Privacy Policy
Last updated: 10 June 2026
This Privacy Policy explains how LIFE AI ("we", "our", "us") collects, uses, shares and protects your personal data when you use the LIFE AI mobile application (the "App"). It is written to comply with the EU General Data Protection Regulation (GDPR), the Swiss Federal Act on Data Protection (FADP) and equivalent data-protection laws.
1. Who we are
LIFE AI is a mobile application that helps you understand documents, photos, texts and short voice messages by extracting key information (names, dates, amounts, actions) using artificial intelligence. The data controller under GDPR is Amine Sassi, established in Switzerland. Contact details are provided at the end of this document.
2. Information we collect
We only collect the data strictly necessary to operate the App. Categories: (a) Account data: email address, password (stored only as a salted bcrypt hash), display name, preferred interface language, subscription plan, unique user identifier (user_id), account creation timestamp, and — when you sign in with Google — the profile picture URL returned by Google. (b) Session data: an opaque session token generated on the server and stored securely on your device (iOS Keychain / Android Keystore via expo-secure-store; browser storage on web preview). Session expiration is tracked server-side and auto-deletes after 30 days of inactivity. (c) Content you submit for analysis: photos and document files you upload; free-form text you type; short voice recordings you record. Documents and photos are stored as file objects (see §7). Free-form text is stored in our database associated with your user_id. Voice recordings are transmitted in memory to the speech-to-text provider for transcription and are NOT persisted on our servers; only the resulting text transcript is stored. (d) AI-generated analysis results: the structured output produced by the AI (title, summary, dates, amounts, actions, category, risk level, cited sources when present) is stored with your user_id. (e) Reminders you create: title, description, note and scheduled date. (f) Family sharing (if you use the Family plan): family identifier, membership list, invite code, and — for documents you explicitly mark as shared — a shared-with-family flag. (g) Push-notification tokens: device push token and platform (iOS / Android), if you grant notification permission. (h) Privacy-safe analytics: a fixed list of product events (for example: paywall_viewed, upgrade_started, feature_locked) with your user_id and a small set of non-sensitive properties. Free-form text, email addresses, audio bytes, passwords and session tokens are stripped both client-side and server-side before storage. (i) Technical safety data (in memory only, not stored): your IP address is used briefly for rate-limiting and abuse prevention and is not written to any database.
3. How we use your information
We use your data to: (i) create and authenticate your account; (ii) run AI analysis on the content you submit; (iii) show and let you manage your document history, reminders and family group; (iv) enforce free-tier usage limits and, where applicable, Premium entitlements; (v) send you push notifications for reminders you created; (vi) improve the App through aggregated, privacy-safe analytics; (vii) protect the service against abuse, fraud and security incidents.
4. Artificial-intelligence processing
When you submit content for analysis, the App transmits it to third-party AI providers acting as our sub-processors: • OpenAI (GPT-5.4 Vision) receives the raw bytes of the photo/document and, when applicable, your free-form text. It returns the structured analysis. • OpenAI Whisper (whisper-1) receives the raw audio bytes of your voice recording and returns a text transcript. The audio is not retained on our servers. Requests to these providers are routed through the Emergent Universal LLM Key gateway. AI outputs may be incorrect, incomplete or outdated: LIFE AI is a decision-support tool and does not provide legal, medical, tax, notarial or financial advice. See our Terms of Service.
5. Third-party services (sub-processors)
We rely on the following processors, strictly for the purposes listed: • OpenAI, L.L.C. — AI document analysis (GPT-5.4) and speech-to-text (Whisper-1); receives content submitted for analysis. • Emergent Managed Google Authentication — if you sign in with Google, we exchange a short-lived session identifier and receive from Google your email, display name and profile picture URL. • Emergent Managed Object Storage — encrypted-at-rest storage of the document and photo bytes you upload. • Emergent Managed Push Notifications — delivery of reminder notifications; receives your user_id, device push token, platform and the reminder title / body. • Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) — final delivery of push notifications to your device. • RevenueCat, Inc. — subscription management for Premium plans (activation and status of your entitlement). Payment card data is handled by Apple / Google and NEVER touches our servers. This sub-processor is active as soon as the RevenueCat integration is enabled in the App. Hosting infrastructure: our MongoDB database and Emergent Managed Object Storage are operated by Emergent, LLC on managed cloud infrastructure. Emergent, LLC does not publicly disclose the exact data-center region for these managed services at the date of this notice. For a documented data-processing due-diligence request (DPIA, transfer impact assessment), contact us at the address in section 13 and we will forward your request to Emergent, LLC.
6. Legal bases for processing (GDPR)
We process personal data on the following bases: • Performance of a contract (art. 6(1)(b) GDPR) — creating your account, running AI analysis you requested, delivering reminders you configured, managing your subscription. • Consent (art. 6(1)(a) GDPR) — sign-in with Google; push notifications; processing of voice recordings. • Legitimate interest (art. 6(1)(f) GDPR) — security, abuse prevention, rate-limiting, privacy-safe product analytics. • Legal obligation (art. 6(1)(c) GDPR) — where applicable to Swiss or EU law.
7. Storage, security and international transfers
Account, document, reminder and analytics data are stored in a managed MongoDB database. Uploaded photos and documents are stored as encrypted-at-rest objects in Emergent Managed Object Storage. All communication between the App and our servers uses HTTPS/TLS. Passwords are hashed with bcrypt and never stored in clear text. Access to your data is scoped by user_id at the database layer. Some sub-processors listed in §5 are established in the United States: transfers rely on the appropriate GDPR safeguards implemented by those providers (Standard Contractual Clauses and, where applicable, EU-U.S. Data Privacy Framework).
8. Data retention and deletion
We keep your data for as long as your account is active. Concretely: • Account, documents, analyses, reminders, family membership and analytics events: retained until you delete them from the App or delete your account. • Session tokens: automatically deleted 30 days after they expire (MongoDB TTL index). • Voice audio bytes: not persisted at any time (in memory only for transcription). • IP addresses: not persisted; kept only briefly in server memory for rate-limiting. When you delete your account (see §9), we perform a cascade deletion of your account record, documents, reminders, push tokens, sessions, analytics events, subscription record and family membership, and we issue best-effort deletion of your uploaded files from Object Storage.
9. Your rights
You have the following rights, exercisable at any time from within the App or by contacting us: • Right of access and portability — export a complete JSON copy of your account, documents and reminders via Settings → Privacy → "Export my data". • Right of rectification — update your name and interface language via Settings. • Right of erasure — permanently delete your account and all associated data via Settings → Privacy → "Delete my account" (requires typing DELETE to confirm). • Right to object and to restrict processing — write to the privacy contact email. • Right to withdraw consent — you may revoke push notification, Google sign-in or microphone permissions from your device settings at any time; the corresponding features will be disabled. • Right to lodge a complaint — with the Swiss Federal Data Protection and Information Commissioner (FDPIC) or the supervisory authority of your EU member state of residence.
10. Children
LIFE AI is not directed to persons under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us and we will delete the data.
11. Push notifications
If you grant notification permission, the App registers a device push token with our push service to deliver reminders you scheduled. You may revoke this permission at any time from your device settings; existing reminders will still exist in the App but will not produce push notifications.
12. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in the App, in our sub-processors or in applicable law. When we make material changes, we will update the "Last updated" date at the top of this page and, where legally required, notify you in-App or by email.
13. Additional sub-processors specific to the Web application
In addition to the sub-processors listed in §5 (which apply to the mobile App), the LIFE AI Web application (accessible via a browser) uses the following additional sub-processors, only when you actively use the corresponding feature: • Stripe, Inc. (United States) — payment processing for Web subscriptions. When you subscribe to Premium via the Web, Stripe receives the data you enter on its Checkout page (email, billing address, payment card). Card data is transmitted directly from your browser to Stripe over TLS and never touches our servers. We receive from Stripe only the transaction status, the subscription identifier and the last four digits of the card for receipt purposes. Legal basis: performance of a contract (art. 6(1)(b) GDPR). Transfers to the U.S. rely on Stripe's Standard Contractual Clauses. • Apple, Inc. ("Sign in with Apple") — if you choose to sign in with Apple on the Web, we verify the signed identity token you provide against Apple's public JWKS. We receive from Apple your Apple user identifier and, on the first sign-in only, your email address (which may be a private relay email chosen by you). No password is exchanged. • Emergent Managed Email (Resend, powered by Resend, Inc.) — transactional emails (account confirmation, password reset, subscription receipts). Receives your email address, display name and the message content necessary to render the transactional email. Legal basis: performance of a contract and legitimate interest for anti-fraud (art. 6(1)(b) and (f) GDPR). • ElevenLabs, Inc. (voice cloning) — currently in preparation mode. A voice profile record (voice_profile_id, provider name, status, consent version) exists in our database only if you visit the "My Voice" screen and give explicit consent. As long as no ElevenLabs API key is provisioned server-side, no audio is transmitted to ElevenLabs and no personal voice is created. When the feature is later activated, this Privacy Policy will be updated in advance and you will be asked to re-confirm consent. Field-level encryption: if you enter sensitive account fields on the Web (for example an IBAN in your professional profile), those specific fields are additionally encrypted at the application layer using symmetric AES encryption (Fernet, key held server-side in `PROFILE_ENCRYPTION_KEY`) before being written to MongoDB. Decryption is performed only in server memory when the value is required to render the field back to you, and never logged. LIFE GRAPH: when the LIFE AI orchestrator identifies structured relationships in your documents (for example a supplier + a contract + a recurring invoice), it may create small internal records in the `life_entities`, `life_edges` and `life_facts` collections in order to remember the context between two conversations. These records are strictly scoped to your user_id and are deleted as part of the account deletion cascade described in §8.
14. Contact
For any question about this Privacy Policy or to exercise your rights, contact the data controller: • Data controller: Amine Sassi • Country of establishment: Switzerland • Postal address: Route de Troistorrents 17, 1872 Troistorrents, Switzerland • Privacy contact email: aminessi1987@gmail.com We will respond to verifiable requests within thirty (30) days.