life anchor.
Life Anchor · Privacy

Privacy Policy

Life Anchor keeps your tasks, routines, notes and money in one calm place. This policy explains what we collect on each platform, why, who helps us run the service, how long we keep things, and how to take your data with you or delete it.

Effective 14 October 2026Android · Windows · WebEnglish is the binding version

The short version

  • No ads, no tracking, no selling. There are no advertising, analytics or crash-reporting kits in any Life Anchor app or page, and we never sell or rent your data.
  • Your data stays yours. We use it to run Life Anchor for you, nothing else. We don't use it to train AI models.
  • Extra access is off until you turn it on. Contacts, message capture, calendar, Gmail, voice and AI each start off, and each only sees what it needs.
  • Some features use OpenAI. Voice capture on Windows and the web, and the Premium AI features, send that one recording or piece of text to OpenAI to do their job.
  • You're in control. Export everything, delete any item (it waits 30 days in Deleted & activity, then it's gone), or delete your whole account from Settings at any time.

01Who we are

Life Anchor is made and run by Daboul (“we”, “us”), the publisher of the Life Anchor apps. For data-protection laws such as the EU and UK General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK), we are the controller of the personal data this policy describes. You can reach us at privacy@daboul.uk.

This policy covers all of Life Anchor:

  • Life Anchor for Android (app ID uk.daboul.lifeanchor), downloaded from daboul.uk;
  • Life Anchor for Windows, installed from download.daboul.uk or the Microsoft Store;
  • the website and web app at daboul.uk and app.daboul.uk;
  • the Life Anchor service (our servers and API) that keeps them all in sync.

How you may use Life Anchor is set out in our Terms of Use.

02What we collect

Almost everything Life Anchor stores is something you typed, spoke or added yourself.

WhatDetails
Your account
Your email address, the name you give (optional), and your password, which we never store as written: it’s turned into a PBKDF2 hash with a salt of its own, so we can’t see or recover it. Also your settings that travel between devices (language, region, time zone, currency, appearance, saved views and similar), and whether your account has Premium and until when.
What you put in Life Anchor
Tasks, routines and their history, notes, reminders, focus sessions, Inbox items, people you add and the details you give them, areas and categories, and money records: accounts, expenses, transfers, budgets and their categories. Receipts and slips you attach (pictures or PDFs, up to 10 MB each). An activity history of your changes, so you can undo them.
Signing in and keeping your account safe
One-time codes we email you; your signed-in devices (a device or browser label and its app or browser type); sign-in attempts (the email entered, IP address, approximate country, time and result); and sign-in requests made from a QR code or approved on your phone (the requesting computer’s IP address, approximate country and browser).
For notifications
On Android, a push token for your phone and its language, so reminders can reach you. Windows and the web don’t need one.
When you write to us
Your email address and what you send us.

We don’t collect your location, advertising IDs, browsing history, your phonebook in bulk, or your calendar. We don’t ask for sensitive information such as health data; if you choose to write it into a task or note, it’s stored like any other content and used only to show it back to you.

03How we use it, and why we’re allowed to

PurposeWhat it usesLegal basis
Run Life Anchor for you: store your things, sync them between your devices, show them back to you
Your account and content
Our contract with you (the Terms of Use)
Sign you in safely, show your devices, stop abuse and break-in attempts
Sign-in and security data
Our legitimate interest in keeping accounts safe; the contract
Send account emails (sign-in codes, password resets, confirmations)
Your email address
The contract
Reminders and notifications
The task or routine and its time; your push token on Android
The contract
Optional features you switch on (section 4)
Only what each feature needs
Your consent, which you can withdraw by turning the feature off
Answer you, and meet legal duties
Your messages; whatever the law requires
Legitimate interest; legal obligation

We don’t use your data for advertising or marketing profiles, we don’t sell or rent it, and we don’t use it to train AI models. Life Anchor makes no automated decisions about you that have legal or similarly significant effects.

04Optional features

These need extra access. Each is off until you turn it on, turning one on doesn’t turn on another, and you can turn any of them off again in Settings.

FeatureWhat it does with your data
Contacts (Android)
Opens Android’s own contact picker. Only the person you pick, with the details you choose, is added to Life Anchor. We never scan your phonebook.
Message capture (Android)
Uses Android’s notification access, but reads notifications only from the apps you choose in Settings (WhatsApp, for example). Their text becomes Inbox suggestions in your account. Notifications from every other app are ignored and never stored.
Calendar (Android)
Shows the events from your phone’s own calendars next to your tasks. They’re read on your phone only, never sent to us and never stored in your account.
Gmail (any platform)

Read-only access to your mailbox (Google’s gmail.readonly permission), used only for senders you choose to watch. For those messages we keep the message ID, sender, subject and date and, for a message that becomes a suggestion, a cleaned excerpt of up to 600 characters. We never keep a whole email, and we never send, delete, label or mark mail as read. On Premium accounts, the readable text of a matching email may be sent to OpenAI to word the task clearly (see AI below). Google’s access token is stored encrypted.

You can disconnect in Settings, which also clears the watch list on our side, or remove Life Anchor’s access in your Google Account. Life Anchor’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Voice capture

Android: your phone’s own speech service turns speech into text; the audio isn’t sent to us.

Windows and the web (“Speak a list”): the recording (up to about a minute) goes over an encrypted connection to our server, which passes it to OpenAI’s speech-to-text service and returns the text. We don’t keep the audio. The microphone is on only while you’re recording.

AI assistance (Premium)
To turn a capture into a well-formed task, or an email from a watched sender into a suggestion, that text is sent to OpenAI. To break a task into steps, its title and notes are sent. Nothing else goes with it: not your other tasks, your contacts or your money. There’s a monthly limit, and Life Anchor works fully without these features. AI can be wrong, so check what it suggests.
Receipts and slips
Files you attach to expenses and transfers are encrypted (AES-256-GCM, with a key for your account) before they’re stored, and only your account can open them.
Bank statement import
The file you choose is read once to create transactions and isn’t kept. Categories are suggested by rules on our server, not by AI. We keep a record of each import so you can undo it.
Exchange rates
When you convert between currencies we ask Frankfurter (frankfurter.dev, which publishes European Central Bank rates) for the rate. Only the two currency codes are sent.

05Who helps us run Life Anchor

We use a small number of service providers. They act on our instructions, may use your data only to provide their service to us, and are bound by contracts with data-protection terms.

ProviderWhat forWhat they process
Cloudflare, Inc.
Hosting of the service and website, our database and file storage (receipts, downloads), the sign-in pages, and email delivery for privacy@daboul.uk
Everything stored in your account; technical request data such as IP addresses
OpenAI, L.L.C.
Speech-to-text, and the Premium AI features
Only the recording or text of that request. Under OpenAI’s API terms it isn’t used to train their models; OpenAI may keep it for up to 30 days to detect abuse.
Google LLC
Gmail (only if you connect it); Firebase Cloud Messaging, which delivers reminders to Android phones
The Gmail data in section 4; your phone’s push token and the reminder being delivered
Resend
Sending account emails such as sign-in codes and password resets
Your email address and that email
Frankfurter
Exchange rates
Two currency codes, nothing about you

If you install Life Anchor from the Microsoft Store, Microsoft handles the install and updates under its own privacy statement. We may see the summary statistics the Store gives every publisher, but nothing that identifies you. We may also share data if the law requires it, to protect people’s safety or our rights, or as part of a merger or sale of Life Anchor, in which case this policy keeps applying to your data.

06On Android, on Windows and on the web

Android

  • Life Anchor asks for each permission when you first use the feature that needs it, and you can take any of them back in Android’s settings: notifications and exact alarms (on-time reminders, also restored after a restart), microphone (voice capture), contacts (picking a person), calendar (showing your events; Android grants read and write together, Life Anchor only reads), and notification access (message capture).
  • Your sign-in is kept in the Android Keystore, and an offline copy of your data stays on the phone so Life Anchor works without a connection. Home-screen widgets show your tasks on your home screen.

Windows

  • An offline copy of your data, your settings for this PC and a technical log live in your Windows user folder (under %LOCALAPPDATA%\Daboul). The log records events such as start-up, sync and errors. It stays on your PC; we only see it if you send it to us.
  • Your sign-in is kept in Windows Credential Manager.
  • Reminders are handed to Windows’ notification system so they still show when Life Anchor is closed, and Windows keeps them until then.
  • Optional, and set by you: starting with Windows, a keyboard shortcut for Quick capture, and links that open Life Anchor.
  • The microphone is used only for “Speak a list” (section 4).
  • There’s no telemetry. The download from download.daboul.uk doesn’t update itself; the Microsoft Store version is updated by the Store.

The web

  • Cookies: only the ones sign-in needs. lifeanchor_web_session keeps you signed in, and lifeanchor_web_signup carries you through creating an account. Both are secure, HttpOnly cookies that scripts can’t read. There are no advertising or analytics cookies, so there’s nothing to consent to beyond using the service.
  • Your browser’s storage keeps preferences such as theme and language, and the sign-in crew’s little memory (how many visits, which lines it already said). It never leaves your browser.
  • Browser notifications, if you allow them, show reminders while Life Anchor is open.
  • Our pages don’t load third-party trackers.

07Security, and where your data goes

  • Every connection between the apps, the website and our servers is encrypted (HTTPS/TLS).
  • Passwords are stored only as salted PBKDF2 hashes. A sign-in on a new device needs a code from your email. Changing your password signs you out everywhere else.
  • Receipts and Gmail tokens are encrypted before they’re stored, and your sign-in is kept in the safest place each platform offers: Android Keystore, Windows Credential Manager, or a secure HttpOnly cookie.

Our providers are based in, or may process data in, countries other than yours, including the United States. Where the law asks for a particular safeguard for such transfers, we rely on the contractual protections these providers offer (such as the European Commission’s Standard Contractual Clauses) or, where needed, on your consent. No system is perfectly secure. If you think you’ve found a weakness, please tell us at privacy@daboul.uk, and if a breach puts you at risk we’ll tell you as the law requires.

08How long we keep it

DataHow long
Your account and what’s in it
As long as your account exists.
Things you delete
30 days in Deleted & activity, where you can restore them; then removed for good. Undone statement imports, likewise after 30 days.
Activity history
While the thing it describes exists. Entries about things that are gone for good are removed after 30 days.
Sign-in data
One-time codes expire within minutes. Sessions last until they expire or you sign out. Sign-in attempts and approved sign-in requests are kept to protect your account until you delete it; expired requests are cleared automatically.
Gmail data
While Gmail is connected; disconnecting clears the watch list.
When you delete your account
Everything is removed from our database straight away, receipts included. Our hosting provider’s disaster-recovery copies of the database expire within 30 days.
Copies on your devices
Until you sign out or remove the app.
Emails you send us
As long as needed to answer you and keep a record of it.

09Your controls and your rights

In the apps

  • Export a full copy of your data at any time (Settings → Data & history), as a JSON backup or CSV tables.
  • Edit or delete any item where it lives, and turn any optional feature off in Settings.
  • Delete your account in Settings → Account & privacy → Delete account. You confirm with your password; then your account and everything in it is removed at once. This can’t be undone.

Your rights by law

Depending on where you live (for example under the GDPR, the UK GDPR or KVKK), you may have the right to: know what we hold about you and get a copy; have it corrected; have it deleted; have its use restricted; take it with you in a machine-readable form; object to uses based on our legitimate interests; and withdraw your consent at any time, without affecting what was done before. Most of this you can do yourself in the apps. For anything else, write to privacy@daboul.uk; we’ll answer within 30 days and may first need to check it’s really you.

You can also complain to a data-protection authority, such as Türkiye’s Personal Data Protection Authority (KVKK) or the authority where you live in the EU or the UK. We’d appreciate the chance to fix things with you first.

10Children

Life Anchor isn’t meant for children. You need to be at least 13 to use it, or older where your country sets a higher age for agreeing to the use of personal data (16 in some countries) unless a parent or guardian agrees for you. We don’t knowingly collect data from children below these ages. If you believe a child has an account, tell us and we’ll delete it.

11Changes to this policy

When Life Anchor changes in a way that affects your data, we’ll update this policy and its effective date. If a change matters to you (a new kind of data, a new provider, a new use), we’ll tell you in the apps or by email before it applies.

12Contact

Questions, requests about your data, or a security report: write to Daboul, the maker of Life Anchor. privacy@daboul.uk