A private workspace.
A clear data boundary.

Google sign-in and Gmail

Google sign-in supplies a verified email address and account identifier to authenticate the owner. The server restricts dashboard access to the configured owner identity.

Connecting Gmail is a separate, optional consent. The app requests read-only access to search messages and display selected messages from the owner's approved mailboxes. It cannot send, edit, or delete mail. Message bodies are fetched when needed; attachments and remote images are not downloaded.

What is stored

• Convex stores connection metadata, encrypted credentials, session records, connection health, imported dashboard records, explicit corrections, approval drafts, and limited audit history. The credential encryption key is held separately in the server environment on Netlify.
• Ordinary Gmail search and reading do not save message bodies, subjects, snippets, or search queries in Convex. Background Gmail ingestion is disabled. Any future change tracking requires a separate opt-in.
• Assistant conversations may be saved in the browser on the device used to access the dashboard. Replies can contain information from selected records. Clearing an active selection does not erase older saved conversations.

AI and service providers

Netlify runs the application and Convex provides its database. Google processes sign-in and Gmail requests. These providers process the information needed to provide their services, including ordinary request and operational metadata.

The assistant uses Anthropic. Only when the owner selects records and sends a question does the app send bounded excerpts of those selected emails or expense fields, the question, and limited recent conversation context to Anthropic. Opening or selecting a message alone does not send it to AI. The assistant has no tools to send mail or perform financial actions.

LifeDash does not sell Google user data, use it for advertising, or use it to develop or train generalized AI models. Google data is used only to provide the requested personal dashboard and assistant features.

LifeDash's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and control

Stored dashboard records remain until the owner removes them. Disconnecting a service in Connections removes its credential and associated connection metadata, metrics, and recent connection history from the active database. It does not erase imported records or saved browser conversations.

Google authorization can also be revoked in Google Account connections. Browser conversations can be removed using the app's chat controls or by clearing this site's browser storage. Provider-managed backups and operational records may follow each provider's retention policies.

Questions or deletion requests

The sole owner controls access, connections, and stored records. For privacy questions or a deletion request, contact the operator through Kist Digital.