Effective Date: October 6, 2026
Most of My Life Practice runs on your device. Your data syncs through your own Apple iCloud, so your iPhone and iPad stay in step. It lives with you, not with us. We run no servers. We keep no copy. We have no access, with one narrow exception for repeated attempts to manipulate the AI, explained below. The longer version exists for two reasons. If you connect a calendar, from Apple, Google, or Microsoft, we read it to give the app context and write content-free "busy" blocks back so your calendars stay in sync. We never write any meeting details. We write only sanitized entries. And on Standard and above, you can ask Claude to help you think, which means some of your text goes to Claude when you ask. You should know exactly what, when, and why.
My Life Practice, LLC is a US company based in Georgia. We build productivity software for people who care about getting things done and where their information goes. You may reach us at info@mylifepractice.com.
Your diary, your people, your notes, your tasks, your transcripts live in encrypted storage on your device and sync through your own Apple iCloud, so they stay current across your devices. Your voice recordings are different: the audio files stay on the device that made them and do not sync, as described in 'What Truly Never Leaves Your Device.' The sync runs between your devices and Apple. We keep no server copy of our own, apart from the one narrow security exception noted in that same section. Delete the app and the local copy goes with it; anything already in your iCloud stays there until you remove it, which you can do in iOS Settings under your Apple ID. Demo mode is different still. It is a preview environment. Anything you enter while in demo mode is stored only on your device, is never synced or transmitted anywhere, and is automatically deleted every time the app restarts or you leave demo mode. You should not use demo mode to store information you want to keep.
When you connect a Google account, you grant us the scopes listed below. We read your calendar to show your events. When you turn on cross-calendar busy sync, we also write content-free "busy" blocks back to it. Each block carries only the start time, the end time, and the label you choose. It never carries meeting titles, attendees, locations, or notes. That is the only thing we write to your Google account, and we keep no copy on our servers. Your Google tokens stay in Apple's Keychain on your device. You can revoke access any time at myaccount.google.com/permissions.
openid, email, profile. Tells us it is you across sessions.calendar.events. Lets us show your events alongside your plans, and write content-free busy blocks back so your calendars stay in sync.Starter runs AI on your device using Apple's MLX framework with a local language model. Nothing about you leaves your phone. Running a model locally needs a device with enough memory to hold it; where your device cannot, the app gives you rule-based suggestions instead and tells you when it is doing so.
On Standard, Pro, and Pro Plus, AI runs in the cloud rather than on your device. Certain AI features send specific data to Anthropic (Claude) when your device is online. Offline, the app has no access to the AI functions. Anthropic does not train its models on data sent through their API. The next four cards, and section 12 for your calendar and tasks, list the features that use Claude and the data they send.
When you ask the app to build or refresh a stakeholder profile, it sends data to Claude. The data: the person's name, their LinkedIn URL if you saved one, your notes, how you met, tags, company, and role. Claude uses the name and these details to search the public web and read the pages it finds, and writes the profile from what it found. Those searches are run by Anthropic, not from your device, so the websites involved see Anthropic's requests rather than yours. The profile comes back to your device. Anthropic keeps this data no longer than its own published retention policy allows, not for a period we set.
When you save a diary entry, the app sends the entry to Claude for fact extraction. The data: the entry's full text and the names of any people you linked to it. The extracted facts come back to your device. Anthropic keeps this data no longer than its own published retention policy allows, not for a period we set.
These features come from the Behavioral Expert, and they are available on Pro and Pro Plus. Pro includes up to 10 Big Five assessments a month. Pro Plus has no monthly limit. If you are on Free, Starter, or Standard, none of this runs and none of this is sent. The Behavioral Expert covers Big Five (OCEAN) personality analysis, communication style, political assessment, landmine detection, communication guidance, and transcript enhancement. Each feature sends the relevant persona context and any prior interactions you recorded for that person. Transcript enhancement also sends the meeting transcript text and speaker labels. The analysis returns to your device. Anthropic keeps this data no longer than its own published retention policy allows, not for a period we set.
Nudges send a small set of pseudonymous metadata about your relationships. The data: interaction counts, interaction types, the relationship-strength score, and the date of last interaction. We replace the person's name with a generic reference before sending.
Audio voice recordings never leave your device. Audio transcription runs on your device. Calendar conflict detection runs on your device. These three things hold on every tier. There is one narrow exception to what leaves your device, and it rewards honest use. If you are not trying to manipulate the AI, we have no reason to look at your data, and we build the system to avoid it. In the rare case of deliberate, sustained attempts to subvert the AI, we reserve the right to move a secure audit record of that activity off your device. We keep the specifics of how we detect that abuse to ourselves, on purpose. The Terms of Service explain the principle.
The app reads your connected calendars (Apple, Google, Microsoft) and stores events in local app storage. On Standard and above, it sends Claude the titles of your meetings, together with the titles of your tasks, deliverables and RAID log items, to write your Today summary, rank the day's priorities, and write your weekly review and weekly prep. The weekly review also sends the opening lines of that week's diary entries. When you open a meeting briefing, it sends that meeting's title and description, so Claude can pick out which of the sensitive topics you recorded apply and, on Pro and Pro Plus, tailor the Behavioral Expert's guidance to the meeting. It does not send the list of attendees. Anthropic keeps this data no longer than its own published retention policy allows, not for a period we set. The app also writes back. When you have a commitment on one calendar, it places a content-free "busy" block on the others, so your clients know you are busy and do not double book you. Each block carries only a start time, an end time, and the display name you choose (the default is "Busy"). It also carries a small tag the app uses to recognize its own entries. It never carries meeting titles, attendees, locations, or notes. The blocks are silent. They never alarm or remind you. Only your real events do. The app writes straight from your device to the calendars you authorize. There is no MyLifePractice server in between. In Settings you choose, for each calendar, whether the app reads it as a source and whether it writes busy blocks to it. Subscription (ICS) calendars are read-only, so the app never writes to them. If you delete a block the app wrote, the app pauses syncing that item until you reset it. If the enterprise blocks apps from writing to a calendar, you can have the app send a single "busy" invitation to your own address on that calendar. It goes only to you, never to anyone you meet with, from one Google or Microsoft account you choose. That invitation travels as an ordinary calendar invitation over email, so the account that receives it handles it with its own mail and security rules, the same as any invitation you get. You could use calendar scripting tools to disable the alerts on the platforms, as it is not controlled by the invitation itself. Apple, Google, and Microsoft sync their own calendars through their own infrastructure, beyond our control.
This website uses no analytics cookies, advertising trackers, or third-party scripts. The app uses no advertising SDKs, no third-party analytics, and no cross-app tracking. The AI features that send data to Claude on Standard and above are documented separately in Sections 7 through 10 and in Section 12, and section 9 applies on Pro and Pro Plus.
Operational telemetry is off by default. Turn it on in Settings if you want to help us find and fix bugs faster. When it is on, we send technical counts and categorical labels, not content, to our observability provider, Honeycomb: app durations, app and OS version, device class, and a random id generated fresh each time you open the app. Once a week, the app also sends a short count of how much it was used: the number of days you opened it (as a range), how many calendar sources are connected, how many briefings you opened, how many meetings it prepared you for, how many notes you captured, a range for AI use, and the calendar week in which the app was installed. The count is made on your device, holds no names, titles or content, and is erased from your device if you turn sharing off before it is sent. We don't send your diary text, real names, notes, voice content, email content, or calendar content, and by default we never do. We don't send anything that identifies you or your records, hashed or otherwise. The one exception is the narrow security audit record described in 'What Truly Never Leaves Your Device.' Telemetry may also include your subscription plan tier (for example, "standard" or "pro"), the name of the app capability being checked, whether that check were allowed or declined, and coarse usage-quota levels (for example, "approaching limit"). We use this to understand which plan features are used and how the plan gates behave. We never collect purchase receipts, transaction identifiers, App Store product identifiers, or the prices you paid. Your payment relationship is with Apple, and Apple does not share your payment details with us. Turn the toggle off and telemetry stops immediately. Honeycomb keeps this data under its own retention policy, not a fixed period we set.
The End User License Agreement asks you to contact us before bringing a claim, lets you opt out of arbitration by writing to us within thirty days, and lets you tell us when you have stopped using the app. Each of those is a letter or email you send us directly, and each contains information about you: at minimum your name, and usually an address or email address so we can reply.
This is the one place where we hold information that identifies you. We do not have an account for you, and the details you enter in the app stay on your device. When you write to us about a legal matter, we necessarily receive and keep what you send.
What we keep. The notice as you sent it, the date we received it, and the version of the agreement in force at the time. We do not add anything to it, and we do not connect it to your use of the app, because we have no way to do so and no reason to do so.
Why we keep it. An opt-out record is what allows us to honor your opt-out. If we were to delete it, we would have no way to know you had opted out, and you would lose the protection you requested. A notice of dispute is kept because it is the start of a legal matter and both of us may need to refer to it.
How long we keep it. Seven years from the date we receive it, and longer if a legal matter is still open at the end of that period.
If you tell us you have stopped using the app, we record the date we receive that notice, and we keep your legal correspondence for seven years from that date. If a legal matter is still open, we keep it until that is finished. And if you use the app again after telling us, your use is governed by the End User License Agreement as it then stands, and the period runs again from then.
We keep all of this under legal hold, which means it is retained for the purpose of establishing, exercising, or defending a legal claim, and is not used for anything else.
What we do not do with it. We do not use it for marketing. We do not sell or share it. We do not use it to identify you inside the app. It sits in a record of legal correspondence and nowhere else.
You can export a complete copy of your data from Settings whenever you want, without asking us. The file is yours the moment it is created.
It is not encrypted, and that is deliberate. A copy you cannot open is not a copy. So the export is readable by anything that reads text, and it holds everything you have written: your diary, your notes, and what you have recorded about the people you work with. Some of that is information about other people, who never chose to be in a file on your laptop.
Before the app creates it, we ask you to confirm it is you with Face ID, Touch ID, or your device passcode. That is the last point at which we can help. After that the file is on your device, and where it goes is your decision.
We never receive it. We hold no copy of your content, so we cannot send you one, and we cannot get it back if it goes somewhere you did not intend. What we do retain, the anonymous diagnostics described above if you turned them on, is unchanged by anything you export. Our obligations for that data stay exactly as they are. For anything about your data rights, email data-rights@mylifepractice.com.
Under GDPR and UK GDPR, the lawful basis for operational telemetry is your consent, given when you turn it on in Settings. The lawful basis for the narrow security audit record described in 'What Truly Never Leaves Your Device' is our legitimate interest in detecting and stopping deliberate misuse of the AI (GDPR Article 6(1)(f)); you can object to this under Article 21 by emailing us. The basis for sending content to Anthropic is your consent, given by your active choice to use Pro AI features. The lawful basis for keeping legal correspondence, described in section 16, is the establishment, exercise, or defense of legal claims, and our legitimate interest in being able to honor the choices you have made under our agreements; the right to object does not extend to records held on this basis while the retention period runs. Data sent to Anthropic transfers to the United States under Anthropic's standard contractual clauses. We do not have an EU establishment. Email us if you would like an EU representative named.
Under CCPA and CPRA, we do not sell or share your personal information. We do not use it for cross-context behavioral advertising. The categories we process are listed in the sections above. Your rights of access and deletion work exactly as described in section 15, including the narrow exception in section 16 for legal correspondence we are required to keep. For anything about your data rights, email data-rights@mylifepractice.com.
Your device is the perimeter. We recommend a passcode, biometric authentication, and a current version of iOS. App data sits in SwiftData with on-disk encryption tied to your device's secure enclave. Authentication tokens live in Apple's Keychain. Network traffic uses TLS 1.3. If we discover a security issue that affects you, we will tell you promptly.
My Life Practice is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe we have, email us and we will resolve it.
If we change anything material, we will update the effective date above and post a notice in the app on next launch. Notifications reach you in the app, so as long as you keep using the app, even at the Starter tier, you will see them. The current version always lives at mylifepractice.com/privacy.
Email us at info@mylifepractice.com. We aim to respond within 48 hours. For anything about your data rights, write to data-rights@mylifepractice.com.