Privacy Policy

MyLifeOS AI ("we", "us", "our") operates the MyLifeOS application available at mylifeosai.com. We provide an adaptive life operating system that helps users build momentum across key life systems. If you have questions about this policy, contact us at: mylifeossystem@gmail.com

We collect the following categories of data: Account data: email address, encrypted password (managed by Supabase Auth). Behavioral signals: energy levels, recovery scores, focus ratings, sleep quality, stress levels, body condition — collected through voluntary morning calibration check-ins. Progress data: momentum score, XP points, streak counts, mission completion history, skill progress, tier levels. Profile data: life state, selected life systems, goals, struggles, daily capacity, recovery profile — collected during onboarding. Usage data: pages visited, features used, session timestamps. We do not collect: real name, phone number, location, payment data, or biometric data from devices.

We use your data to: — Provide the core service: adaptive state calculation, mission recommendations, and progress tracking. — Improve recommendations: your behavioral signals help the system adapt intensity, mission load, and operating state. — Generate AI insights: anonymized behavioral patterns may be used to generate personalized insights via Anthropic's Claude API. — Send transactional emails: account confirmation, password reset, and welcome messages. — Improve the product: aggregated, anonymized usage data helps us identify bugs and improve features. We do not use your data for advertising. We do not sell your data to third parties.

We use the following third-party services to operate MyLifeOS: Supabase (supabase.com): database and authentication provider. Your account data and progress data is stored on Supabase infrastructure. Supabase is GDPR compliant and processes data in the EU. Anthropic (anthropic.com): AI model provider. When you use AI-powered features (insights, theory generation), anonymized contextual data is sent to Anthropic's Claude API. We do not send personally identifiable information to Anthropic. Vercel (vercel.com): hosting and deployment provider. Standard server logs may be collected. Google Tag Manager (google.com): analytics tag management. Used for product analytics. No personal data is passed to GTM. We do not share your data with any other third parties.

Account data: retained as long as your account is active. Deleted within 30 days of account deletion request. Progress and behavioral data: retained as long as your account is active. You can reset all data at any time from your Profile page. AI usage logs: retained for 30 days for rate limiting purposes, then automatically deleted. State history: last 30 days of operating state history is retained for trend analysis. Older records are automatically deleted.

If you are located in the European Economic Area, you have the following rights: Right to access: you can request a copy of your personal data at any time. Right to rectification: you can update your profile data within the app. Right to erasure: you can delete all your data using the "Reset all data" button in your Profile, or by emailing mylifeossystem@gmail.com. Right to data portability: you can request an export of your data. Right to object: you can opt out of analytics by disabling cookies in your browser. Right to withdraw consent: you can stop using the service and request data deletion at any time. To exercise any of these rights, contact: mylifeossystem@gmail.com

MyLifeOS uses browser localStorage to store your preferences, cached AI responses, and session state locally on your device. This data is not transmitted to our servers unless you are logged in. We use Google Tag Manager for analytics. You can opt out of analytics tracking by using browser settings or extensions. We do not use advertising cookies.

We implement the following security measures: — All data is transmitted over HTTPS. — Passwords are hashed and managed by Supabase Auth — we never see your plain-text password. — Row Level Security (RLS) is enabled on all database tables — each user can only access their own data. — API keys and service credentials are stored as environment variables, never in client-side code. While we implement industry-standard security practices, no system is 100% secure. We encourage you to use a strong, unique password.

MyLifeOS is not intended for users under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact mylifeossystem@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify registered users of significant changes via email. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of MyLifeOS after changes constitutes acceptance of the updated policy.

For any privacy-related questions, requests, or concerns: mylifeossystem@gmail.com We aim to respond to all requests within 30 days.