Privacy policy

The business that operates Life Hub is responsible for the personal information it holds. The person in charge of the protection of personal information oversees this policy and answers your requests. Their title and contact details are shown below.

• Account: email address, display name, language, time zone, display and notification preferences, age attestation.
• What you enter: tasks, deadlines, events, work schedules, trips, special dates, notes.
• Financial information: income and expenses, subscriptions, budget targets and, if you choose to track them, your debts (creditor, balance, rate, payments, status, including a default).
• Photos: receipts, bills, invitations and product photos you choose to attach or have read, your background photo and a hub's cover photo.
• Email, only if you connect a mailbox or forward a message to your hub's address: sender, subject, excerpt and amounts of the messages kept. Your mailbox's app password or access token is encrypted.
• Payment, only if you take a paid plan or credits: your plan, its dates, the amounts paid and your Stripe customer id. Your card number is entered at Stripe; we never see it.
• Device and logs: your browser's push-notification address, technical logs (IP address, date, page requested).

We use no advertising or audience-measurement tools. We use only the cookies the service needs to work: your sign-in session, protection against request forgery, and the hub you picked. A few display settings (such as “reduce motion”) are kept on your device only.

• Run the app and show you your information.
• Show the members of your hub what you mark as shared there.
• Send you the morning summary, reminders and invitations you asked for.
• Turn a sentence, a photo or an email into a task, event or expense, when you ask.
• Protect the service (usage limits, abuse detection) and meet our legal obligations.

We use your information for no other purpose without your consent. We do not sell it, rent it or use it for advertising.

You consent to the uses described here when you create your account and confirm you are 14 or older.

Your debts (creditor, balance, rate, payments, default status) are sensitive information. Before your first debt we ask for your express consent, on a separate screen, with an unticked box. Showing your debt tracker to the members of a hub asks for a new consent, for that hub. Each consent is recorded with its date and the version of this policy.

You can withdraw a consent at any time, where you gave it. Withdrawing your consent for debts stops their processing everywhere in the app (summaries, budget, reminders).

By default: your private items stay private, your debts are shown to nobody, your email address is not visible to other members, and AI analysis of your email is off.

Life Hub uses AI from Anthropic (United States) to: (1) turn what you type, dictate or photograph into tasks, events or expenses, when you ask; (2) sort the email from your connected mailbox or forwarded to your hub (bill, appointment, subscription).

Sorting email can reveal things about your financial situation. It is off by default: you turn it on for a hub on the Email page by ticking the box provided, and you can turn it off there at any time. Promotional or purely informational emails are set aside and not kept.

No decision based exclusively on automated processing is made about you. What the AI suggests waits for your confirmation, except automatic filing you authorised for a trusted sender; you can undo it and withdraw that trust.

Anthropic processes this data on our behalf, under agreement, and under its commercial terms does not use it to train its models.

Voice dictation: speech recognition is done by your browser or phone (for example Apple or Google), under their own policies. Life Hub only receives the text.

Active members of a hub see what you mark as shared there, your display name and, if you choose, your email address. They never see your private items or your debts, unless you consented to show your debt tracker to that hub.

Someone who was invited but has not accepted yet sees nothing of the hub.

Our service providers process your information on our behalf, under written agreement, and only to provide the service:

• Vercel (United States): app hosting, technical logs and photo storage.
• Neon (United States): database.
• Resend (United States): sending sign-in links, summaries and invitations.
• Anthropic (United States): AI.
• Stripe (Canada and United States): payments, invoices and receipts, only if you take a paid plan or credits.
• Cloudflare (United States and worldwide): receiving email forwarded to a hub's address.
• Open-Meteo (Switzerland): trip weather; receives only the destination name, nothing that identifies you.

If you connect your mailbox, Life Hub accesses it at your provider (Google, Yahoo or Microsoft), under its terms.

Your information is therefore communicated outside Québec. We do so only after assessing the privacy factors (sensitivity, purpose, safeguards, the legal framework of the place) and concluding it receives adequate protection there. Once in the United States, it may be subject to that country's laws, including requests from its authorities.

We communicate your information to no one else without your consent, except where the law requires or allows it.

• Your account and content: for as long as your account exists.
• Analysed email (review inbox): 90 days after it arrives, whether or not it was handled.
• A hub's activity feed (“who did what”): 90 days.
• Unused sign-in links and usage-limit counters: deleted daily once expired. Email addresses in them are replaced by a keyed fingerprint.
• Technical logs and backups: for the short period set by our hosting and database providers.
• Payments: the amounts and dates of payments are kept six years for our accounting and tax obligations. When you delete your account, they are no longer linked to you on our side; Stripe keeps its own records as the law requires.

When you delete your account, we erase your personal information, your private items, your debts and your photos. What you had shared in a hub stays there for the other members, since it is their information too, but is no longer linked to your account.

Passwordless sign-in by emailed link, sessions limited to 7 days, encryption in transit (HTTPS), encrypted mailbox access, hub isolation enforced by the database itself, restricted access.

Photos are stored at addresses that cannot be guessed, but anyone who has the link can open them: do not attach a photo of an ID or a bank card.

We keep a register of every confidentiality incident. If an incident presents a risk of serious injury, we promptly notify the Commission d'accès à l'information and the people concerned.

You can ask for access to your information, its correction, the withdrawal of your consent and, where the law provides for it, that it stop being disseminated or be de-indexed.

You can download all your data in a structured, commonly used format (JSON) from Your account, or ask us to send it to a person or organisation you name. You can also delete your account from Your account.

For any request, write to the person in charge (section 1). We answer in writing within 30 days.

Complaints: write to the person in charge first. If you are not satisfied with the answer, you can contact Québec's Commission d'accès à l'information (cai.gouv.qc.ca, 1 888 528-7741) or, outside Québec, the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Life Hub is for people aged 14 and over. Debt tracking, connecting a mailbox and any paid plan are for people aged 18 and over. We ask for a simple attestation and do not collect your date of birth.

Before any significant change, we tell you in the app and by email. If a change affects a use you consented to, we ask for your consent again. The date and version at the top of the page show the version in force.