Life Privacy Policy

Last updated: September 15, 2026

This English version is provided for convenience. The Japanese version (プライバシーポリシー) is the legally binding text; if the two differ, the Japanese version prevails.

"Life" (the "App") is developed and provided by Taro Eiyo (known as "Neil") as an individual developer (the "Developer"). This Policy explains how the App handles your information.

Our Principle: Your Data Stays on Your Device

The App is a lifelogging app whose purpose is to turn everyday life into memories without effort. By its nature it handles private information such as photos and location, but photo analysis, place and health records, and assembling the draft diary happen on your device. Photos, videos, location, and Health data are never sent to the Developer's servers, and the Developer cannot see them.

Only if you turn on the Premium features "Write diary with AI" or "Your last month", the text materials of your diary (times, place names, photo counts, steps, event titles), your answers to the AI's questions, and last month's diary text are sent through the Developer's relay server to the AI provider (Anthropic, PBC). Photos themselves are never sent. Registered people's names are replaced with placeholders such as "Friend A" before sending and restored in the returned text, so no names reach the provider. What you send is never used to train AI models.

Only when you use the partner connection feature or "Write diary with AI", an anonymous per-device identifier is issued and used on the sync server and the relay server. For the partner feature, the information needed for sync (plans, anniversaries, display name (nickname), Premium status) is stored on the sync server. The Developer can technically access information on these servers but uses it only to keep sync working, manage usage limits, and investigate problems.

Information We Collect and How We Use It

Information	How it is obtained	Purpose	Sent outside the device?
Photo library (photos, videos, capture date and time, capture location)	Read on-device with your permission	Automatic generation of past and daily "memories" and diary entries, selection of best shots (on-device image analysis only), display of place names for capture locations	Not sent to the Developer. Only the coordinates needed for place names and map display are sent to Apple's map services (MapKit / CLGeocoder)
Photo analysis results (groups of similar faces) planned for a future update	Generated only by on-device image analysis when provided	Display of "people you spent time with". No identifying face recognition is performed; you name the groups yourself	No
Profile (name, date of birth (optional))	Entered at registration	Display name and age-appropriate display	Only the name, and only to the sync server when the partner connection feature is turned on
Health data (steps, heart rate, exercise time, walking distance, sleep)	Read from HealthKit with your permission	Display of "Today's Body" and similar, and step counts in the diary	No
Apple Music play history (recently played songs)	Read with your permission	Display of "recently played songs"	No
Location (While Using)	Obtained with your permission	Recording the day's activity, detecting visited places, registering home and work	Not sent to the Developer. Only the coordinates needed for place names and map display are sent to Apple's map services (MapKit / CLGeocoder)
Location (Always, "Life Log")	Obtained only when you explicitly enable Settings → Connected Services → "Life Log". Records only visits, significant location changes, and arrivals at or departures from home and work; routes are not tracked continuously	Automatically noting in the diary when you left home and where you spent time, even while the App is closed (records stay on the device; diary records are kept for the most recent 60 days)	Not sent to the Developer. Only the coordinates needed for place names and map display are sent to Apple's map services (MapKit / CLGeocoder)
Motion and activity data (walking and vehicle segments)	Read from iOS activity records with your permission	Adding notes such as "walked for 15 minutes" or "travelled by train or car" to the diary	No
Calendar (iPhone calendar events, including events from Google and other accounts)	Read and written with your permission	Showing events in Life's calendar and diary, and writing plans created in Life to the iPhone calendar	No
Face ID / Touch ID	Uses the device's lock feature	Unlocking the App when opening it (biometric data itself is never passed to the App or the Developer)	No
Notifications	Used with your permission	Notices that the diary is ready or that memories are available (local notifications generated on the device)	No
Purchase information	App Store in-app purchase	Checking whether the subscription is active	Sent only to the subscription management service (below)
Data synced through the partner connection feature (plan title, date and time, notes; anniversaries; display name (nickname); Premium status; anonymous identifier)	Registered by your own actions, only when the partner connection feature is turned on	Syncing plans and anniversaries between the two devices	Sent only to the sync server (below)
AI diary materials (the day's text record = times, place names, photo counts, steps, event titles; your answers to the AI; last month's diary text; anonymous identifier)	Only when you turn on "Write diary with AI" on a Premium plan and agree to what is sent	Generating the AI's questions, the diary draft, and the monthly summary	Sent via the relay server to the AI provider (below). Photos, coordinates, and registered names are not sent

Diary entries, tags, memories, and similar data are stored on your device.
Data on your device may be included in your iCloud backup or iTunes (Finder) backup (encrypted by Apple; the Developer cannot access it).
When the "backup" feature for paid plans (planned for a future update) becomes available, the diary and memory data of users who enable backup, and the images used in the diary (up to 5 per day), will be stored in an encrypted area. This Policy will be revised with details when the feature is provided.

Information Sent from Your Device to Third Parties

The App sends information from your device to outside companies only in the following cases. There is no transmission for advertising or behavioural targeting, and no use of cookies, advertising identifiers, or analytics SDKs.

Recipient (company, country)	Information sent	When	Developer's purpose	Recipient's purpose
Supabase, Inc. (US company; data stored in Japan, AWS Tokyo region)	Anonymous user ID and authentication token, display name (nickname), plans (title, date and time, notes), anniversaries, Premium status, and connection information such as IP address	From the time you issue or enter a secret code in the partner connection feature	Syncing plans and anniversaries between the two devices	Providing the sync infrastructure (database and authentication) to the Developer; access logs for service operation
Anthropic, PBC (US company; AI provider)	The day's text record (times, place names, photo counts, steps, event titles), your answers to the AI, last month's diary text. Names already replaced with placeholders. No photos or coordinates	When you use "Write diary with AI" or "Your last month" on a Premium plan	Generating the AI's questions, the diary draft, and the monthly summary	Providing AI responses to the Developer. Content is not used to train AI models (per the provider's commercial API terms) and is retained briefly for abuse monitoring (up to 30 days as of September 2026), then deleted
Supabase, Inc. (AI relay server; data stored in Japan, AWS Tokyo region)	The AI diary materials above (forwarded only, not stored), anonymous user ID, subscription check result, daily usage count, connection information such as IP address	When you use "Write diary with AI" or "Your last month"	Forwarding securely to the AI provider, verifying the subscription, and managing usage limits	Providing the execution platform to the Developer; access logs for operations
RevenueCat, Inc. (US company; data stored in the US)	App Store purchase receipt (purchase history), anonymous app user ID, device model, OS version, app version, language and currency settings, and connection information such as IP address	At app launch, at purchase, and when restoring purchases	Checking whether the subscription is active	Providing the subscription management service to the Developer (receipt validation and fraud prevention)
Apple Inc. (maps and reverse geocoding: MapKit / CLGeocoder)	Coordinates needed for place names and map rendering, and search strings entered when entering an address	When showing place names for visited places, showing the travel map, and searching addresses	Showing place names for capture locations and visited places, and rendering maps	Providing Apple's map services (subject to Apple's privacy policy)
Apple Inc. / iTunes K.K. (App Store, in-app purchase)	Information needed for the purchase (processed by Apple; the Developer does not receive card details)	At purchase and restore	Payment processing	Subject to the Apple Media Services Terms and Conditions

When you remove your partner or choose "Delete All Data", the data on the sync server (Supabase) is also deleted.

In addition, once a day at launch the App performs a connection check to the sync server and asks the App Store's public catalog (Apple's servers) for the latest version. Neither sends any of your information (the former prevents the server from being paused; the latter shows an update notice).

Limits on Sharing and Use

Except for the external services above (processors), the Developer does not provide your information to third parties, unless disclosure is required by law.
Health data, location, and photos are never used for advertising, marketing, or sale. The App shows no advertising.

Disclosures under the Act on the Protection of Personal Information (Japan)

Name and address of the business operator handling personal information: Taro Eiyo (the address will be provided without delay on request)
Purposes of use: As stated in the table "Information We Collect and How We Use It". The information is not used for any other purpose.
Processors and third parties in foreign countries: Sync processing for the partner connection feature is entrusted to Supabase, Inc. (US company; data stored in Japan, AWS Tokyo region), and subscription verification to RevenueCat, Inc. (US company; data stored in the US). Both are "third parties in a foreign country (the United States)" under Japan's Act on the Protection of Personal Information. The United States has no comprehensive personal information protection law covering businesses in general like Japan's; instead it has sector-specific federal and state laws (see the Personal Information Protection Commission's survey of foreign data protection systems). Both companies handle data only within the scope of the Developer's instructions under data processing agreements, and apply safeguards such as encryption of data in transit and at rest, access controls, and third-party security audits. By turning on the partner connection feature (issuing or entering a secret code) and by making an in-app purchase, you consent to the provision (entrustment) to the foreign third parties above.
Summary of security measures: Encryption in transit (TLS); row-level access control on sync data (readable and writable only by you and your registered partner); anonymous IDs with no email address or phone number collected; two-factor authentication on the Developer's admin accounts; awareness of the external environment when handling personal data abroad, as described above.
Disclosure, correction, addition, deletion, and suspension of use of retained personal data: You can delete data on the sync server yourself in the App via "Remove partner" or "Settings → Privacy → Delete All Data". Requests are also accepted at the contact address below (we may ask you to confirm your registration details in the App for identity verification; no fee is charged).
Sensitive personal information: Information that may qualify as sensitive personal information, such as Health data, is processed only on the device and is not sent to the Developer or any third party.
Complaints: lifeapp.support@gmail.com
Users under 16: Consent to the collection of information from users under 16, and to its provision to third parties in foreign countries, must be given by a parent or legal guardian.

Family Check-in Feature (Planned for a Future Update)

Not currently provided. When provided, it will follow these principles, and this Policy will be revised accordingly.

Parental consent: Starting check-in requires explicit action on both the parent's and the child's device (linking by code and approval).
No hidden monitoring of children: The child's device will always show that check-in is active.
Automatic limits as the child grows: The information shared narrows automatically by school year, and sharing of current location and photos ends automatically when the child enters high school.
Children under 13 may use the feature only under parental management.

Deleting and Exporting Data

All users, including those on the free plan, can export and delete their data at any time in the App via "Settings → Privacy".
Permissions for Photos, Location, Health, Motion, Calendar, and so on can be revoked at any time in iOS "Settings → Privacy & Security". Collection of that information stops as soon as the permission is revoked.
Data synced through the partner connection feature is also deleted from the sync server when you remove your partner or choose "Delete All Data". If you delete the App without doing either, the data on the sync server remains until your partner removes the connection (the Developer will delete it on request).
There is currently no backup feature (planned for a future update). Deleting the App deletes the data on your device, so export your data first if you need it.
Cancelling a paid plan never deletes your data (some features are simply locked).
If you turn off "Write diary with AI" in Settings, no further content is sent. Content already sent is deleted after the AI provider's retention period. Usage counts on the relay server are deleted automatically after 60 days.
Retention periods: Data on the device, until you delete it; Life Log diary records, the most recent 60 days; data on the sync server, until the partner connection is removed; AI diary materials, up to 30 days at the AI provider (per its policy) and usage counts on the relay server for 60 days; purchase information, for as long as needed to manage the subscription.

Changes to This Policy

This Policy may be revised as features are added. Important changes will be announced in the App or in the App Store update notes.

Contact

lifeapp.support@gmail.com