Privacy Policy

1. Introduction

Life Engine ("we," "us," or "our") is a LifeOS platform operated by a sole trader trading as Life Engine, ABN 64 460 145 021, based in Sydney, New South Wales, Australia. We help individuals and families manage logistics, careers, and finances through a unified dashboard built on a privacy-first architecture.

We believe your personal data belongs to you. This Privacy Policy explains what information we collect, how we use it, and the choices you have. Our platform is designed from the ground up so that you remain in full control of your data at all times. We do not sell your personal information, we do not monetise your data, and we do not share it without your explicit consent.

This Privacy Policy applies to all services provided through the Life Engine platform, including our website at lifeengine.app, our web application, and any related services or features we offer (collectively, the "Service"). By using the Service, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

Account Information

When you create a Life Engine account, we collect information necessary to establish and maintain your account:

• Email address (used for authentication and communication)
• Password (stored in hashed form; we never store plaintext passwords)
• Display name or username you choose for your profile
• Account preferences and notification settings

Profile Data

You may optionally provide additional profile information to enhance your experience:

• Profile photo or avatar
• Date of birth
• Location or timezone preferences

Data You Enter into Life Engine

The core of Life Engine is the data you choose to enter and manage. Depending on the features you use, this may include:

• Logistics data: Vehicle information, fuel logs, service records, trip logs, and fleet management details
• Employment data: Employment history, job details, career milestones, and professional development records
• Financial data: Budgets, expense tracking, financial goals, portfolio information, and tax deduction records
• Task and planning data: Tasks, schedules, goals, and organisational records you create within the platform
• Family data: Information shared with or about family members within a Family Engine, governed by the Visibility Model described in Section 4

Usage Data

We automatically collect certain technical information when you use the Service:

• Pages and features accessed within the application
• Timestamps of interactions and session duration
• Performance metrics and error logs to maintain service reliability
• Referring URLs and navigation paths

Device Information

We collect limited device information to provide a secure and optimised experience:

• Browser type and version
• Operating system and version
• Screen resolution and device type (desktop, tablet, mobile)
• IP address (used for security, fraud detection, and approximate geolocation for timezone settings)

3. How We Use Your Information

Service Delivery

We use the information you provide to operate, maintain, and deliver the Life Engine platform. This includes storing and displaying the data you enter, processing your requests, synchronising data across your devices, and ensuring the Service functions correctly.

Personalisation

We use your preferences, settings, and usage patterns to personalise your experience within Life Engine. This includes customising your dashboard layout, remembering your preferred views, and adapting the interface to your needs. Personalisation is performed entirely within the context of your own account and is never used to build advertising profiles.

Security and Fraud Prevention

We use device information, IP addresses, and usage patterns to protect your account and the Service from unauthorised access, abuse, and fraud. This includes detecting suspicious login attempts, identifying potential security threats, and enforcing our terms of service.

Communications

We use your email address to send you essential service communications, including account verification, password resets, security alerts, and important updates about the Service. We may also send you optional product updates and feature announcements, which you can opt out of at any time through your account settings.

Service Improvement and Analytics

We use aggregated and anonymised usage data to understand how the Service is used, identify areas for improvement, fix bugs, and develop new features. This analysis is performed on aggregate data and is never tied back to individual users for purposes other than providing the Service.

4. The Life Engine Visibility Model

Life Engine is built on a privacy-first Visibility Model that gives you granular control over who can see your data. Unlike many platforms that default to sharing, Life Engine defaults to privacy. You explicitly choose what to share, with whom, and at what level of detail.

Field-Level Visibility

Life Engine supports field-level visibility overrides. This means you can share a record (such as a vehicle) with your family while keeping specific fields within that record private. For example, you might share your vehicle's make, model, and service schedule with your family, while keeping the purchase price or loan details visible only to yourself.

Personal Engine

When you sign up for Life Engine, a Personal Engine is automatically created for you. All data in your Personal Engine is private by default. Your Personal Engine is your private workspace, and no data leaves it unless you explicitly choose to share it.

Family Engine

A Family Engine aggregates data from its members based on each member's individual visibility settings. The Family Engine only displays data that members have actively chosen to share or restrict to specific people. No member's private data is ever visible in the Family Engine.

5. Data Sharing and Disclosure

When We May Share Your Data

We share your personal information only in the following limited circumstances:

• With your consent: We share data when you explicitly direct us to, such as when you choose to share data with family members through the Visibility Model.
• Service providers: We work with trusted third-party service providers who assist us in operating the platform (such as hosting, authentication, and payment processing). These providers are contractually bound to use your data only for the purposes of providing their services to us, and they are subject to confidentiality obligations.
• Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request. We will endeavour to notify you of such requests where legally permitted and practicable.
• Protection of rights and safety: We may disclose information where we believe it is necessary to protect our rights, your safety or the safety of others, investigate fraud, or respond to a government request.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your personal information may be transferred as part of the transaction. We will notify you via email or a prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

When We Do Not Share Your Data

Life Engine is committed to your privacy. We want to be explicit about what we do not do with your data:

• We never sell your data. We do not sell, rent, or trade your personal information to third parties for their marketing or any other purposes. This is a foundational principle of our platform.
• We never share without consent. We do not share your personal data with third parties for their own purposes without your explicit, informed consent.
• We do not use your data for advertising. We do not build advertising profiles, serve targeted advertisements, or allow third parties to use your data for advertising purposes.
• We do not mine your content. The personal data you enter into Life Engine (your finances, employment records, vehicle data, etc.) is not analysed, scraped, or used for any purpose other than providing you with the Service.

6. Data Security

We take the security of your data seriously and implement industry-standard technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction.

Encryption

• In transit: All data transmitted between your device and our servers is encrypted using TLS (Transport Layer Security), ensuring your information cannot be intercepted during transmission.
• At rest: Your data is encrypted at rest using AES-256 encryption within our database infrastructure, protecting your information even in the unlikely event of a storage breach.

Access Controls

Access to your personal data within our organisation is strictly limited to personnel who require it to operate, maintain, or improve the Service. All access is logged and subject to regular audit. Employees and contractors are bound by confidentiality obligations.

Security Practices

• Regular security assessments and vulnerability testing
• Secure software development lifecycle with code review and automated security scanning
• Incident response procedures to quickly address any security events
• Infrastructure monitoring and anomaly detection
• Password hashing using industry-standard algorithms

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security, but we are committed to maintaining the highest practical standard of data protection.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Our data retention practices are guided by the following principles:

• Active account data: Your account information and the data you enter into Life Engine are retained for as long as your account remains active and you continue to use the Service.
• Inactive accounts: If your account is inactive for an extended period, we may contact you to confirm whether you wish to keep your account active. We will not delete your data without prior notice.
• Deleted data: When you delete data from your account, it is removed from our active systems promptly. Residual copies in backups are purged within 90 days in accordance with our backup rotation schedule.
• Account deletion: When you request full account deletion, all your personal data is permanently removed from our active systems within 30 days. Backup copies are purged within 90 days.
• Legal obligations: We may retain certain information for longer periods where required by law, such as for tax, legal reporting, or regulatory compliance purposes.

8. Your Rights and Choices

We respect your rights over your personal data. Depending on your location, you may have the following rights under applicable data protection laws:

Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data directly through the Life Engine dashboard at any time.

Correction

You have the right to correct inaccurate or incomplete personal information. You can update your data directly within Life Engine, or contact us to request corrections.

Deletion

You have the right to request the deletion of your personal information. You can delete individual records within Life Engine at any time. To delete your entire account and all associated data, contact us at privacy@lifeengine.app.

Data Export

You have the right to access your personal information and, where practicable, to receive it in a usable form. The Service provides in-product export tools for some domains where we have shipped them. We do not guarantee a single full-account export of every domain in a particular format (for example CSV or JSON) today. You can use available in-product exports, view and copy data in the dashboard, or contact privacy@lifeengine.app and we will aim to help you obtain a reasonable copy of your personal information.

Visibility Controls

Through Life Engine's Visibility Model, you have granular control over which data is visible to other members of your Engine. You can change the visibility of any record or field at any time by adjusting its visibility setting to Private, Shared, or Restricted.

Communication Preferences

You can opt out of non-essential communications (such as product updates and feature announcements) at any time through your account settings or by using the unsubscribe link in our emails. Note that you cannot opt out of essential service communications (such as security alerts and account-related notices).

Account Deletion

You may request complete deletion of your Life Engine account and all associated data at any time by contacting us at privacy@lifeengine.app. Upon receiving your request, we will verify your identity and process the deletion within 30 days.

To exercise any of these rights, please contact us at privacy@lifeengine.app. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request to protect your account security.

9. Children's Privacy

Life Engine is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to promptly delete that information from our systems.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at privacy@lifeengine.app so that we can take appropriate action.

For Family Engines that include members between the ages of 13 and 18, we recommend that parents or guardians supervise the data entered and visibility settings configured by minor family members. The Visibility Model provides parents with the ability to review and manage shared data within their Family Engine.

10. International Data Transfers

Life Engine is operated from Sydney, New South Wales, Australia. Your data is primarily processed and stored in Australia. If you access the Service from outside Australia, please be aware that your data may be transferred to, stored, and processed in Australia, where data protection laws may differ from those of your jurisdiction.

Where we transfer data internationally, we implement appropriate safeguards to ensure your personal information remains protected in accordance with this Privacy Policy. These safeguards may include:

• Standard contractual clauses approved by relevant data protection authorities
• Data processing agreements with all third-party service providers that access or process your data
• Technical safeguards such as encryption to protect data during transfer

By using the Service, you consent to the transfer and processing of your data in Australia and any other jurisdictions where our service providers operate, subject to the protections described in this Privacy Policy. If you are located in the European Economic Area (EEA), United Kingdom, or other jurisdictions with data transfer restrictions, we ensure that appropriate safeguards are in place before transferring your personal data.

11. Third-Party Services

Life Engine integrates with a limited number of third-party services to provide core platform functionality. We carefully vet all third-party providers and only work with those who meet our privacy and security standards.

Authentication

We use Supabase for authentication services. When you create an account or log in, your authentication credentials are processed through Supabase's secure infrastructure. Supabase processes only the minimum data necessary for authentication (email address and hashed password). For more information, please refer to Supabase's Privacy Policy.

Data Storage

Your data is stored in PostgreSQL databases managed through Supabase's cloud infrastructure. All data is encrypted at rest and access is controlled through row-level security policies that enforce the Life Engine Visibility Model at the database level.

Analytics

We may use privacy-respecting analytics tools to understand how the Service is used in aggregate. Any analytics we employ are configured to minimise data collection, do not use cookies for tracking, and do not share data with advertising networks. We do not use analytics tools that build cross-site user profiles.

Payment Processing

For paid memberships, Paddle is the Merchant of Record . Paddle (and its affiliates) process checkout, payment method details, invoices, and applicable sales taxes on the customer-facing sale. We do not store your full credit card number, CVV, or other sensitive payment details on our servers. Paddle handles payment information in accordance with PCI DSS requirements and its own privacy terms. Account email and entitlement status may be shared with Paddle as needed to fulfil the purchase and manage your subscription.

We do not allow third-party services to use your personal information for their own purposes beyond providing their contracted services to us. Each third-party service is bound by data processing agreements that limit how they can use and retain your data.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you of material changes via email or through a prominent notice within the Service at least 30 days before the changes take effect
• Where required by law, obtain your consent before applying changes that materially affect how your personal information is used

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy, except where consent is required by law.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to reach out to us. We are committed to resolving any privacy-related issues promptly and transparently.

We aim to respond to privacy-related enquiries within 30 days. Inboxes may not be continuously monitored. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority. In Australia, you can contact the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.