Privacy Policy

Account & Profile

• What: Name, email address (incl. Apple private relay), avatar, user identifiers.
• Why: Create your account, authenticate you, sync your data across devices.
• Source: You; sign‑in providers (Apple/Google).
• Retention: Until account deletion (see §8).

User Content (synced)

• What: Life Areas, Projects, Tasks, subtasks, tags, notes, journal entries, calendar events (if Google Calendar is connected).
• Attachments: Photos/files/docs uploaded by you (per‑file limit 50 MB).
• Why: Core functionality (organize and sync your content).
• Storage: Firebase Firestore (data) & Firebase Storage (files) in EU region (eur3).
• Retention: Until you delete items or delete your account.

Focus Timer History

• What: Session durations, streaks, timer preferences.
• Why: Provide focus features and statistics.
• Retention: Until deletion or account closure.

Voice Input (dictation)

We use Apple’s Speech framework to transcribe your voice when you add tasks by voice. Where supported on your device/locale, we require on-device recognition so audio does not leave your device. If on-device recognition isn’t supported, iOS may request your permission to use network-based recognition provided by Apple, in which case Apple may process your audio as an independent controller under its own privacy terms (see Siri & Dictation settings). We do not store raw audio; it is used ephemerally for transcription.

• AI parsing: After transcription, we may send the task text only (never audio, journals, or attachments) to our AI provider to extract fields (see §5).
• Controls: You can disable speech recognition at Settings → Privacy & Security → Speech Recognition; “Improve Siri & Dictation” may allow Apple to retain samples if you opt in.

Google Calendar Integration (Optional)

If you choose to connect your Google Calendar:

• What: Calendar event data (titles, times, descriptions, locations, attendees), calendar list info, sync tokens.
• Why: Display your calendar events alongside tasks to help you see your full schedule.
• Access scope: Read-only (calendar.readonly) — we cannot modify your calendar.
• Storage: Events cached locally on your device in SQLite for offline viewing. Sync preferences stored in app settings.
• Sync window: 30 days past, 90 days future.
• Provider: Google Calendar API.
• Controls: You can disconnect at any time in Settings → Google Calendar. Disconnecting removes all cached calendar data from your device.
• Deletion: All calendar data (cached events and sync state) is automatically removed when you disconnect or delete your account.
• Optional: This feature is entirely optional and not required to use the app.

Device Permissions

• Microphone: Only while you actively use voice input; no background recording.
• Photos/Camera/Files: Access through system pickers to add attachments; we do not scan your library.
• Location/Contacts: Not used.
• Push notifications: Reminders only; no marketing pushes.

Purchases

• What: Subscription status and product identifiers.
• Why: Process your in‑app subscription.
• Provider: Apple In‑App Purchase.
• Retention: As needed for purchase history, fraud prevention, and tax compliance.

Analytics & Diagnostics

• What: App usage events (signup/login method, task creation/completion, focus sessions, subscription events), crash reports with stack traces, device/OS information.
• Why: Understand user activation, improve features, fix crashes, and ensure app stability.
• Provider: Firebase Analytics & Crashlytics (Google).
• Privacy measures:
  • IP anonymization: Enabled by default.
  • No PII: Only internal Firebase UID tracked (not personally identifiable).
  • User properties: Feature usage flags (e.g., has_created_task, has_used_focus_timer) for product improvement.
• Retention: Firebase default (14 months for aggregated analytics, 2 months for raw event data, 90 days for crash reports).
• Opt‑out: Infrastructure ready for future user opt-out feature.
• Implementation date: October 15, 2025.

Activation & Retention Tracking

To improve the onboarding experience and understand how users discover value, we track anonymous behavioral milestones:

• What: Timestamps of first-time actions (e.g., first task created, first project created, first task completed, first voice input used), task creation count, days active per week.
• Why: Measure product activation, identify successful onboarding patterns, and improve the new user experience.
• Storage: Firebase Firestore in EU region (eur3) under your user account.
• Tracking window: Active monitoring during your first 7 days after signup for activation milestones; ongoing for retention metrics (day 2 return, weekly active).
• Data collected:
  • Activation milestones: 4 timestamps + task count (only during first 7 days)
  • Retention metrics: App open dates, daily active flags
• No PII: Only internal user ID and anonymous behavioral data.
• Retention: Activation data is automatically deleted 90 days after your activation window closes. Retention metrics aggregate to Firebase Analytics (14-month retention).
• Deletion: Automatically removed when you delete your account.
• Legal basis: Legitimate interests (product improvement) with technical safeguards (anonymization, minimal data collection, automatic deletion).

Sensitive & Children’s data

• Wellness/health‑like data (mood/sleep/energy check‑ins): Disabled.
• We do not target minors; the app is intended for 13+.
• The app is not a medical device and does not provide medical advice.

In‑app controls

• Data export: Settings → Profile → Export your profile, life areas, projects, tasks, journal entries, and timer settings. Attachments metadata is included; large files can be requested via support.
• Google Calendar: Settings → Google Calendar → Disconnect. Removes all cached calendar events and sync data from your device immediately.
• Deletion: Settings → Profile → Delete account. This removes your account and personal data from live systems immediately; provider backups and caches are purged within ~30 days.

GDPR/UK rights

You can request access, rectification, erasure, restriction, portability, or objection via privacy@malife.app. We verify identity and respond within one month. You may lodge a complaint with your local supervisory authority; in Germany, this is your state authority (e.g., Hamburg).

California/US rights

We do not sell or share personal information for cross‑context behavioral advertising. You can request access or deletion at privacy@malife.app.