1. Who We Are
This Privacy Notice is provided by Luxen Group LLC ("we," "us," or "our"), the data controller responsible for the LifeOps service. Our registered address is in the United States.
If you have any questions about this Privacy Notice or how we handle your personal data, please contact us at: privacy@lifeops.app
2. Personal Data We Collect
We collect and process the following categories of personal data:
- Account Information: Name, email address, password (hashed), and profile information you provide when creating an account.
- Family Information: Names, dates of birth, and relationships of family members you add to your household profile.
- Usage Data: How you interact with the Service, including features used, session duration, device type, browser type, and IP address.
- Device & Technical Data: Device identifiers, operating system, app version, and diagnostic information for troubleshooting.
- Support Communications: Messages, emails, and feedback you send to our customer support team.
- User Content: Calendar events, task lists, grocery lists, documents, and other content you create or upload within the Service.
3. How We Use Your Personal Data
We use your personal data for the following purposes:
- Providing the Service: To create and manage your account, enable family sharing features, and deliver the core functionality of LifeOps.
- Security & Fraud Prevention: To verify your identity, detect unauthorized access, and protect against fraudulent activity.
- Product Improvement: To analyze usage patterns, fix bugs, and develop new features that improve the Service.
- Customer Support: To respond to your inquiries, troubleshoot issues, and provide technical assistance.
- Marketing (with consent): To send you updates, newsletters, and promotional offers, where you have given your explicit consent.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
4. Legal Basis for Processing
We process your personal data based on the following legal grounds:
- Contract Performance: Processing necessary to fulfill our contractual obligations to you (e.g., providing the Service).
- Legitimate Interests: Processing necessary for our legitimate business interests, such as security, fraud prevention, and product improvement, provided these interests do not override your fundamental rights.
- Consent: Processing based on your explicit consent (e.g., for marketing communications).
- Legal Obligation: Processing necessary to comply with laws and regulations.
5. Data Sharing & Recipients
We do not sell your personal data. We may share your data with the following categories of recipients:
- Service Providers: Third-party vendors who provide hosting, analytics, email delivery, customer support tooling, and other services on our behalf. These providers are contractually bound to process data only as instructed by us.
- Merchant of Record (Paddle): Paddle.com acts as our Merchant of Record for payment processing, subscription management, tax compliance, and invoicing. Paddle receives transaction-related data necessary to fulfill these functions.
- Professional Advisers: Legal, accounting, and other professional advisers where necessary to protect our rights or comply with legal obligations.
- Authorities: Law enforcement, regulatory bodies, or courts where required by applicable law or legal process.
6. Data Retention
We retain your personal data for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Notice. When you delete your account, we will delete or anonymize your personal data within 90 days, except where we are required to retain it for legal, tax, or accounting purposes.
7. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate or incomplete data.
- Erasure: Request deletion of your personal data in certain circumstances.
- Restriction: Request limitation of processing in certain situations.
- Portability: Request transfer of your data to another service provider.
- Objection: Object to processing based on legitimate interests or for direct marketing.
- Withdraw Consent: Withdraw consent at any time where processing is based on consent.
To exercise these rights, please contact us at privacy@lifeops.app. We will respond within one month of receiving your request.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL) and at rest, access controls, regular security assessments, and staff training. While we take these precautions, no system is completely secure, and we cannot guarantee absolute security.
9. Cookies & Tracking Technologies
We use essential cookies to enable core functionality of the Service, such as authentication and session management. We may also use analytics cookies to understand how users interact with the Service. You can manage your cookie preferences through your browser settings.
10. International Data Transfers
Your personal data may be transferred to and processed in countries outside your jurisdiction, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with applicable data protection laws.
11. Children's Privacy
LifeOps is intended for use by adults and families. We do not knowingly collect personal data from children under the age of 13 without verifiable parental consent. If you believe we have inadvertently collected data from a child without appropriate consent, please contact us immediately.
12. Changes to This Privacy Notice
We may update this Privacy Notice from time to time. We will notify you of material changes by email or through the Service. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Notice.