Privacy Policy

Your data is yours. LifeMapp only collects what is necessary to run the system, and never sells personal data to third parties. This policy explains, in plain terms, what we collect and why.

1. What we collect

• Account: email, name, language, time zone.
• Profile: chosen path, coach voice, intensity, focus area, country, age range.
• System usage: daily check-ins, rituals completed, resets, weekly reviews, reflections.
• Membership: Founder / Impact status, selected cause, subscription state.
• Payments: handled by Paddle. We store transaction and subscription IDs, never card numbers.

2. Why we use it

• To run your dashboard, identity score, streaks, and weekly reviews.
• To send transactional emails (welcome, founder confirmation, weekly review nudges).
• To honor your Founder or Impact membership and selected cause.
• To detect abuse and keep the platform safe.

3. Legal basis (GDPR)

We process your data on the basis of (a) the contract you accept by creating an account, (b) your consent for optional features, and (c) our legitimate interest in operating and improving the platform.

4. Sharing

We share data only with infrastructure providers needed to run LifeMapp:

• Lovable Cloud / Supabase — database, authentication, edge functions.
• Paddle — payment processing as merchant of record.
• Email delivery — transactional sender on a verified subdomain.

We never sell your data. We never share reflections, check-ins, or identity data with advertisers.

5. Your rights

• Access, export, or delete your data at any time.
• Correct inaccurate information from your dashboard.
• Withdraw consent for optional features.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@getlifemapp.com.

6. Retention

We retain account data while your account is active. If you delete your account, personal data is removed within 30 days, except where law requires retention (e.g. payment records).

7. Security

Data is encrypted in transit and at rest. Row-level security enforces that you can only read your own private rows. Webhooks are signature-verified.

8. Cookies

We use essential cookies for authentication and session state. We do not use advertising or cross-site tracking cookies.

9. Changes

Material changes will be communicated by email or in-app before they take effect.