Privacy Policy

Last updated October 8, 2026

Life With Purpose (lifewpurpose.com) is a life planner. This page says what it keeps about you, where, and how to have it deleted. In short: your plan is yours, it’s only used to show it back to you, and nothing is sold or used for ads.

Without an account

Everything you make (lines, notes, photos, videos and settings) is saved in your own browser, on your own device. None of it is sent to us.

With an account

When you sign in, we keep:

• Your account: your username, or, if you sign in with Google, the email address, name and profile picture Google shares with us. Passwords are stored only in scrambled (hashed) form; we can’t read them.
• Your plan: your lines, notes, settings, and the photos and videos you add, so you can open it on any device.

We use these only to sign you in and to save and show your plan. Accounts are stored with Supabase, and the rules of the database let each account read only its own plan and files. The site is served by Netlify, which, like any web host, briefly records technical details such as your IP address.

Sign in with Google

If you choose “Continue with Google”, Google tells us your name, email address and profile picture. We don’t get your Google password or access to anything else in your Google account. Our use of that information follows the Google API Services User Data Policy, including its Limited Use requirements.

Google Calendar

If you’re signed in, you can link your Google Calendar (Customize → Preferences) to show its events on your Timeline. You choose what to allow on Google’s own page. We ask only to read: the list of your calendars (their names and colors) and the events on them (each event’s title, date and time, and its link). We never create, change or delete anything in your calendar.

• What we keep: only the access Google gives us (a token, kept encrypted; see How we protect your data) and the Google account’s address, stored with your account so your events can be shown on any device. Your events themselves aren’t stored on our servers: each time the Timeline needs them, they’re read from Google (the past year and the next two) and shown in your browser or app only.
• What we use it for: only to show your events on your own Timeline. We don’t share it with anyone, sell it, use it for ads, or use it to train any AI or machine-learning models, and no person reads it, except with your permission when you ask us for help.
• Unlinking: choose Unlink Google Calendar in Customize → Preferences, and we give the access back to Google and delete the token. You can also remove Life With Purpose’s access at any time in your Google Account (myaccount.google.com/permissions). Deleting your account unlinks it too.

Life With Purpose’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we protect your data

• Encrypted connections: everything between your browser or the Mac app and our servers, and between our servers and Google, travels over encrypted HTTPS (TLS) connections.
• Encrypted storage: your account, plan, photos and videos are stored with Supabase on encrypted disks (AES-256). The Google Calendar access token is also encrypted on its own (AES-256-GCM) before it’s stored, with a key that only our server function can derive, so the database alone can’t reveal it.
• Access controls: the database’s row-level security rules let each account read and change only its own plan, photos and videos; photos and videos are kept in private storage, not on public links. Google Calendar tokens are in a table that no browser or app can read at all: only our server function uses them, and it sends your browser your events, never the token.
• Least access: we ask Google only for what the feature needs: read-only access to your calendar list and events, and, for “Continue with Google”, your name, email address and profile picture.
• Passwords are stored only as salted hashes (bcrypt), never in a readable form.
• Keeping little: calendar events aren’t stored on our servers; unlinking deletes the token, and deleting your account deletes everything in it. Administrative access to our servers is limited to the developer.
• If something goes wrong: if we learn of a breach affecting your information, we’ll tell you, and the authorities where the law requires it, without undue delay.

What we don’t do

• No ads, no analytics or tracking, and no tracking cookies.
• We don’t sell or share your information, and we don’t look at your plan, except when you ask us to help with your account.

The page loads its fonts from Google Fonts and one code library from jsDelivr, so those services see a request from your browser. Your sign-in is remembered in your browser’s storage.

Deleting your information

Signing out removes your plan from that browser; it stays safe in your account. To delete your account and everything in it, open your account (the button at the top right), choose Delete account and type “delete” to confirm. Your username, plan, photos and videos are deleted straight away and can’t be recovered. If you can’t sign in any more, email us from the address (or with the username) on the account and we’ll delete it within 30 days. Without an account, clearing the site’s data in your browser removes everything.

Children

Life With Purpose isn’t meant to be used by children under 13, and they shouldn’t make accounts.

Parents and teachers can keep a plan for a child or student inside their own account (Customize → Preferences → Children and students): a name, an optional year of birth, and the notes they write. It’s kept exactly like the rest of their plan: in their browser, or with their account if they’re signed in, readable only by them, never shared, and deleted when they delete that plan or their account. A first name or a nickname is all it needs.

Changes

If this policy changes, we’ll update this page and the date at the top.

Contact

Questions or deletion requests: lifewpurpose.support@gmail.com.