Security at Lifespec

Last Updated: June 1, 2026

Lifespec is designed to help users organize personal systems, goals, signals, notes, action items, and AI-assisted recommendations. Because this information can be personal, we take security and privacy seriously.

This page explains the security practices we use, the service providers we rely on, and the steps you can take to protect your account.

Our Approach

We aim to protect Lifespec by using established service providers, limiting unnecessary access to user data, monitoring for errors and abuse, and designing the product with privacy and security in mind.

No online service can guarantee perfect security, but we work to use reasonable safeguards appropriate for the size and nature of the service.

Account Protection

Lifespec accounts may be created using email and password or Google sign-in.

We use Supabase for authentication and backend account services. Authentication providers help manage account access, login sessions, password handling, and related security controls.

You are responsible for keeping your login credentials secure. We recommend that you:

  • Use a strong, unique password
  • Do not reuse passwords from other services
  • Keep your email account secure
  • Use Google sign-in if you prefer provider-managed authentication
  • Keep your devices and operating systems up to date
  • Contact us if you believe your account has been compromised

Data Storage and Backend Services

Lifespec uses Supabase for backend services such as authentication, database services, logs, and related infrastructure. If Lifespec adds media uploads in the future, Supabase or another storage provider may be used to store files you choose to upload.

We rely on our infrastructure providers’ security practices for hosting, storage, networking, and database operations.

Access to user information is intended to be limited to what is necessary to operate, maintain, troubleshoot, secure, and improve Lifespec.

Payments

Payments are processed by Stripe.

Lifespec does not store full payment card numbers on its own systems. Payment information is handled by Stripe or other payment processors we may use.

Billing and subscription management may be handled through Lifespec’s billing/account management website.

AI Processing

Lifespec may use AI providers such as OpenAI/ChatGPT, Anthropic/Claude, or similar providers to generate recommendations, summaries, evaluations, revisions, and other AI-assisted features.

To provide these features, Lifespec may send user-entered content and related context to AI providers.

Where practical, we try to minimize, redact, or avoid sending directly identifying account information to AI providers. However, user content may still contain personal or sensitive information that you choose to enter.

You should avoid entering information into Lifespec that you do not want processed by Lifespec or by the service providers used to operate the product.

Logs, Diagnostics, and Error Monitoring

Lifespec may use Supabase logs, Sentry, Apple and Google platform metrics, Google Analytics, and similar tools to monitor performance, detect bugs, diagnose crashes, understand usage patterns, and improve reliability.

We try to avoid intentionally logging sensitive user content. However, logs and diagnostics may sometimes contain limited technical, contextual, or account-related information needed to troubleshoot problems, investigate abuse, or secure the service.

Website Analytics and Cookies

The Lifespec website may use Google Analytics, cookies, local storage, pixels, or similar technologies to understand traffic, measure performance, manage account sessions, support billing/account management, and improve the website.

You can usually control cookies through your browser settings. Disabling cookies may affect some website functionality.

Data Access

We do not sell personal information.

We do not plan to share user information except as necessary to operate, provide, maintain, secure, and improve Lifespec.

Access to user data is intended to be limited to situations where it is needed for legitimate operational purposes, such as:

  • Providing the service
  • Troubleshooting bugs
  • Responding to support requests
  • Investigating abuse or security issues
  • Maintaining billing and account systems
  • Complying with legal obligations

Account Deletion

You may request account deletion through the Lifespec account deletion page:

https://lifespec.app/account/delete

Where required by app platform rules, Lifespec will also provide an in-app path to initiate account deletion.

After account deletion, Lifespec will delete or anonymize personal information associated with your account within up to 90 days, subject to limited exceptions for legal, security, fraud-prevention, billing, tax, backup, dispute-resolution, or compliance purposes.

What You Can Do to Stay Secure

You can help protect your Lifespec account by:

  • Using a strong, unique password
  • Keeping your email account secure
  • Keeping your phone, computer, and browser updated
  • Avoiding shared or untrusted devices
  • Signing out of devices you no longer use
  • Being careful about the personal information you enter into freeform notes or AI-assisted features
  • Contacting us if you notice suspicious activity

Reporting Security Concerns

If you believe you have found a security issue, vulnerability, account compromise, or other security concern, please contact us at:

Email: [email protected]

Please include enough detail for us to understand and investigate the issue. We appreciate responsible reports that help keep Lifespec secure.

Relationship to Other Policies

This Security page is intended to explain our general security practices in plain language.

Your use of Lifespec is also governed by our Terms of Service and Privacy Policy: