Privacy Policy

Effective October 5, 2026

ManageLife ("ManageLife", "we", "us") helps families organize tasks, schedules, contacts, and important records. This policy explains what information we collect, how we use it, and the choices you have. It applies to our website at www.managelife.app and the ManageLife app at live.managelife.app (together, the "Service").

1. Information we collect

Information you provide

• Account information: your email address, your first and last name, and, if you sign up with email, a password. If you sign in with Google, we take your name and profile photo from your Google account; you can change your name in Settings. Passwords are handled by our authentication provider and are never stored by us in readable form.
• Content you add: family members, contacts, tasks, events, notes, and digital records such as service logs, assets, and finance records, including any addresses you enter.

Information collected when you use the Service

• Device location (optional): with your permission, we use your device's location to attach a location to a record, show your records on a map, and surface records relevant to where you are. A location you attach to a record is saved with that record. You can deny or revoke location permission in your browser or device settings at any time; location features will simply be unavailable. Your live location stays on your device, unless you turn on location sharing for connected AI apps (see Connected AI apps), in which case we keep only your phone's most recent position, for up to an hour.
• Notification tokens (optional): if you enable alerts, we store a push-notification token for your device so we can send you reminders.
• Technical data: our hosting providers process standard technical information such as IP address, browser type, and error logs to operate and secure the Service.

2. Information from Google

You can use ManageLife without a Google account. If you choose to sign in with Google, you will see a Google consent screen listing the access requested. With your permission, we access the following:

ManageLife does not create, modify, or delete your Google Calendar events or Google Contacts.

To make these features work, we store the access credentials (OAuth tokens) that Google issues to us. They are kept on our servers, are never exposed to other users, and are used only to fetch the data above when you use the related features.

What we store: calendar events and contacts are fetched from Google when you view them and are shown to you, not saved to our database. We save only (a) the ID of the calendar you choose to display, and (b) any contact you explicitly choose to add to your family circle, which then becomes part of your account's content.

3. How we use information

We use the information described above to:

• provide, maintain, and secure the Service and your account;
• display your family's tasks, schedule, contacts, and records to you;
• send reminders and alerts you have turned on;
• respond to your support requests; and
• comply with legal obligations.

We do not sell your personal information, and we do not use it for advertising.

4. Google user data and Limited Use

Specifically, for data we receive from Google APIs:

• We use it only to provide and improve the user-facing features described in section 2, which are visible in the app's interface.
• We do not transfer it to others except as needed to provide those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use or transfer it for advertising, including personalized, retargeted, or interest-based ads.
• We do not sell it, and we do not use it to determine creditworthiness or for lending purposes.
• We do not use it to develop, improve, or train generalized artificial intelligence or machine learning models.
• No person reads it unless you give us affirmative permission to do so for specific data (for example, when you ask for support), it is necessary for security purposes such as investigating abuse, it is needed to comply with law, or it is aggregated and anonymized for internal operations.

5. How we share information

We share information only with service providers who process it on our behalf to run the Service, under contracts that require them to protect it:

• Google Cloud and Firebase: hosting, authentication, database, and push notifications.
• Google Maps Platform: addresses and locations you enter, to display maps and look up places.
• Resend: when you invite someone to your family circle, we send the invitation email through Resend, our email provider. It receives the invitee's email address and name and your name, and nothing else from your account.

We may also disclose information if required by law or to protect the rights, property, or safety of our users or others. Your content is shared with other people only when you choose to invite them into your family circle, and with an AI app only when you connect it (see Connected AI apps).

6. Connected AI apps

You can connect an AI assistant that supports the Model Context Protocol (MCP), such as Claude or ChatGPT, to your ManageLife account, so it can answer questions about your family's tasks and records. This is an early-access feature.

• Only with your permission: an AI app gets access only after you sign in to ManageLife and approve it on a consent screen that names the app and lists what it may see, such as your tasks or your contacts. Access is read-only: a connected app can't add, change, or delete anything.
• What the app receives: when you ask the assistant something, it can read only what you allowed, each with when the item was created and last changed:
  • Tasks: titles, descriptions, status, priority, due dates, who they're assigned to, and the record they belong to.
  • Contacts: names, email addresses, phone numbers, whether each one is in your family circle, and whether they use ManageLife.
  • Records: details, values, addresses and map locations, and their related entries with dates, fields and links.
  • Family circle: the names of its members and whether they use ManageLife. Their email addresses and phone numbers are shared only if you also allow contacts.
  • Events created in ManageLife: titles, descriptions, times and locations.
  From then on, the AI app's provider handles that information under its own terms and privacy policy, not this one.
• No Google data: we never share information we receive from Google APIs, such as your Google Calendar events or contacts imported from Google Contacts, with connected AI apps.
• Your phone's location, for "near me" (optional): so an AI app can answer questions like "what records are near me?", you can turn on "Share my phone's latest location" in the ManageLife Android app's Settings. It's off unless you turn it on. While it's on, the app sends us only your phone's most recent position and when it was taken, when you open the app and, if you use arrival alerts, when you arrive at or leave a saved place; each one replaces the last, so we never keep a history. We delete it automatically within an hour, and at once when you turn sharing off, sign out, or delete your account. An AI app can use it only if you also allow it to on the consent screen, and only when it's less than 30 minutes old. Even then, we never give the location to the AI app: it receives only the records near it, with distances rounded up to the next 100 meters, and how long ago the location was taken.
• What we keep: the app's name and web address, what you approved, and its access credentials, which we store only in hashed form. For security, we log each tool call an app makes: which account, which app, which tool, when, whether it worked, and for a "nearby" search whether it was given coordinates, an address or your phone's location. The log never includes what was asked or what was returned, and we delete it after 90 days.
• Disconnecting: in Settings, under Connected apps, choose Revoke to cut an app off within seconds. Signing out everywhere, changing your password, or deleting your account also disconnects every app.

7. Storage and security

Your data is stored with Google Cloud (Firebase) in the United States. It is encrypted in transit and at rest. Access to each family's data is restricted by security rules so that only authorized members can read it, and Google access tokens are stored server-side only. No method of storage or transmission is completely secure, but we work to protect your information and will notify you of a breach where required by law.

8. Retention and deletion

• We keep your information for as long as your account is active.
• You can delete tasks, contacts, events, and records in the app at any time.
• Disconnect Google: you can revoke ManageLife's access at any time from your Google Account permissions page. Once revoked, we can no longer access your Google data. The next time the app tries to use that access, we delete the stored Google tokens, turn off calendar and contacts sync, and ask whether you want to reconnect.
• Delete your account: in the app, go to Settings and choose Delete account. This immediately deletes your sign-in, your family's contacts, tasks, events, and records, your profile, your settings and notification tokens, your phone's shared location, and the stored Google tokens. It also revokes ManageLife's access to your Google account, disconnects every AI app you connected and deletes its access credentials, and removes you from any family circle you joined. Information that other people saved about you in their own account, such as a contact entry, belongs to their account and is not deleted.
• If other people have joined your family circle, or you can't use the app, email privacy@managelife.app from your account's address and we will delete your account and associated data within 30 days, except the administrative records described below and anything we must keep to comply with law.
• Administrative records: when we change an account's access or plan, for example to give early access to a new feature, we keep a record of the change for security and accountability. These records identify the account by an internal ID only, never by your email or name, and we delete them two years after the change. They remain after you delete your account, but nothing links that ID to you any more. The log of requests from connected AI apps (section 6) is kept the same way, for 90 days.

9. Children

The Service is intended for adults managing their households. We do not knowingly collect personal information directly from children under 13. Parents and guardians may add information about their children as family members and are responsible for that information. If you believe a child has given us information directly, contact us and we will delete it.

10. Your choices and rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing. To make a request, email privacy@managelife.app. We will not discriminate against you for exercising these rights.

11. Changes to this policy

We may update this policy from time to time. If we make material changes, especially to how we use Google user data, we will notify you in the app or by email before the changes take effect, and update the effective date above.

12. Contact us

Questions about this policy or your data: privacy@managelife.app.