn that we have collected personal information from a child under 13 without a parent’s consent, we will delete it.

20.Where your data is stored

LifeAnchor is operated from the United States, and we store account data with our hosting providers in the United States. Some public-data services we use for weather, gym search and food lookup may operate servers outside the United States; they receive only the limited information described above (such as a ZIP-code centre point, location text or a barcode). AI providers and services you connect may process data in other countries under their own terms.

LifeAnchor is intended for people in the United States. If you use it from elsewhere, your information will be transferred to and processed in the United States.

21.Emails we send

We send transactional emails only: for example, sign-in links, two-step verification codes, invitations and messages about your account or privacy requests. We do not send marketing emails today. If we start, we will send them only as the law allows and every marketing email will include a way to unsubscribe. You cannot opt out of transactional emails while you have an account, because they are needed to provide and secure the service.

22.Links to other websites

LifeAnchor contains links to other websites — for example, the pharmacy buttons are simply links to the pharmacy’s website. When you follow a link, the other website’s privacy practices apply, not ours.

23.Changes to this policy

We may update this policy as LifeAnchor changes or the law changes. We will post the updated version here with a new effective date and version number. If we make a material change — especially one that affects how we use or disclose personal information you have already given us — we will tell account holders by email or in the app before it takes effect and, where the law requires, ask for consent.

24.Contact us

Questions, requests or complaints about this policy or your personal information:

Ashlar Enterprises LLC, 9905 S Pennsylvania Ave, Suite A, Oklahoma City, OK 73159 · (405) 957-9360 · [email protected]