privacy.

1. who we are.

lifestuff is operated by Inflect LLC ("we", "us", "lifestuff"). you can reach us at privacy@lifestuff.tech.

2. what the app handles, and where it lives.

3. what we don't collect.

• profiles of your family members. the people you add to the wall live on the tablet only.
• email addresses — the app on the tablet never asks. (your lifestuff.tech account and the notify list do — see the next sections.)
• telemetry. none, unless you turn on sentry in settings.
• advertising identifiers. we don't use them. there are no ads in lifestuff.
• location, by default. the weather settings screen offers an optional "use my location" button that requests android's coarse-location permission to seed your city — you can decline it and type a location manually. the coordinates never leave the tablet; we use them only to fetch weather from open-meteo. there is no background location tracking.
• event-location lookups. when you type a location for an event, or when an event already has one (an address or place name), the app sends that text to a geocoding service to turn it into map coordinates — so it can offer address suggestions and show the weather for that place. on android this is openstreetmap (or google, if a google places key is configured); on apple devices it's apple mapkit. only the location text is sent — never your identity, your other events, or your device location — and the resulting coordinates stay on the device.

your lifestuff account (this website).

to authorise a wall tablet you create an account at lifestuff.tech. it exists for exactly two jobs: proving a tablet belongs to your household, and recording that your household has purchased lifestuff. it stores: your email address, a salted password hash (we never store the password itself), your household and device records (tablet manufacturer, model, android version, and a short pairing code — never serial numbers, IMEIs, or advertising ids), and session cookies while you're signed in. it lives in our cloudflare database. it never contains calendars, lists, photos, chores, or anything about your family members. to delete your account and all of it, email privacy@lifestuff.tech — a self-serve deletion page is coming before launch.

purchases (paddle).

when you buy lifestuff, the checkout is operated by paddle, our merchant of record. paddle handles your payment details, billing address, sales tax, and receipt under paddle's privacy policy. what we receive from paddle is your order reference and entitlement status — enough to mark your household as purchased. your card details never touch our systems.

away-from-home sync (optional, off by default).

out of the box, lifestuff syncs only on your home wi-fi and makes no relay calls at all. if you turn on away-from-home sync, your devices exchange updates through our relay as sealed, end-to-end-encrypted parcels: each parcel is encrypted on your own device with a household key that is generated on your tablet and shared with your phones only over your home network during pairing. the key never leaves your devices, so we cannot decrypt anything — not even what kinds of things synced.

what our relay can see: your household id, which device sent a parcel, a key-version counter used for key rotation, parcel sizes and timestamps, and the standard request metadata any web service sees (ip address, user agent). what it cannot see: anything inside the parcels. parcels are deleted automatically after 45 days, and there are no backups of their contents. turn the feature off and the traffic stops entirely.

the launch notify list (this website).

this site (lifestuff.tech) has a "notify me" form. if you use it, we store the name and email you enter — in our own cloudflare storage, not a third-party mailing service — for one purpose: to email you once, when lifestuff is available to buy. we don't add you to a newsletter, we don't sell or share it. our lawful basis is your consent, given when you submit the form. we delete all notify-list data within 30 days of sending the launch email, or sooner if you ask — email privacy@lifestuff.tech to be removed at any time. this is the website only; the app itself still collects nothing.

4. the companion admin.

the app includes a small http server that runs on the tablet itself and binds only to the tablet's local wi-fi interface — never 0.0.0.0, never the public internet. you use it by opening the tablet's lan url from a phone or laptop on the same wi-fi, pairing once with a code shown on the tablet display, and then managing settings, family members, chores, and layout from the browser.

it's paired-session-cookie protected, csrf-validated, and only running when kiosk mode is on (or in debug builds during development). its existence is contingent on your tablet being on your network. we have no remote-access capability.

5. oauth scopes — what we actually ask for.

• google calendar: https://www.googleapis.com/auth/calendar.readonly — read-only. we do not request, store, or use write scopes.
• microsoft graph: Calendars.Read (delegated, read-only), offline_access for refresh tokens, and User.Read for your profile name and email so the app can label the connected account. all three are read-only.
• apple icloud: caldav with an app-specific password you generate at appleid.apple.com. we use it for calendar and (separately, with a session cookie you authenticate yourself) shared albums.

in all three cases, tokens and credentials are stored on the tablet in EncryptedSharedPreferences using android keystore — not on any server of ours.

6. optional crash reporting (sentry).

if — and only if — you opt in via settings, the app may send anonymised crash reports to sentry to help us diagnose bugs. we do not send calendar contents, photos, contacts, oauth tokens, or anything else that constitutes user data. crash reports are stack traces, device model, os version, app version. you can revoke consent at any time and they stop.

7. children's privacy.

lifestuff is a household application purchased and operated by an adult. the kid-facing chore / stars / rewards tiles are local ui rendered on your tablet — they do not constitute separate accounts and we do not collect data from or about children. no data of any kind about your family members leaves your tablet through lifestuff. we comply with coppa by design: there is no data-collection layer to opt out of.

8. third-party services.

when lifestuff connects to a third-party provider on your behalf, that provider's privacy policy governs what they see:

• apple: apple.com/legal/privacy
• google: policies.google.com/privacy
• microsoft: privacy.microsoft.com/privacystatement
• open-meteo (weather): open-meteo.com/en/terms
• openstreetmap (event-location lookup on android, via nominatim / photon): wiki.osmfoundation.org privacy
• bird buddy: mybirdbuddy.com/privacy
• sentry (only if you opt in): sentry.io/privacy

9. your rights (gdpr / ccpa).

for your family's content the answer is trivial: it's on your tablet, so to delete it, uninstall the app — there's nothing on our end to access, correct, port, or erase. for the small set we do hold (your account record, device records, encrypted sync parcels if you enabled away-from-home sync, and the notify list), email privacy@lifestuff.tech to access or delete it — we action requests within 30 days, and parcels age out on their own within 45. if you opted into sentry and want stack traces associated with your device removed, include the install id shown in settings → about.

10. changes to this policy.

if we materially change how the app handles data, we'll update this page, change the effective date above, and surface the change in the app on next launch. we will not retroactively reduce privacy protections for data already on your device.

11. contact.

privacy@lifestuff.tech
lifestuff, a product of Inflect LLC, florida, united states

not legal advice. have a lawyer in your jurisdiction review before publishing.