LifeOS (BrendanOS) Privacy Policy
This Privacy Policy describes how Everlight Digital ("we", "us") collects, uses, and shares information when you use LifeOS, a personal life-management web app also known internally as BrendanOS.
Information We Collect
- Account: your email address, display name, timezone, and (for non-owner accounts) a hashed password. Sign-in uses a 6-digit email code.
- Your content: notes, tasks, journal entries, decisions, habit logs, self-logged mood, and meals/nutrition you enter — by web, or via our Telegram bot. We do not ingest Apple Health, wearable, or device-sensor data.
- Usage: lightweight per-day counts of AI requests, to manage cost.
- Social posting (if you connect X or Threads): the post text you draft and the resulting post ID, so we can show you it published successfully.
How We Use It
- To run the app's features (capture, recall, journal, habits, scheduled social posts).
- AI processing: your captured text is sent to Anthropic (Claude) to classify it and answer your questions, and to Voyage AI to create the semantic-search embeddings that power recall. These providers process your text to return a result; we do not use your data to train models.
We do not sell your data. We do not run third-party advertising trackers.
Third Parties (Processors)
- Anthropic (Claude) — AI classification + question answering
- Voyage AI — text embeddings for semantic search
- Railway — hosting + database
- Resend — sends your sign-in code email
- Telegram — if you use the capture bot, messages you send it pass through Telegram
- X (Twitter) and Meta (Threads) — if you connect and schedule posts, your drafted text is sent to that platform's API to publish on your behalf
- Crossway (ESV) — Scripture text is shown under a non-commercial license
Data Retention
You can delete your account at any time by emailing us; we erase your data from our database, including your search embeddings, within 30 days. Backups are automatic and may retain a deleted account for a short rolling window before rotating out.
Your Rights
Depending on where you live (e.g. GDPR, CCPA), you can request access to, correction of, a copy of, or deletion of your personal data. Contact brendan@everlight-digital.com to exercise them.
Security
Data is encrypted in transit (TLS). Sessions use an HMAC-signed cookie. AI provider API keys are never shipped to the client — all AI requests are routed through our server.
Changes to This Policy
We may update this policy. Material changes will be reflected here with an updated date.
Contact
Everlight Digital
Email: brendan@everlight-digital.com