Privacy Notice

Effective date: not yet set

This notice explains what the company operating LifeKeel (not yet named on this deployment) ("we", "us"), the controller of your data, collects when you use LifeKeel, why, who sees it, and the rights you have.

1. What we collect

Account information: your name, email address and password (stored only as a salted hash). If you turn on two-factor sign-in, an encrypted authenticator secret and hashed recovery codes.

Financial profile: household income and outgoings, insurance, savings, pensions and goals you enter. Used to work out your household's readiness and the gaps worth looking at.

Family members: names, roles, dates of birth and email addresses of people you add. An organizer can invite an adult member to their own sign-in, which gives them read access to the household; members under 18 can never have a sign-in. If you add someone else's details, please let them know and point them to this notice.

Documents you upload: the file and, on paid plans, fields a model reads from it (provider, policy number, amounts, dates). Vault documents are encrypted before storage and can also be sealed in your browser.

Email connection (optional): with Gmail, you grant LifeKeel read-only access through Google; we can't send, change or delete your mail. With other providers you give an app password, stored encrypted, for read-only IMAP access. We read messages and finance-looking attachments to summarise them into your Inbox and do not keep the content of mail that isn't about your finances.

Health information: LifeKeel isn't designed for it. Please don't enter medical details. When free text you write is sent to a model, health terms are removed first.

Technical and security data: sign-in history (time, IP address, device) kept for 30 days, and error logs with tokens and personal details removed.

2. Why we use it, and our lawful basis

• Running the service you signed up for: your profile, insights, documents, inbox and household sharing. Basis: contract.
• Taking payment and keeping tax records. Basis: contract; legal obligation.
• Keeping accounts secure and preventing abuse. Basis: legitimate interests.
• Information about family members who don't use LifeKeel themselves, provided by the organizer to plan for the household. Basis: legitimate interests (the organizer's and the household's), balanced against those members' interests.
• Marketing emails, only if you ticked the box. Basis: consent, withdrawable from any email.
• Advertising and analytics cookies, only if you accept them. Basis: consent.

LifeKeel gives information, not regulated financial advice, and never arranges insurance or moves money. We do not use your personal or family content to train AI models.

3. Who we share it with

We don't sell your data. We share the minimum needed with:

• Stripe, for payments. Card details go to Stripe directly and never reach LifeKeel.
• AI processing. Some features use a model to read documents, classify email or answer questions. LifeKeel-controlled models are preferred. A hosted AI provider is used only once its contract terms (no training on your content, retention, location) have been reviewed and recorded; until then the features that need one may be unavailable. The current list is published at /ai-processing.
• Email delivery (for account and notification email) and hosting providers, acting on our instructions.
• Google and Microsoft, only when you connect Gmail, Google Drive or OneDrive, and only to read what you authorised.
• Law enforcement or courts, only when the law requires.

Some of these providers process data outside the UK. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Agreement or Addendum. Ask us for details.

LifeKeel's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to provide your Inbox, is never used for advertising, and is never used to train models shared with other households.

4. Security

Credentials, connector tokens and vault files are encrypted at rest, traffic is encrypted in transit, household data is separated by account, and sign-in is rate-limited, with optional two-factor authentication. No system is perfectly secure; if a breach puts you at high risk we will tell you without undue delay.

5. How long we keep it, and deletion

We keep household data while the account is open. An organizer can delete the household from Settings → Delete Account; other members can ask the organizer to remove them, which ends their access straight away. Deletion starts immediately: access closes at once and the removal usually completes within seconds. If anything is left it is retried automatically and the receipt you are shown says so.

Kept after deletion: a record that the deletion happened (counts, no content) for 7 years, and invoices and payment records for the period tax law requires. Your subscription is cancelled when the household is deleted. Encrypted backups roll off within the window stated on your deletion receipt, and a restored backup is reconciled so deleted accounts stay deleted.

6. Your rights

You can ask for access to, correction of, a copy of, or deletion of your personal data, and object to or restrict some processing. Export is in Settings (an organizer exports the household; other members export their own account). For anything else contact the support page. We reply within one month. Each right, and how to use it, is explained on our GDPR & your data rights page.

If you're unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113), or to your local data-protection authority if you live in the EU. We'd appreciate the chance to put it right first.

7. Children

LifeKeel sign-ins are for adults (18+). Parents or guardians may add children to the household so plans can account for them. Children never get a sign-in, are never sent marketing, and their details are used only for the household's own planning.

8. Cookies and local storage

Essential: a sign-in cookie and your device's local storage keep you signed in and remember settings. These need no consent.

Optional: on public pages only, and only if you accept, advertising and analytics tags from Google (Analytics and Ads), Meta and LinkedIn measure our marketing. They never run inside your account, and nothing is set if you reject them.

See our cookies and device storage page for the storage we use and how to manage your choices.

9. Changes to this notice

We update the effective date when this notice changes materially.

10. Contact

Questions about this notice or your data: the support page.