Privacy

Your information stays yours.

Last updated 28 September 2026

LIFECORE is built around a simple idea: organising your life should not mean giving it away. This page explains what stays on your device, what an online account needs, and what happens when you choose to connect another service.

Who is responsible

LIFECORE is provided by RadForge Labs in Australia. Privacy questions, access or correction requests and complaints can be sent to lifecore@radforgelabs.com.au.

Your private Vault

Your LIFECORE records are stored in an encrypted Vault on your device. Android Keystore-backed keys protect that Vault. Creating a LIFECORE account does not automatically upload your tasks, notes, documents, family information, money plans or other private Vault content.

What we collect and why

To provide sign-in, recovery and service security, LIFECORE processes the name and email you provide, securely hashed password credentials, email-verification state, active sessions and limited request information such as IP address, browser or app details and security events. We do not store your password in readable form. If you use an online feature, we process only the information needed for that feature—for example subscription status, Family Space membership and encrypted updates, connected-service authority, Circle content, moderation history or support correspondence.

Website visits

LIFECORE does not run visitor analytics or advertising on mylifecore.app. Cloudflare provides the website's hosting and security, so ordinary network requests are processed as needed to deliver and protect the site, but its visitor-analytics beacon is not enabled for LIFECORE.

Subscriptions

For the Android release, Google Play handles subscription payment details. LIFECORE keeps the minimum information needed to confirm access, such as the store, product, subscription status, renewal window and a protected reference to the purchase. LIFECORE does not receive your full card number from Google Play. An iPhone or iPad app is planned but is not currently offered; this notice will be updated before another payment provider is introduced.

Connected services

Connections are optional and remain off until you choose them. Before you connect a service, LIFECORE explains what it needs to read or do. Device-calendar reading and publishing are separate controls. If you turn publishing on, LIFECORE can add, update or remove only the calendar entries it created in the calendar you chose; it does not alter unrelated events or copy private notes. Gmail and Outlook inbox intelligence will not be made publicly available until the required provider approval and security acceptance are complete. You can disconnect a service later, which removes LIFECORE's stored provider authority; it does not delete information held by the original provider.

Family Spaces and Family Inbox

Online Family Spaces keep account membership, roles, protected invitation details and encrypted shared updates so invited members can stay in sync. Depending on what members choose to add, an encrypted shared update can contain family schedules, user-entered care appointments, care contacts or documents, and shared expense records. These encrypted payloads leave the device, but the LIFECORE service does not receive the Family encryption key needed to read them. Family Inbox messages and schedule requests are also encrypted before they leave the app; the service routes ciphertext and limited delivery information such as participants, times, read state, reactions and notification preferences rather than readable message contents. Members can block or unblock direct messages from another member within a Family Space; the service keeps the minimum account IDs needed to enforce that choice. Blocking does not remove someone from the shared Family Space. If a member chooses to report a message or conversation, LIFECORE stores the report reason and the details that person enters for authorised RadForge safety staff. The encrypted message contents are not automatically attached to a report. An adult adding another person's profile or sharing family information must have authority to manage and share it. Leaving or deleting an account removes its membership. If an owner deletes their account, LIFECORE transfers the Space to an existing member where possible, or removes an owner-only Space and its encrypted remote history.

LIFECORE Circle

If you choose to post in LIFECORE Circle, the service stores your chosen Circle username, thread or reply, post type, time, current-rules acceptance, member blocks and any report you submit. Members see your Circle username rather than your account name; until you choose one, Circle uses a private fallback name. Earlier Circle records may retain an account name internally for moderation, but public posts and replies display the Circle name. Changing your Circle username also changes the name shown on your earlier posts and replies. Optional “what worked” updates are stored as replies and visible to other eligible members. When you mark your own question answered, highlight a helpful reply, save or follow a conversation, mute a conversation or follow a topic, the service stores that choice with your account. Saved, followed and muted choices are private to you; active posts, replies and answered status can be seen by other verified members unless either member has blocked the other. Your Circle activity shows relevant replies and updates; you choose when to mark them as seen. Optional weekly email updates contain a link to Circle rather than post text. If you save a private post draft, its title and body are stored with your account, not shown to other Circle members, and removed when you delete the draft, publish it or delete your account. As you type a title, Circle may look for related Paths and conversations using that title. Circle Paths are general guides; they do not store your personal checklist or progress in the community. Circle checks for recognisable private details before publishing posts, replies, outcomes and drafts and asks you to remove them. This automated check cannot identify every private fact: do not include your or anyone else's identifying details, especially details about children. Staff-led Circle Sessions are member conversations that open for replies during a scheduled window and may later include a public summary. Moderators can review reported content and may issue a private warning or restriction; a moderation notice is visible only to the affected member and authorised RadForge staff. Account deletion removes drafts, saved and followed choices, rules and block records, and de-identifies retained Circle posts as “Former member”. You can remove your own eligible threads and replies before deleting your account.

Ask LIFECORE and on-device AI

Ask LIFECORE answers from your device first. On supported Android phones, LIFECORE may use Google's Gemini Nano through ML Kit to answer a general question inside the app. LIFECORE sends only the question you typed to the on-device model—not your Vault records—and Google states that prompt input and output are processed on the device. Google ML Kit may still collect limited device, app, identifier, performance, usage and error information to operate and improve the SDK. Optional LIFECORE Cloud AI is separate, asks for approval before sending the question and any context you select, and applies account and service limits. AI answers cannot write to your Vault without a separate review-and-confirm step. If you report an Ask LIFECORE answer, authorised RadForge support staff receive the concern you type and the answer's source or provider. The question, generated answer and private Vault context are not attached automatically.

No advertising or significant automated decisions

LIFECORE does not sell personal information or use it for targeted advertising. Ask LIFECORE suggestions, money views and readiness signals do not make decisions about a person's legal rights, access to services or other significant matters. They organise information and leave decisions with the user.

Permissions

Device permissions are requested when a feature needs them. If you say no, LIFECORE explains what will be unavailable and keeps the rest of the app working. You can review or change permissions in LIFECORE and Android settings.

Backups and files

Protected backups and exported files are created only when you ask. Once a file leaves LIFECORE, its safety also depends on where you save or share it. Keep backup passphrases private and store backups somewhere you trust.

Service providers and overseas processing

LIFECORE uses carefully limited providers to deliver the service. Cloudflare hosts and protects the account service and website and may process network, account and encrypted service data through its global infrastructure. Google Play manages Android subscriptions, and Google supplies the optional on-device ML Kit runtime. If you activate a supported connection, that provider processes information under its own terms. These providers may process information outside Australia. LIFECORE limits what each provider receives to the purpose for which it is used and does not give them access to your local Vault merely because you created an account.

Security

Account requests use encrypted HTTPS connections. Authentication responses are not cached. Passwords, session tokens, private Vault content and raw store purchase tokens must not be written to production logs.

Retention and deletion

Account and online-feature information is kept while it is needed to provide and protect your account. Verification, recovery, invitation and session tokens expire. If you request permanent account deletion from the account deletion page, LIFECORE removes the server-held account, sessions, entitlement records, provider tokens and Family membership covered by the account service. Circle contributions that need to preserve a conversation are de-identified as “Former member”. Limited security, audit, fraud-prevention or legal records may be retained only where reasonably necessary or required. Your local Vault remains on your devices until you delete it inside LIFECORE, clear the app's storage or remove the app.

Access, correction and complaints

You can update ordinary profile information in LIFECORE. For access to, or correction of, other personal information held by the account service, email lifecore@radforgelabs.com.au from your registered address. If you have a privacy concern, tell us what happened and how we can contact you. We will acknowledge it, investigate it fairly and explain the outcome. Where Australian privacy law applies, you may also contact the Office of the Australian Information Commissioner after first giving us a reasonable opportunity to resolve the concern.

Changes to this notice

We will keep this notice accurate as LIFECORE changes and update the date above when the terms materially change. We will not silently turn an optional connection into access to your private local Vault.

Questions

Contact LIFECORE privacy at lifecore@radforgelabs.com.au. Please do not email passwords, backup passphrases or private documents.