Privacy Policy — My Life
1. About My Life
My Life is a private, offline-first personal journal and life organizer. You can use it to keep journal entries, quick notes, photos, videos and imported audio memories, family records, pet records, personal Money & Deals records, projects and estimates, goals and habits, saved links and reminders, and private Vault information.
You can use the Free plan without creating any account.
2. Local-first storage
My Life saves your information on your device first, in app-private storage. If you uninstall the app, clear app data, reset or lose your phone, local information may be lost unless you have a backup.
3. Information you choose to store
Depending on the features you use, you may enter or attach: journal text, notes, photos, videos, audio files you import (My Life does not record audio itself), moods and tags, dates and reminders, an optional place label you type yourself (My Life does not read your location), family details and events, pet profiles and pet care records, personal money and deal records, projects and estimates, goals and habits, saved URLs, and Vault notes, documents and credential-style records. None of these are required.
This content stays on your phone unless you choose to back it up (to your own Google Drive) or to export or share it. If you export or share a summary or a file, it goes through Android's share sheet to the app you pick; we do not receive it.
We do not use your journal or Vault content for advertising, and we do not sell it.
4. Plans and what they use
- Free — data stays on your phone; ads are shown (see Advertising below).
- Plus — no ads; optional encrypted backup to your own Google Drive.
- Cloud (50 GB or 100 GB) — no ads; encrypted hosted storage (Cloudflare R2, rolling out now).
- Vault (500 GB) — no ads; encrypted hosted storage (Cloudflare R2, rolling out now).
5. Plus: backup to your own Google Drive
Google Drive backup is optional. If you turn it on, you sign in with your Google account and My Life asks only for the drive.file permission. This lets the app see and manage only the files that My Life itself creates in your Drive — not your other Drive files. The Google account email you connect is shown in the app and kept on your phone.
Backup data is prepared and encrypted on your device before it is uploaded to your Drive. Quietline Studio does not receive a copy of your Drive backup. If you use the Private Vault, an encrypted Vault recovery file may also be saved in the same My Life folder in your Drive; the key that is bound to your phone's hardware never leaves the phone. You can disconnect Google Drive and delete My Life backup files at any time. Google's own privacy policy and terms apply to your Google account and Drive.
6. Cloud and Vault hosted storage
If you subscribe to a Cloud or Vault plan, your files can be stored in private cloud storage operated for Quietline Studio. This storage uses Cloudflare R2. Content is encrypted on your device before upload, so Cloudflare receives encrypted data rather than readable content. Hosted storage is rolling out now: until it is active in your app, your files stay on your phone and in your own Drive backup. Our sign-in and plan server runs on Vultr.
To run the service, some operational information is kept on our servers, such as your account email, plan and subscription status, storage limit and usage, object sizes, random file identifiers, timestamps, encrypted key envelopes, and security and rate-limit status. Journal text, notes and other private content are not stored in readable form on our servers.
On a new device you may need your recovery information to decrypt hosted content. If you lose it, encrypted content may be unrecoverable.
7. Private Vault
The Vault is for more sensitive information. Vault notes, passwords and other Vault text are encrypted separately on your device using authenticated encryption (AES-256-GCM) with keys protected by your Vault PIN and Android Keystore. Vault photos, videos and voice notes are stored on your phone in app-private storage and are protected by the Vault PIN or fingerprint lock; they are not separately encrypted on the phone, so they open and play instantly. Drive backups and hosted copies of the Vault, including its media, are encrypted on your phone before upload, and media restored from a backup is saved again as normal app-private files on your phone. You can unlock the Vault with your PIN or, if you turn it on, with your fingerprint or device screen lock. Biometric data is handled by Android; My Life never receives it.
On the Free plan you watch one short rewarded video, which you start yourself, before the Vault opens (once per app session; see Advertising). Nothing from inside your Vault is shared with advertisers, and no other ads are shown inside the Vault. Plus, Cloud and Vault plans never see this ad.
If you forget your Vault PIN, recovery depends on what you set up: your fingerprint or device lock on this phone, a recovery file in your own Google Drive, or the optional “email me a code” recovery. With email recovery, the app uploads a small recovery item that is encrypted on your phone. Our server cannot open your Vault with it alone; it is released only after you confirm a fresh code sent to your verified email address. If none of these is available, the Vault cannot be opened in the app and can only be erased: Vault notes and passwords are encrypted and nobody, including us, has a back door.
Rooted phones: My Life checks on your phone, without sending anything to us, whether the phone appears to be rooted. If it does, the Vault shows a warning, because on a rooted phone other apps or tools may be able to read Vault photos, videos and voice notes without your PIN. Vault notes and passwords stay encrypted. The check never blocks the Vault.
Please do not store banking one-time passwords or card CVV codes in My Life.
8. App Lock
You can turn on an optional App Lock (PIN or fingerprint), separate from the Vault PIN. The App Lock PIN is stored only as a salted hash on your phone. If you forget it, email verification may be offered where available.
9. Our Space (private space for two)
Our Space is an optional feature inside the Vault where you and one other person can share messages, memory cards, photos, voice notes and short videos. Both people sign in with their My Life email account and connect with a one-time pairing code. A space has at most two members. Free users can have one space; Plus, Cloud and Vault users up to three, each with its own partner.
End-to-end encryption: each phone creates its own encryption key pair (X25519). Messages, memory cards, reactions, the space name, the chosen theme and media files are encrypted on your phone with AES-256-GCM using a key that only the two paired phones can work out. Your private key stays on your phone in secure storage. Our server stores only the encrypted content (ciphertext) and cannot read it, and all traffic also uses HTTPS. Our Space settings show a safety code that you can compare with your partner.
To make Our Space work, our server also stores: the email addresses of the two members; each phone's public key; the type (text, memory, photo, voice or video), time and size of each item; “seen” markers; a hashed pairing code that expires after 24 hours; and, on the Free plan, how many messages you sent today and whether today's rewarded unlock was used. A copy of the encrypted messages is kept on your phone so you can read them offline.
Your partner sees everything you share in the space and can save photos, voice notes and videos you send to their own Vault. Please share only what you are comfortable sharing.
Notifications for Our Space are created on your phone while My Life is running and only say “New message”, never the content. No push-notification service is used, and you can turn them off in Our Space settings.
On the Free plan, one optional rewarded video per day (Google AdMob, which you start by tapping “Watch video”) unlocks up to 50 messages until midnight on your phone. If no video can be loaded after 3 tries that day, the day is unlocked without a video; a video you close early does not unlock. Free users can use one space and, after the unlock, also send photos and voice notes (each counts as one of the 50). Free photos and voice notes are only relayed: the encrypted file is deleted from our server as soon as your partner's phone has downloaded it, and at the latest after 7 days, so the copies live only on your two phones. Videos, up to 3 spaces and saving a chat to your Vault need Plus, Cloud or Vault.
Delivery and read ticks: our server records when each item has been delivered to and read by your partner's phone, so the app can show one grey tick (sent), two grey ticks (delivered) and two coloured ticks (read). These markers contain no message content.
Themes and background photo: Free users can choose the Rose and Night themes; Plus, Cloud and Vault users can choose all five themes or set their own photo as the chat background. A background photo stays on your phone only and is never uploaded to our server or shared with your partner. The chosen theme name is synced to your partner only in encrypted form.
Screenshots: by default My Life blocks screenshots and screen recording inside Our Space. You can turn on “Allow screenshots” in Our Space settings; this setting stays on your phone.
Fix connection: if the two phones' keys stop matching (for example after reinstalling the app), the “Fix connection” option uploads your phone's new public key to our server so your partner's phone can set up a new shared key. Only public keys are sent; private keys never leave your phone.
You can delete any item you sent (it is removed for both of you), delete all your entries, or leave the space in Our Space settings. Deleted items and their media files are removed from our server right away. Leaving deletes all your entries and media from our server; when both members have left, the whole space is erased. Copies your partner saved to their own Vault stay on their phone. If you ask us to delete your My Life account, we also remove your Our Space membership, entries and media.
10. Email account, sign-in codes and plan checks
Some features (for example paid plan verification, hosted storage and Vault email recovery) use a My Life account identified by your email address. To verify it, our server sends you a one-time code by email. Our server runs on a cloud server hosted by Vultr, and emails are sent through our email delivery provider, Brevo, which processes your email address only to deliver the message. Codes expire after a few minutes, and the server keeps only a hashed copy until then.
Our server stores your verified email address, your plan and subscription information, verification and security records, and (if you use it) the encrypted Vault recovery item described above. Technical logs mask email addresses and are kept only as long as needed for security and troubleshooting.
We keep an admin plan list (email addresses we have granted a plan, for example testers) in a Google Sheet that we publish as a read-only file. My Life downloads this list and our server reads it to see whether your verified email has a plan. The download does not contain your email address.
11. Advertising (Free plan)
The Free plan shows ads using the Google Mobile Ads SDK (Google AdMob): small banners on a few general screens (such as Home and More); occasionally a short full-screen (interstitial) video ad after you save an entry (at most once every few minutes, never when the app opens or closes); and rewarded video ads that you start yourself.
Rewarded videos appear only after you tap the action that needs them: opening your Vault (once per app session), exporting or sharing a Pet or Money summary, or adding one extra Pet or Money item. These unlocks last only for the current app session and are never saved. If a rewarded ad cannot load or show, for example when you are offline, you are let through without it. In Our Space, one rewarded video per day unlocks the day's free messages (see Our Space); if no video can be loaded there after 3 tries that day, the day is unlocked without a video, and a video you close early does not unlock.
Banner and short video ads are never shown inside the Journal editor, Vault, private media, money or pet detail screens, lock screens, or payment and security screens. The only ads connected to the Vault are the optional rewarded videos you start yourself: before the Vault opens and, in Our Space, to unlock the day's free messages. Plus, Cloud and Vault plans are ad-free and never see rewarded ads.
To show and measure ads, Google may collect and process information such as your device's Advertising ID, IP address and approximate location derived from it, app and device information, diagnostics and ad interactions. My Life declares the Android Advertising ID permission and uses the Advertising ID only for advertising and ad measurement, not to identify you or for any other purpose. We never share your journal, Vault or other private content with advertisers.
You can reset or delete your Advertising ID or opt out of personalized ads in your Android settings (Settings → Google → Ads, or Settings → Privacy → Ads, depending on your device). Choosing a paid plan removes ads. Learn more in how Google uses information from apps that use its services.
12. Purchases and subscriptions
Subscriptions are sold and processed through Google Play Billing. Google Play handles your payment details; we do not receive your full card details. To unlock your plan, the app sends the purchase token and product ID to our server, which checks them with Google Play; we keep the subscription state and expiry date (and a hashed copy of the purchase token) to set your plan, storage limit and ad-free status. You can manage or cancel subscriptions in Google Play.
13. Permissions
My Life asks only for what a feature needs, for example internet access (backup, hosted storage, ads, plan checks), notifications if you enable reminders (and, if you allow it, Android's “Alarms & reminders” access so habit and reminder alarms ring at the exact time you chose; reminders are scheduled on your phone only, their text is not sent to us, and My Life re-arms them after a restart; if you refuse, reminders arrive a few minutes late), the Android photo picker and system file picker when you choose existing media or files, your phone's camera app when you take a photo (My Life itself does not hold the camera permission), and biometric unlock if you turn on app or Vault lock.
The permissions in the app are: Internet and network state; Post notifications; Schedule exact alarms (“Alarms & reminders”); Receive boot completed (re-arm reminders after restart); Vibrate (reminder alarms); Wake lock and background-task permissions declared by bundled libraries for notifications and ads; Use biometric / fingerprint; Advertising ID; and Google Play Billing. My Life does not request location, contacts, SMS, call log, microphone, camera or broad file-storage permissions.
14. Reminders and notifications
Reminders for habits, family, pets, money and the Reminders tool are scheduled on your phone using Android notifications and alarms. Their text and times are not sent to us or to advertisers. Our Space alerts are local too and only say “New message”. Habit and Reminders alarms ring like an alarm at the time you choose; other reminders are normal notifications. You can turn notifications and alarm access off in Android settings at any time.
15. Analytics and crash reports
My Life does not include Firebase Analytics, Crashlytics or any other analytics or crash-reporting SDK of its own, and does not track what you do inside the app. Google Play and the Google AdMob SDK may collect their own technical and diagnostic information as described above.
16. Service providers
We do not sell personal information. Limited data is processed by these providers only to run features:
- Google Play — app delivery, purchases and subscriptions
- Google AdMob — ads on the Free plan
- Google Drive — optional backup in your own account (Plus)
- Google Sheets — the published plan list described above
- Vultr — cloud server hosting for our sign-in, plan and recovery service and for end-to-end encrypted Our Space content
- Cloudflare R2 — storage of encrypted hosted files (Cloud and Vault plans; rolling out now)
- Brevo — delivery of email verification codes
We may also disclose information if required by law. These providers may process data in countries other than yours under their own safeguards.
17. Data retention
- On your phone: until you delete it, clear app data or uninstall.
- Google Drive backup: in your Drive until you or the app deletes it.
- Sign-in codes: expire within minutes and are removed by the server afterwards.
- Our Space: encrypted items stay on our server until the sender deletes them or leaves the space; the space is erased when both members have left. Unused pairing codes expire after 24 hours.
- Hosted data (Cloud/Vault): kept while your subscription is active. If you downgrade above the new limit, nothing is deleted automatically but new uploads may pause. If a hosted subscription ends, uploads stop and you get a recovery period (up to 30 days) to export, after which hosted copies may be permanently deleted.
- Account records (email, plan, Vault recovery item): kept while you use the account and deleted within 30 days of a verified deletion request (hosted data first sits in a recovery period of up to 7 days), except limited records we must keep for legal, fraud-prevention or billing reasons.
18. Deleting your data
You can delete individual items in the app, erase all local data (Settings → Delete account data → Erase local data), disconnect Google Drive and delete My Life backup files (Backup Sync → Disconnect Drive / Delete Drive backups), delete your Our Space items, all your Our Space entries, or leave Our Space (Vault → Our Space → settings), and request deletion of your My Life account and hosted data by email. Full instructions: quietlinestudio.app/mylife/delete-account.
Deleting local data does not delete a Drive backup, and deleting a Drive backup does not delete local data. Cancelling a subscription is done separately in Google Play. If you only used the Free plan and never verified an email, we hold no account data about you; advertising data is handled by Google.
19. Security
We use app-private storage, an optional App Lock (PIN or fingerprint), on-device encryption for Vault notes and passwords, Drive backups and hosted content, end-to-end encryption for Our Space, the Vault PIN or fingerprint lock for Vault media, a rooted-device warning, Android Keystore-protected keys, HTTPS for all network traffic, short-lived access to hosted storage, minimal permissions and an optional biometric/device lock. No system can guarantee absolute security.
20. Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal information, or to object to or withdraw consent for some processing. Most of this can be done in the app. For anything else, email us.
21. International processing
Google, Brevo, Vultr and Cloudflare operate infrastructure in several countries, so your information may be processed outside your country under their own safeguards.
22. Children
My Life is not directed to children under 13 (or the minimum age required in your country), and we do not knowingly collect personal information from children. If you believe a child has given us personal information, email us and we will delete it.
23. Changes to this policy
We may update this policy when features, providers or legal requirements change. We will update the effective date above and, for material changes, notify users in the app where appropriate.
24. Contact
Quietline Studio
Email: quietlinestudio.app@gmail.com
Website: quietlinestudio.app