LifePilot

LifePilot is a private family organizer. A parent invites the people in their household; everything you add or that LifePilot finds is shared only inside that household. We never sell your data, show ads, or use your data to train AI models.

What we collect

Account: name, email addresses you add, and a password (stored only as a one-way hash). Passkeys (Face ID / fingerprint) store a public key only — your biometrics never leave your phone.
Family hub data: the events, tasks, bills, notes and family members you or your household add.
Email (only if you connect it): with your permission, LifePilot reads messages in the Gmail accounts you mark Personal, using Google's read-only Gmail access. An AI reads each new message once to find family items (appointments, games, bills, things to bring). We keep only the item it creates, a link back to the email, and the message ID so we don't read it twice. We do not store the email's text. Addresses marked Work are never read.
Texts (only if you link a phone): each new text your phone hands to LifePilot is read by an AI to find family items. So it understands replies (an invite, then “we’ll be there”), LifePilot keeps the last 15 texts of each conversation, encrypted, for up to 21 days, then deletes them. Only the items it finds stay. Removing a phone in ⚙️ → Texts deletes its saved conversations.
Bank (only if you connect it): through Plaid, account names, last four digits, balances and transactions (date, merchant, amount, category) so LifePilot can track your budget. Plaid handles your bank sign-in; LifePilot never sees your bank password and cannot move money. Balances are fetched when you look and are not stored; transactions are kept for your household's budget and deleted when you disconnect the bank.
Location (only if you turn on sharing): your latest position and its street address, shown only to your household. Only the most recent spot is kept, and it is deleted when you stop sharing. Addresses are looked up through OpenStreetMap.
Team calendars (only if you add one): the calendar link you paste and the games and practices in it.

Google user data

LifePilot's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used only to show you and your household the family items found in your own email. It is not used for advertising, not sold, not transferred to others except as needed to provide this feature (the AI service below), and not read by people unless you ask us for support, it's needed for security, or the law requires it. It is never used to train AI models.

Who processes data for us

Railway (hosting and database), Anthropic (the AI that reads new emails to find family items; it does not train on this data), Google (Gmail access you grant), Plaid (bank connections you choose).

Security

Connections are encrypted (HTTPS). Google and bank access tokens are encrypted in our database. The app locks after 15 minutes without use and every time it's opened.

Your choices

Disconnect Gmail, a bank or a team calendar any time in ⚙️ Settings; we revoke our access and delete the connection.
You can also remove LifePilot's Gmail access at myaccount.google.com/permissions.
To delete your account and household data, email edgarb@bircoinc.com; we delete it within 30 days.

Children

Only adults sign in to LifePilot. Parents may add their children's names and activities to their own household.

Changes

If we change this policy we'll update the date above and tell signed-in users in the app.

LifePilot · Privacy · Terms · Questions: edgarb@bircoinc.com