Privacy policy

1. Who is responsible

Life Mastery, operated from the Netherlands, is the data controller for the processing described here. For anything privacy-related, write to support@lifemasteryplatform.com.

2. What lives on your device

Life Mastery is local-first: your journal entries, habits, routines, goals, reviews, notes, preferences and other member data are stored in your browser's local storage on your own device, and the app reads that copy first. Reaching the member app requires an account, so you sign in first; from then on the app keeps working from the local copy on your device and syncs it to your account in the background. Two practical consequences:

• Clearing your browser's site data deletes the local copy. If you were signed in, your synced data returns when you sign in again; Settings also offers a JSON backup export (and import) of your core practice data so you can protect and move it yourself.
• Anyone with access to your device profile can open the app as you left it, so protect the device like you would a notebook.

3. What we store on servers

• Your account. Authentication runs on Clerk. When you sign up, Clerk holds your email address, your name and avatar if you provide them, sign-in metadata, and the connection to Google if you sign in that way. We never see or store a password.
• Synced app data. When you are signed in, your member data syncs to our database, hosted on Convex, so it can follow you across devices. Today that includes your goals, habits and check-offs, routines and scheduled calendar blocks, journal, notes, reviews, captures and links, your identity statements, your wealth workspace, your vision boards (including images you add to them), your Academy progress, your Coach conversations, your community profile and posts, feedback you file, the shared wisdom libraries with your personal changes, and your account-level preferences. When you use an AI feature we also keep per-day usage counts and request outcomes (never the content of a conversation) so the daily allowances work. If you connect Google Calendar, we fetch and store a copy of the events on your primary calendar for roughly the past week to the next two months (each event's title, start and end times, location, free/busy status, and a link back to it in Google), so the in-app calendar can show your schedule — reading uses a read-only scope. If you also turn on the optional calendar push, we create a dedicated "Life Mastery" calendar in your Google account and write your Life Mastery blocks only to that calendar — we never write to your own Google calendars — and we keep a record of what we pushed so edits you make to those blocks in Google sync back. Disconnecting inside Life Mastery deletes our copy of your events, and turning push off removes the Life Mastery calendar from your Google account. (If you instead revoke access from Google's side, or Google can't be reached at the moment you disconnect, email us and we will clear our copy — you can also delete the Life Mastery calendar in Google yourself.) The in-app build status at /status lists what syncs at any moment.
• Payments. Subscriptions are processed by Stripe. Stripe holds your card details and billing information; they never touch our servers. We store only your plan and subscription status.
• AI features. When you use an AI feature — the Coach, capture and writing assists, "Make into…", the daily briefing, or voice dictation — the context you allow it to see (or, for dictation, the audio clip you record) is sent to a model provider to generate the result: Anthropic or OpenAI, depending on the feature and our current configuration (dictation runs on OpenAI). Your Coach conversations sync like the rest of your member data. You control which sources the AI may read, sensitive ones stay off until you allow them, and neither provider uses this data to train their models.
• Messages you send us. If you email support, we have that email. Feedback filed inside the app by a signed-in member syncs to us so we can act on it. Messages sent through the public contact form reach us directly: we store the name, email address and message you submit so we can reply. (On a build without a backend the form saves your message locally in this browser instead, and says so on the page.)

4. What we deliberately do not do

• No advertising, and no selling or renting of personal data, ever.
• No third-party analytics or tracking scripts on the site or in the app today.
• No training of AI models on your private content.
• Only functional cookies and local storage: what Clerk needs to keep you signed in, and what the app needs to remember your preferences (like your theme).

5. Why we process data

We process your data to provide the service you asked for (account, sync, support, and later billing), to keep the service secure, and to meet legal obligations. That is the whole list. Where the law requires a legal basis, ours is the performance of our contract with you, our legitimate interest in running a secure service, and consent where we ask for it explicitly.

6. Service providers

We use a small set of processors to run Life Mastery: Clerk (authentication), Convex (database and sync), Vercel (hosting), Stripe (payments), Google (the Calendar connection, only if you choose to link it — reading your primary calendar and, only if you enable push, writing to the app-created Life Mastery calendar), and Anthropic and OpenAI (AI model providers; each receives only the context you allow, at the moment you use an AI feature). Each processes data under a data-processing agreement. Some providers process data in the United States; where they do, transfers are covered by recognised safeguards such as the EU standard contractual clauses.

7. Retention and deletion

Server-side data is kept while your account exists. You can request account deletion from the Account page; we action deletion requests and remove the account record and your synced data within 30 days, except where the law requires us to keep something longer (invoices, for example). The data on your own device is under your control alone; requesting deletion does not touch it.

8. Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability, and you can object to processing. The JSON export in Settings covers portability of your core practice data on the spot; for anything else, email support@lifemasteryplatform.com and we will respond within a month. You can also complain to your data-protection authority; in the Netherlands that is the Autoriteit Persoonsgegevens.

9. Security

All traffic is encrypted in transit. Server-side data lives with the providers named above, each with their own strong security programmes. No card data ever reaches our servers. No system is perfectly secure, but a deliberately small set of providers, no third-party trackers and no advertising keep the honest attack surface small by design.

10. Children

Life Mastery is not directed at children and requires users to be at least 16.

11. Changes to this policy

If this policy changes in a way that matters, we will announce it in the app or by email before the change takes effect. The date at the top tells you when it last changed.

12. Contact

For anything about your privacy: support@lifemasteryplatform.com.