Privacy Policy

Version 1.0.0 · Last updated 31 August 2026 · MYLIFE AI package ai.onspace.mylife · iOS buildNumber 2 · Android versionCode 2

MYLIFE AI processes your personal information solely to organize and remind you of your own records.

1. Data We Collect

Account information (email, name), documents you upload, deadlines and financial entries you create, AI conversations, and standard operational logs.

2. How We Use It

To provide the Service, to secure your account, to detect abuse, and to comply with law.

3. Third Parties

We use a small set of processors (authentication, storage, AI inference, subscription billing). They act as our processors and are contractually bound. We never sell your personal data, and no third party receives your data for advertising, marketing, tracking, or profiling purposes.

4. AI Processing

Only the minimum necessary user records are sent to the AI provider to answer your question. Documents uploaded to the AI provider are not used to train external models.

5. Security

Row-level security, private storage buckets, and strict access controls isolate your data from other users. All traffic between the app and our servers is encrypted with TLS 1.2 or higher.

6. Your Rights

You may access, correct, export, or delete your data from the Settings screen at any time.

7. Retention

Deleting your account removes your personal data. Audit logs are retained for a limited period for legitimate operational and security reasons.

8. Contact

Questions, deletion requests, or privacy-related concerns: contact@onspace.ai.

9. Detailed Data Types (Google Play Data Safety Alignment)

The following table mirrors our Google Play Data Safety declaration and matches exactly what the app collects.

9.1 Collected

9.2 Not Collected

• Approximate location, precise location (Android ACCESS_COARSE_LOCATION and ACCESS_FINE_LOCATION explicitly blocked)
• Contacts (device address book) — Android READ_CONTACTS explicitly blocked
• Calendar events
• SMS / MMS
• Voice or sound recordings — Android RECORD_AUDIO explicitly blocked
• Music files, videos, web browsing history, installed apps list
• Android Advertising ID (AAID) — com.google.android.gms.permission.AD_ID explicitly blocked in the merged manifest
• iOS Identifier for Advertisers (IDFA) — App Tracking Transparency prompt intentionally not requested (NSUserTrackingUsageDescription omitted from Info.plist)
• Cross-app or cross-site tracking data
• Data used to build marketing profiles or advertising audiences
• Race / ethnicity, political beliefs, religious beliefs, sexual orientation
• Credit score, user payment info (handled by Google Play Billing on Android and Apple In-App Purchase on iOS)
• Fitness / step / activity tracking
• Biometric data (Face ID / fingerprint are handled entirely on-device by the OS — we never receive the biometric itself)

9.3 Sharing With Third Parties

No data is sold or shared with third parties for advertising, analytics, or any commercial purpose. The following processors handle data on our behalf to deliver the Service:

10. How to Delete Your Account and All Associated Data

1. Open MYLIFE AI
2. Go to Settings → Privacy & Security → Delete account
3. Confirm the dialog: “This permanently deletes your account, profile and all data associated with it. This action cannot be undone.”

Deletion cascades all your rows in every user-scoped table (documents, deadlines, debts, incomes, expenses, subscriptions, family members, life events, notifications, AI conversations and messages), removes all files under your user ID in the documents and avatars storage buckets, revokes push tokens, deletes your profile, and finally deletes your authentication record.

If you no longer have the app installed, email contact@onspace.ai from your registered email address with the subject “Delete my MYLIFE AI account”. Requests are processed within 30 days.

11. Children

MYLIFE AI is intended for users aged 18 and over. It is not directed at children and does not knowingly collect data from anyone under 13.

12. Changes to This Policy

If we materially change how we handle your data we will notify you inside the app before the change takes effect. The current version is displayed on the in-app Settings → Legal → Privacy Policy screen at all times.

13. Tracking, Advertising & Data Brokerage Transparency

To make the app's stance on tracking and advertising unambiguous — and to match the answers we submit to the Apple App Store's App Privacy questionnaire and Google Play Console's Data Safety form:

• Tracking (Apple's definition): MYLIFE AI does not link user or device data collected in this app with third-party data for advertising, and does not share user or device data with a data broker. App Store Connect → App Privacy → Tracking = No.
• App Tracking Transparency (iOS): The ATT prompt is intentionally never presented. The NSUserTrackingUsageDescription Info.plist key has been removed, and no runtime code calls ATTrackingManager.requestTrackingAuthorization.
• Advertising ID (Android): The Google Play Services advertising-ID permission com.google.android.gms.permission.AD_ID is explicitly blocked and stripped from the merged Android manifest. Play Console → Advertising ID = No.
• Ads: The app contains no advertising SDKs — no AdMob, Facebook Audience Network, Unity Ads, or any other ad network. Play Console → Ads = No.
• Analytics SDKs: The app contains no third-party analytics SDKs — no Firebase Analytics, Segment, Mixpanel, Amplitude, AppsFlyer, or Adjust. Operational metrics (latency, error counters, crash logs surfaced through the platform stores) are used solely to keep the Service running.
• Data brokerage: We do not sell, license, or otherwise transfer your personal data to data brokers.
• Cross-context behavioral advertising: Not performed. (Relevant under CPRA / CCPA — you have nothing to opt out of because nothing happens.)
• Personalized AI: The AI assistant personalizes responses using only your own data inside your account. No cross-user pooling, no profile building for advertising, no third-party sharing of prompts.

14. International Users & Legal Basis

Where GDPR applies, our lawful bases for processing are: (a) performance of a contract for account, subscription and core features you request; (b) legitimate interests for security, fraud prevention, and service integrity; (c) consent for optional features (health dashboard, document uploads); (d) legal obligation for audit and tax records tied to purchases. You may exercise your access, rectification, portability, restriction, objection, and erasure rights at contact@onspace.ai.