Effective date: July 6, 2026 · Last updated: July 6, 2026
This Privacy Policy explains how LifeFlow, LLC(“LifeFlow,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use the LifeFlow website and application (the “Service”). LifeFlow is a personal finance and life-planning tool: you enter details about your income, expenses, assets, debts, and goals, and the Service computes net-worth projections and a “freedom year” estimate to help you plan.
LifeFlow, LLC is a limited liability company formed in Vermont, United States. If you have questions about this Policy or your data, contact us at support@getlifeflow.com.
We care deeply about the sensitivity of financial information. This Policy is written to be specific and honest about what we actually collect and who we share it with.
We collect only what we need to operate the Service:
When you create an account, we collect your email address and, if you provide it, your name. Accounts and authentication are handled through our provider Supabase (see Subprocessors below). We do not see or store your password in readable form.
The core of the Service is the information you choose to enter, which may include your income, expenses, assets, debts, savings goals, target retirement age, and related notes. You control what you enter, and you can edit or remove it at any time. We use this data to generate your projections and insights — it is not sold, rented, or used for advertising.
If you purchase a paid subscription, payments are processed by Stripe. We do not receive or store your full card number. Stripe handles card data directly under its PCI-DSS-compliant systems. We receive limited billing metadata (such as subscription status, plan, and the last four digits or card brand) needed to manage your subscription.
We use Vercel Analytics to understand aggregate usage (such as which pages are visited). Vercel Analytics is cookieless and is designed to measure traffic without tracking you across other sites or building an advertising profile.
We use Sentry to capture technical errors so we can keep the Service reliable. Our Sentry configuration is deliberately restricted: it scrubs personal and financial data — request bodies, query strings, cookies, and authentication headers are stripped, default personal-data collection is disabled, and no session recording is used. Error reports contain technical details (such as an error message, a stack trace, and the page path), not the financial values you enter.
If you email us (for example, at support@getlifeflow.com) or receive transactional emails from us, we process the contents of those communications to respond and keep records.
Several optional features are powered by Anthropic’s Claude models: the dashboard “For you” insights, the “Can I afford this?” check, and the premium AI Advisor. When you use these features, a summary of your relevant financial context is sent to Anthropic’s API in order to generate personalized insights and permission-through-clarity guidance.
We send Anthropic only rounded, derived figures— for example, “on track to reach your goal in year 26” or “62% funded.” We do not send your name, and we do not send your individual accounts, balances, or transactions.
Anthropic processes this data as our service provider to return a response. Per Anthropic’s commercial terms, data submitted through its API is not used to train Anthropic’s models. We only send the context needed to answer your request. You can choose not to use these AI features; the rest of the Service works without them.
We do not sell your personal information, and we do not share it for advertising.We share data only with the service providers (“subprocessors”) that make the Service run, each under agreements that limit their use of the data to providing services to us:
We may also disclose information if required by law, to respond to lawful requests or legal process, to protect the rights, safety, and security of LifeFlow, our users, or the public, or in connection with a merger, acquisition, or sale of assets (in which case we will provide notice consistent with this Policy).
Your data is stored with Supabase. We rely on encryption in transit (HTTPS/TLS) and encryption at rest provided by our infrastructure providers. Access to production data is limited to what is necessary to operate the Service.
At the database level, we use Supabase Row-Level Security (RLS)so that each user’s records are isolated — access policies are designed so that you can read and write only your own data. We also apply the data-minimization measures described above for analytics and error logging.
No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.
We retain your account and the data you enter for as long as your account is active or as needed to provide the Service. When you request deletion (see Section 7), we delete your personal data from our active systems within a reasonable period, except where we must retain limited records to comply with legal, tax, accounting, or fraud-prevention obligations (for example, billing records associated with Stripe). Backups and logs are retained for a limited time and then expire on a rolling basis.
You can view and edit most of your information directly in the app. You may also request to access, export, correct, or delete your personal data. Currently, these requests are handled by emailing support@getlifeflow.com — we will verify your request and respond within the timeframe required by applicable law. Deleting your account removes your data as described in Section 6.
If you are in the European Economic Area or the United Kingdom, we process your personal data under the following legal bases: performance of a contract (to provide the Service you request), legitimate interests (to secure, maintain, and improve the Service), consent (where required, such as for optional features), and legal obligation.
You have the right to access, rectify, erase, restrict, or object to processing of your personal data, the right to data portability, and the right to withdraw consent. You may also lodge a complaint with your local data protection authority. To exercise these rights, contact support@getlifeflow.com.
Some of our subprocessors are located in the United States. Where personal data is transferred internationally, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by those providers.
If you are a California resident, you have the right to know what personal information we collect and how we use it, to request access to and deletion of your personal information, to correct inaccurate information, and to not be discriminated against for exercising your rights.
We do not “sell” your personal information, and we do not “share” it for cross-context behavioral advertising as those terms are defined under California law. The categories of personal information we collect, and the purposes for collecting them, are described in Sections 1 and 2. To exercise your California rights, contact support@getlifeflow.com.
We keep tracking minimal:
We do not use third-party advertising or cross-site tracking cookies.
LifeFlow is intended for adults and is not directed to anyone under 18 years of age. We do not knowingly collect personal information from anyone under 18. Consistent with the U.S. Children’s Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from children under 13. If you believe a minor has provided us personal information, contact support@getlifeflow.com and we will delete it.
We maintain safeguards designed to protect your data. In the event of a data breach affecting your personal information, we will investigate promptly and notify affected users and applicable regulators as required by law, including a description of the incident and the steps we are taking in response.
LifeFlow is operated from the United States. If you access the Service from outside the United States, you understand that your information will be processed and stored in the United States and other countries where our subprocessors operate, which may have data-protection laws different from those in your country.
The Service may link to third-party websites or services that we do not control. This Policy does not apply to those third parties, and we encourage you to review their privacy policies.
We may update this Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised Policy.
Questions or requests regarding this Policy or your personal data can be sent to support@getlifeflow.com.
This Privacy Policy is a draft provided for general informational purposes and does not constitute legal advice. It should be reviewed by qualified counsel before public reliance.