Privacy Policy
Effective 30 August 2026
This policy explains how LIFEVAULT handles personal data when you use our website, vault, AI receipt scanning and email reminders.
Controller and contact
LIFEVAULT is the controller for the personal data described in this policy. Questions, rights requests and privacy concerns can be sent to support@mylifevault.online.
Data we process
- Your email address and authentication information.
- Vault records you choose to add, including titles, merchants, amounts and important dates.
- Receipt images submitted for AI extraction and the structured information extracted from them.
- Basic technical and security information needed to operate and protect the service.
Why we use it
We process this information to authenticate you, store and display your vault, analyze receipts at your request, send reminders you enable, secure the service and diagnose failures.
Legal bases
- Service performance: account access, vault storage, exports, AI scans you request and reminder delivery.
- Legitimate interests: service security, abuse prevention, reliability monitoring and troubleshooting, balanced against your rights.
- Legal obligations: information we must retain or disclose when applicable law requires it.
- Your choice: optional AI scanning begins only when you submit an image.
Receipt images and analytics
Receipt images are sent to OpenAI for extraction when you start a scan. LIFEVAULT saves the structured record you confirm, not the receipt image itself. We use privacy-conscious Vercel Analytics to understand basic product usage and reliability; we do not sell personal data or use it for targeted advertising.
Service providers
LIFEVAULT uses Vercel for hosting, Supabase for authentication and database services, OpenAI for receipt extraction, and Resend for transactional reminder emails. These providers process information only as needed to deliver their services under their own contractual and security commitments.
Retention and control
Account and vault records remain until you delete them or request account deletion. Feedback and support communications are kept only as long as needed to respond and improve the beta. Security, delivery and diagnostic records are retained for the shortest period reasonably needed to investigate failures, prevent abuse and meet legal duties. Retention is reviewed using those purposes as the criteria. You can edit or delete individual vault records and pause their reminders in the product.
Automated processing
AI scanning proposes structured receipt fields for your review. It does not make decisions that produce legal or similarly significant effects. You decide whether to correct and save the proposed information.
Your rights
Depending on your location, you may request access, correction, deletion, restriction, portability or object to certain processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may also complain to the competent data protection authority. In Bulgaria, this is the Commission for Personal Data Protection.
Security and transfers
We use access controls, encrypted connections and managed infrastructure. No online service can guarantee absolute security. Our providers may process data outside your country using legally recognized safeguards where required, such as applicable adequacy decisions or contractual safeguards.
Children
LIFEVAULT is not intended for children under 16.
Contact
For privacy questions or requests, email support@mylifevault.online.