Privacy Policy
LifeSync · version 2026-09-18 · last updated 18 September 2026
The short version. Your fitness, nutrition and health entries are encrypted on your phone before they leave it, and we do not hold the key. We cannot read them. We do not sell data, show ads, or use third-party analytics or advertising SDKs.
What we collect
| What | Why |
|---|---|
| Your Google account ID and email address | To identify your account so it can sync, and so group members can be invited and recognised. Required — LifeSync has no other way to sign in. |
| Your Google display name and profile photo | Your name and the link to your photo are held in plain text by our authentication provider. If you join a group, an encrypted thumbnail of the photo is uploaded so that group's admins can see who is who on their member list. The thumbnail is ciphertext we cannot open, and it goes to no group you have not joined. You can use an icon or your initials instead — see Group sharing below. |
| Your encrypted entries | So they can reach your next phone when you switch devices, and the groups you share with. Stored as ciphertext we cannot open. |
| Group names, member display names, and who is in which group | So groups can be listed and members shown. See below — these are not encrypted. |
| Device registrations | LifeSync runs on one device per account. We record which device that is, so we can tell you when your account is claimed somewhere else. |
| Your time zone | If you are in a group, the zone name your phone reports (for example Asia/Kolkata) is shared with that group's admins, encrypted, so a trainer's view of your week is drawn in your days rather than theirs. It is a region rather than a location, usually a large one, and we cannot read it. See Group sharing below. |
| Reports you send us | Only if you report something. The reason, your note, and which group and member it concerns — never the reported content itself. See below. |
| Crash reports | Sent automatically when the app hits an error: what the error was, the technical trace, which screen you were on, the app version and your device platform, against your account. Error text is scrubbed first, so a message that quotes your own data back at you has that part removed before it is sent. Deleted when you delete your account. |
We ask Google for three permissions and no others: your email address, your basic profile, and access to this app's own hidden folder in your Drive. That last one cannot see, and is never granted access to, any other file in your Drive.
What is not encrypted
We would rather say this plainly than imply more than is true. The main things stored in plain text on our servers, and technically visible to us, are:
- Group names — for example "Smith Family" or "Anna's Gym".
- Display names of group members, and who belongs to which group, with what role.
- Notification text — short system messages such as "Member left", or "Open LifeSync to read it". These may name who did something, which group it happened in, and what kind of thing it was — for example "Priya set your weekly meal plan". They deliberately never carry the thing itself: not the message your coach sent, not the announcement, not what is in your plan.
- Your email address, name and profile-photo link, held by our authentication provider.
- Block records — that an account and a group have been separated, and the reason chosen.
- Crash reports — the error, its technical trace and the screen it happened on. These cannot be encrypted and still be readable by us, which is the entire point of sending them. They are scrubbed of quoted data before they leave your phone, and deleted with your account.
- Server logs — a request timestamp and IP address, kept briefly as a routine security measure.
The contents of your entries — every reading, log, amount, note, photo and file — are encrypted on your device and are not readable by us or by anyone we host with.
Your backup lives in your Google Drive, not with us
When backup is on, LifeSync writes an encrypted copy of your data to the hidden app area of your own Google Drive. It is your file, in your account, under your storage quota, and we cannot read it.
When you delete your account from inside the app, LifeSync deletes this backup too. It asks for your Google account at that moment so it can reach the hidden folder, and removes the backup, the data checkpoint and the key together with everything else.
If that step is refused or fails, or if you request deletion by email instead, those files stay in your Drive — an email request gives us no way to reach it. The deletion page shows you how to clear them yourself in three taps.
Group sharing
Beyond your display name and profile picture, only what you choose to share is shared, only with that group's members, and still end-to-end encrypted.
Your profile picture is published to a group by default. If you would rather your groups did not have a photo of your face, You → Profile lets you use an icon or your initials instead, and the photo stops being published.
Your time zone is shared with the admins of any group you join. It is the zone name your phone reports, such as Asia/Kolkata — a region rather than your location, and usually a large one covering many millions of people. It is there so a trainer's calendar of your week can be drawn in your days rather than theirs; without it, a client and a coach in different zones disagree about which square is today. Like everything else you share with a group, it is encrypted and we cannot read it, and it reaches no group you have not joined. Leaving the group stops it.
You can leave a group or stop sharing at any time. When you leave, your access ends immediately and the entries you had shared with that group are removed from it — your coach or admin no longer has your logs or your progress. Anything they authored, such as a plan they wrote, stays with them.
If you report something
You can report a message, an announcement or a person from inside the app. When you do, we receive the reason you picked, anything you chose to write, and enough to find what you mean — which group, which member, and the identifier of the item. We do not receive the reported content itself: it is encrypted with a key we do not hold, and reporting it does not change that. So we act on accounts and groups rather than on individual entries. A report is kept until we have dealt with it and for a reasonable period afterwards, and is deleted if you delete your account.
You can also block: an admin can bar an account from a group they run, and you can block a group and leave it. A block records that an account and a group are separated, so an invite link cannot put you back in. It is not shown to anyone else, and either side can lift the one they made.
How long we keep things
| What | How long |
|---|---|
| Your entries and files | Until you delete them, leave the group they belong to, or delete your account. |
| Messages between a coach and a client | 90 days, and at most 150 messages from each side. Older messages are removed automatically by the app. Each message is capped at 50 words. |
| Files sent to another member | Up to 7 days in transit storage, then deleted automatically. The copy on the recipient's device is theirs and stays until they remove it. |
| Notifications | Until you delete your account. |
| Crash reports | Until you delete your account. |
| Reports you send us | Until the report is dealt with, and a reasonable period after. |
| Server logs (timestamp and IP address) | Up to 30 days. |
Who else sees anything
Nobody is sold or given your data. We use service providers purely as infrastructure — hosting, database and file storage — and what they hold is the encrypted material described above. Those providers are Supabase (database and authentication), Cloudflare R2 (file storage) and Google Drive (your own backup, in your own account). Their servers may be located outside India. We have no analytics, advertising or tracking SDKs in the app, and the app does not ask Android for access to an advertising ID.
Deleting your account and data
In the app: You → Account → Delete my account & data. It is immediate and permanent.
If you have uninstalled the app or lost your phone, use the deletion request page — it works without installing anything, and lists exactly what is removed.
Your rights
Under India's Digital Personal Data Protection Act you can ask us to:
- Tell you what we hold — a summary of the personal data we process about you and who it has been shared with. Note that we cannot show you the contents of your own entries, because they are encrypted with a key only you hold; the app itself is where you read those.
- Correct or complete anything inaccurate. Your name and photo come from your Google account, so changing them there changes them here.
- Erase your data — see above; you can do this yourself at any time.
- Nominate someone to exercise these rights on your behalf if you die or become unable to. Write to us and we will record it.
- Withdraw your consent. Because signing in is the only way LifeSync works, withdrawing consent means deleting your account, and has the same effect.
- Complain — to our Grievance Officer below, and afterwards to the Data Protection Board of India if you are not satisfied.
Children
LifeSync is for adults. You must be 18 or older to use it, and we do not knowingly create accounts for, or collect data from, anyone under 18. India's Digital Personal Data Protection Act treats anyone under 18 as a child, which requires a verifiable parental consent we do not collect; if we learn that an account belongs to someone under 18 we will delete it. We also ask Google Play to restrict users it determines to be minors from downloading the app.
Changes
We may update this policy. The version and date at the top always identify the current text, and the version in force is shown in the app under You → About. Where a change materially affects how your data is handled, we will publish it here and describe it in the app's release notes.
Grievance Officer
If you have a complaint about how your data is handled, or about something that happened in a group, write to our Grievance Officer. We will acknowledge within 48 hours and resolve within 15 days.
Aditya Malkar — Grievance Officer & Data Protection Contact
F1 Navshantiniketen Society, Sector 29, Nigdi, Pune 411044, Maharashtra, India
[email protected]
Contact
Email [email protected]. See also our Terms of Service.