Privacy policy

1. Who we are and what this covers

LifeDesk is a private system for running a household: money, family, health, documents and the work of an assistant (the “Right Hand”). This policy explains what we keep, why, who can see it, and what you can do about it.

2. What we keep

What you and the people you invite enter: accounts and money entries, bills, family members’ details, health records you choose to add, documents and files, tasks, notes and contacts.

Account and security records: your email and name, sign-in sessions and devices, and an audit log of important actions (who did what and when).

We do not sell your data, show advertising, or use your records to train AI models.

3. Who can see it

Your household decides. The Owner sets what each person can see; some records are “Owner only”. A family member with their own login sees only their own page. An auditor can only read, and only until the date the Owner set.

Our staff cannot read the Secrets vault: it is encrypted on your device with your passphrase before it is saved. For other records, access by our staff is limited to support you ask for and to running the service, and is logged.

4. Health information

Health records are Owner-only unless the Owner shares them. A share pack for a doctor opens only with a separate code, expires, and logs every view.

5. AI

AI features are off unless the household turns them on. When used, the relevant records are sent to our AI provider (Anthropic) to produce a draft or an answer; health documents are sent only for people the Owner switched on, and the Secrets vault is never sent. Every AI use is logged without its content.

6. Where it is stored and how it is protected

Records are stored in a database with row-level security and an append-only, hash-chained audit log; files are encrypted at rest. Connections are encrypted. Backups are encrypted. The production hosting region will be stated here before launch.

7. How long we keep it

While your household exists. If the Owner deletes the household, everyone loses access at once; it can be restored for 30 days, after which every record is erased, including backups as they expire.

8. Your choices

Download your personal data at any time (Settings → Download my data). The Owner can download everything (full export) and delete the household. You can sign out any device remotely.

9. Contact

Questions or requests: use Help → Contact in the app. We answer in Bangla or English.