Legal
Last updated: July 30, 2026
This Privacy Policy explains what personal data Life Builder collects through our website and app, why we collect it, who we share it with, and the choices and rights you have. It applies wherever you access the Service, and is written to meet the requirements of major global privacy frameworks (including the EU/UK GDPR and the California CCPA/CPRA), so your rights below apply to you regardless of where you're located, to the extent applicable local law grants them.
Account data: name, email address, and password (stored as a salted hash, never in plain text) or, if you sign in with Google, your Google account identifier and profile info. Content you create: goals, sub-step plans, journal entries and mood tags, AI coach messages, and Decision Simulator inputs. Billing data: your subscription plan and status; card and payment details are collected and processed directly by Paddle, our payment processor — we never see or store your full card number. Usage and device data: pages visited, actions taken, browser type, and approximate location (via IP), collected automatically. Communications: messages you send us via the Contact page or support email.
To provide the Service: create and secure your account, save your content, and run features like goal tracking and journaling. To power AI features: send relevant context (your goals, journal entries, and coaching history) to our AI processor so it can generate coaching responses, plans, and insights. To process payments: via Paddle. To communicate with you: service emails (password resets, billing receipts) and, where you've opted in, product updates. To improve the Service: aggregate usage analysis. To protect the Service: fraud and abuse prevention, security monitoring. To comply with law: responding to legal requests and enforcing our Terms.
Your goals, journal entries, and coaching history are sent to Anthropic's API to power the AI Coach, Decision Simulator, and related features. This processing happens under Anthropic's commercial API terms: your data is used only to generate your response, is not used to train Anthropic's models, and is retained by Anthropic only as needed to provide and secure the API (typically a short operational window), not indefinitely. We do not use your personal content to train any AI model ourselves.
We use strictly necessary cookies to keep you signed in and to remember your cookie choice; these cannot be disabled without breaking the ability to log in. With your consent, given via the cookie banner on first visit, we also load Google Analytics and the Meta Pixel for aggregate usage and marketing-effectiveness measurement — these do not load until you accept, and you can withdraw consent at any time from the Cookie Policy page. See our Cookie Policy for the full list of cookies and how to manage them.
We do not sell your personal data or share it for cross-context behavioral advertising in the sense prohibited by CCPA/CPRA. We share data only with: service providers who process it on our behalf under contract — Anthropic (AI processing), Paddle (billing, and, for those transactions, acting as merchant of record with its own data obligations), Resend (transactional email delivery), and our hosting infrastructure provider; analytics/advertising partners — Google Analytics and Meta, but only for users who consented to non-essential cookies; and legal/safety recipients where required to comply with law, enforce our Terms, or protect rights and safety. If we're ever involved in a merger, acquisition, or asset sale, your data may transfer as part of that transaction, subject to this Policy.
Because we and our service providers operate internationally, your data may be processed in countries other than the one you're located in, including countries whose data protection laws may differ from your own. Where applicable law requires it, we rely on appropriate safeguards for such transfers, such as standard contractual clauses or equivalent mechanisms offered by our providers.
We retain your data for as long as your account is active. If you delete your account (Settings → Account → Delete Account), your data is removed from our live production database immediately — this is not a soft delete. Copies may briefly persist in encrypted system backups or logs, which are purged on a rolling cycle, typically within 30 days, and are not used for any purpose other than disaster recovery in that window. We retain billing records for as long as required by applicable tax and accounting law.
Depending on where you live, you may have the right to: access the personal data we hold about you; correct inaccurate data; delete your data; receive a portable copy of your data; restrict or object to certain processing; withdraw consent (for anything based on consent, like non-essential cookies) without affecting past processing; and, in California, know what categories of data we've collected and not be discriminated against for exercising these rights (note: we don't sell data, so there is nothing to opt out of in that respect). Exercise most of these directly from Settings → Account, or email privacy@48mp.com — we'll respond within 30 days or sooner where local law requires.
We encrypt data in transit via TLS, hash passwords with bcrypt, scope database access to what each part of the Service needs, and set strict security headers (including a nonce-based Content-Security-Policy) to reduce injection risk. No system is perfectly secure, and we encourage you to use a strong, unique password and enable your device's own security features.
The Service is not directed to, and we do not knowingly collect personal data from, anyone under 16 — or under the higher minimum age that applies where you live, if local law sets one. Age verification relies on the user's own representation at signup (see our Terms); we do not independently verify age. If you believe a child has used the Service or provided us data in violation of this Policy, contact privacy@48mp.com and we will delete it.
Data we hold about you (goals, journal entries, coaching history) is used to generate AI output, but that output is produced automatically by a third-party model and is not reviewed, fact-checked, or approved by Life Builder before you see it. We process your data to generate this output but do not warrant its accuracy; see our Terms of Service for the full disclaimer and limitation of liability governing AI-generated content.
We may update this Policy as the Service or applicable law changes. We'll update the "Last updated" date and, for material changes, provide reasonable notice such as an in-app notice or email before the change takes effect.
For privacy questions or to exercise your rights, email privacy@48mp.com or use our Contact page.