Legal

Privacy Policy

The short version: LifeOS has no server, no account, and no telemetry. Your reminders live in a file on your computer, and nothing is sent anywhere unless you turn on a feature that is off by default.

Last updated July 15, 2026 · Applies to LifeOS v0.1.0

1. What is stored, and where

Everything LifeOS keeps lives in a single folder on your computer: %APPDATA%\LifeOS\. Inside it are a local database file (lifeos.db) that holds your reminders, reminder history, chat sessions, settings, and any encrypted keys or tokens you’ve added, plus a logs folder. The database is a standard SQLite file - you can open it with any SQLite browser and read every byte of it. There is no lock-in, because there is no server.

2. Network activity

By default: nothing. With its default settings, LifeOS makes zero network requests. This is enforced in code, not just promised in this document: a network filter blocks every outbound request that is not on an allowlist, and the allowlist is empty until you change a setting that requires it.

The only destination LifeOS ever contacts is OpenAI (api.openai.com), and only when you have enabled a cloud feature, added your own API key, and confirmed. If you also connect Gmail, LifeOS additionally contacts Google’s sign-in and Gmail endpoints on your behalf (see §5).

3. OpenAI & cloud AI features

Cloud AI is optional and off by default. Enabling it requires a consent dialog and your own OpenAI API key. When a cloud AI feature is active:

Sent to OpenAI: the text of the command or question you asked, plus the current date, time, and time zone.
Never sent: any audio, your reminders, your reminder history, your notes, your settings, or your name, email, or device identifier.

Requests go directly from your computer to OpenAI under your own API key and are billed to your own OpenAI account. LifeOS’s authors never see your data or your bill. OpenAI’s handling of that text is governed by OpenAI’s own policies.

4. Speech & voice

By default, your voice is transcribed on your computer by a speech-recognition model that ships inside the app. Audio never leaves your machine and is never written to disk. There is no wake word and no background listening - Yogi records only while you hold or trigger the microphone.

If you opt in to cloud speech-to-text or cloud voices, the relevant audio or text is sent to OpenAI under your key for that single operation, exactly as described in §3. You can switch back to on-device speech and offline voices at any time.

5. Email & Gmail

Connecting Gmail is entirely optional. When you connect it, you authorize LifeOS with read-only access (the gmail.readonly scope) using your own Google Cloud credentials. Synced email is stored locally in your LifeOS database and is never uploaded anywhere by LifeOS.

AI email summaries and automatic web research are separate, opt-in features. When enabled, they use your OpenAI key exactly as described in §3.
Your Google sign-in tokens and client secret are encrypted at rest (see §6) and are never logged.
Disconnecting Gmail revokes the access token with Google and wipes the locally stored email data. You can also clear the local email cache on demand.

6. Keys & credential storage

Your OpenAI API key and any Gmail tokens are encrypted at rest using Windows DPAPI, via Electron’s safeStorage. The encryption is tied to your Windows user account, and the plaintext is only ever produced inside the app’s privileged process - it never crosses into the user interface.

Honest scope: this protects your secrets against someone copying your %APPDATA% folder to another machine. It does not protect against software already running as you on your own computer. If secure storage is unavailable, LifeOS refuses to write your key to disk in plaintext and offers to keep it in memory for the session instead.

7. Analytics & telemetry

None. There is no analytics SDK, no crash reporter, no “anonymous usage statistics,” and no update ping. LifeOS does not phone home and does not know you exist. Because default operation is fully local, you can verify this yourself with a network monitor - and we encourage it.

8. Your control & data deletion

You are always in control of your data:

Open data folder - Settings shows you exactly where your data lives so you can inspect or back it up.
Reset local data - Settings → Danger Zone permanently deletes the reminders, history, and settings in your LifeOS data folder, and nothing else on your device.
Pause everything - you can pause all reminders or turn off any cloud feature at any time.
Uninstalling does not delete your data - this is intentional, so an accidental uninstall never loses your reminders. To remove everything, delete the %APPDATA%\LifeOS\ folder by hand.

9. Children

LifeOS is not directed at children under 13 and collects no information about anyone. Because all processing is local and no personal data is transmitted to LifeOS or its authors, there is no data collection to consent to.

10. Changes & contact

This policy applies to LifeOS v0.1.0. If a future version changes what data is stored or sent, this page and the in-app disclosures will be updated, and any new cloud capability will remain opt-in and separately disclosed.

Questions about privacy? Contact the team or open an issue on GitHub.

This page is a plain-language summary of how LifeOS behaves. It describes the software’s design and is provided for transparency; it is not a contract. See the Terms & Conditions for the terms that govern your use of LifeOS.