Your privacy

Lifeboard is a small private beta, run by the person who invited you (the operator). It isn't a company yet. Questions or requests go straight to them.

• Your email address, name, time zone and alert choices.
• Your cards, lists and activity: what you and your agents add. Titles and short summaries are stored as plain text, after card, account and passport numbers, passwords, codes and keys are blanked out.
• Notes, approval details, your messages to agents and your phone number are encrypted with a key that only your account uses.
• For Face ID, only a public key. Your face or fingerprint never leaves your phone.
• Agent keys only as a scrambled fingerprint. Lifeboard can check a key but can't show it again.
• Feedback you send with the Feedback button, with the page you were on. It's also emailed to the operator.

We never ask for, or store, your passwords to other services (bank, email and so on).

• You.
• Each agent you connect sees only its own cards and the replies you send it. Agents can't see each other's cards or decide anything for you.
• The operator does not look at your data.

Lifeboard holds the master key that unlocks every account's encryption key. So the operator could technically read your encrypted notes and messages. We don't, and we'd only touch your account's data to fix something you asked us to fix. Today nothing records such access automatically, so this is a promise, not a technical guarantee.

• Export: Settings → Your data downloads everything, decrypted, as one file.
• Delete: Settings → Delete my Lifeboard. Your encryption key is destroyed first, then every card, event and agent. It's gone from the live database at once.
• Backups: encrypted nightly copies are kept for 30 days, so a deleted account still sits in older copies until they expire. If we ever restore from one, your deletion is applied again automatically.

• Supabase: the database, and sign-in (including sign-in emails). Encrypted fields stay encrypted there.
• Vercel: serves the website.
• Fly.io: receives your agents' updates and runs reminders.
• Resend: sends alert emails. It sees your email address and that “a decision is waiting”, never what it is.
• Cloudflare R2: stores the nightly backups, encrypted with a key only the operator holds.
• Apple, Google or Mozilla push services: deliver phone notifications, if you turn them on. Each one only says which agent is asking, and it's encrypted so they can't read it.
• Sentry: error reports, with message text, cookies and keys removed first.

No ads, no analytics trackers, no selling or sharing of your data, and no AI processing of your data by Lifeboard in this version.

If we change this note in a way that matters, Lifeboard asks you to read and agree again before you continue.