Lifeline

Privacy Policy

Last updated: August 29, 2026

Lifeline is a personal, local-first application that helps its user keep track of obligations and open loops found in their own communications. This policy describes what data Lifeline touches and what happens to it.

What data Lifeline accesses

Where the data lives

All data Lifeline collects is stored in a local database on the user's own computer. Lifeline operates no cloud service, no remote server, and no third-party analytics. Data is accessible from the user's own devices only, over the user's own private network.

How the data is used

Lifeline reads communications to identify tasks, commitments, deadlines, and useful context for the user โ€” and for no other purpose. Limited excerpts of message content are sent to AI model providers (Anthropic and Google) solely to perform this analysis on the user's behalf; those excerpts are not used by Lifeline for anything else, and no data is sold, shared with data brokers, or used for advertising, ever.

Google user data โ€” Limited Use. Lifeline's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above, is never sold, never used for advertising, and never transferred except to AI model providers as necessary to provide those features, as permitted for user-facing features.

Human access

No humans other than the user read the data. There is no Lifeline team, support staff, or moderation pipeline with access โ€” the software runs entirely under the user's own accounts on the user's own hardware.

Retention and deletion

Data persists in the local database until the user deletes it. The user can delete any extracted item, thread, or fact from within the app, purge all extracted data with a single command, or delete the entire database file at any time. Disconnecting the Google account (or revoking access at myaccount.google.com/permissions) immediately stops all access to Google data.

Security

The local database is protected by the user's own device security (macOS user account and disk encryption). Remote access from the user's phone travels over a private, end-to-end encrypted network (Tailscale) reachable only by the user's own enrolled devices. OAuth tokens are stored locally and never leave the machine.

Changes

If Lifeline's data practices change, this page will be updated, with the date above revised.

Contact

Questions about this policy: clyonkj@gmail.com.