LifeLinkOS keeps your household’s information on your device. If you create an account, we also keep a copy on our servers so your family can share a group and so nothing is lost when you change phones. We do not sell your data, show you ads, or use third-party ad or tracking networks. To improve the app we collect anonymous, aggregate usage statistics — never your content — which you can turn off anytime.
When you set up LifeLinkOS you enter an account name and (optionally) an email, and you create the content that makes the app useful — tasks, calendar events, notes and posts, money entries, contacts, saved places, family members, health and fitness entries, and profile details. All of it is stored on your device.
When you are signed in to an account, your data is backed up to our servers so nothing is lost when you change phones. That backup holds everything you keep in the app.
Syncing to the other phones in your group is a narrower thing. What travels between members is tasks and events, notes and posts, photos you add, contacts you choose to import, saved places, money entries and any transactions from a statement you import, daily check-ins and journal entries you have chosen to share, and your location if you have turned sharing on.
Your health and fitness data is not in that list. Habits and check-ins, weight, sleep and mood, food and symptom logs, medications, walks and their routes, workouts and journal entries are stored under your own account so they follow you to a new phone — and nobody else can read them, including the people in your groups. The database refuses to hand them to any other account. Check-ins and journal entries are private by default; only ones you deliberately post reach the group.
Photos you attach to a journal entry are the exception that never leaves: they stay on the phone that took them, and are not uploaded at all.
Everything is sent over an encrypted connection and stored only to run the service. If you use LifeLinkOS without an account, nothing leaves your device at all.
Location sharing is off until you switch it on. With it on, your position is shared with the groups you belong to and a short trail is kept so the map can show where someone has been. Turning sharing off erases the trail.
A walk you record saves its route, including while the phone is locked or in your pocket — that is the point of recording a walk, and an ongoing notification says so the whole time it is happening. Recording only ever starts when you tap Start, and stops when you tap Stop. The route is saved to your own account with the rest of your health data, where only you can read it.
If you connect Health Connect on Android or Apple Health on iPhone, LifeLinkOS reads steps, exercise, distance, calories and heart rate — to show you your own activity, and to count a walk using your phone’s real step count rather than estimating it. We only read this data; we never write anything back.
Health entries you make in the app — habits and daily check-ins, weight, mood, sleep, food and symptoms, medications and doses, walks, workouts and journal entries — are saved to your account so they are there on any phone you sign in on. They are visible to you alone: sharing any of it with your group takes a deliberate post, one item at a time. Deleting your account deletes them.
Choosing “Import from phone” shows you your address book so you can pick who to add. Only the people you select are saved. The rest are never uploaded.
To understand which features are useful and where the app can improve, LifeLinkOS records anonymous, aggregate product-usage events in our own backend. We do not use third-party analytics services.
What is recorded: the name of an action (for example “opened the app,” “viewed Money,” or “completed a task”), a coarse feature category, your platform (iOS, Android, or web), your app version, and a one-way anonymous identifier that is not your name or email. Events are batched and used only in aggregate.
What is never recorded: your tasks, messages, notes, money entries, health data, locations, contacts, or any other content — and no names, emails, phone numbers, addresses, or amounts. These are structurally blocked before anything leaves your device. This data is never sold or shared, and older events are periodically deleted.
Your control: anonymous usage analytics are on by default; you can turn them off at any time in Settings, and nothing is sent while they are off.
LifeLinkOS is sold as a subscription with a free trial. Purchases are processed by Apple on iPhone/iPad (or Google Play on Android). Those providers handle your payment information under their own privacy policies; we only receive confirmation of whether your subscription is active.
LifeLinkOS is a family-management tool intended to be set up and managed by a parent or other adult “organizer.” Profiles for children are created and controlled by that adult. The app is not directed to children for independent sign-up, and we do not knowingly collect personal information from children outside of a family their guardian manages.
If we make material changes we’ll update the effective date above and, where appropriate, notify you in the app.
Questions about privacy? Email lifelinkos.support@gmail.com.