Privacy Policy

Two things worth knowing upfront

• We can't see your password. It's sent to our authentication provider over an encrypted connection and converted the moment you set it into a one-way hash: a scrambled value that can be checked against but never reversed. Nobody, including us, can view, recover, or look it up.
• The plan you're working on is kept on your account, so it's there when you sign in on another device. You can turn that off in Settings, under "Across your devices". Turn it off and the figures stay in your browser alone, and we delete the copy on your account immediately. If you're not signed in, nothing you type leaves your browser at all.

What we collect

• Your email address and password, collected when you create an account.
• Your first name, date of birth, and country, collected when you create an account. These are required to sign up, not optional. Accounts made before 5 October 2026 also hold the last name given then.
• If you try LifeScope without an account, your answers to its questions stay in your browser. If you then create an account, they're sent with it to become your first plan, and your browser stops holding them.
• The financial figures you enter into the calculator (account balances, income, spending assumptions, the age you expect to live to, life events you add such as a health event, and similar planning inputs) when you save a plan, and also as you go, so the plan you haven't finished follows you between your devices. The second of those is a setting you control: see "Your choices" below. Only the most recent unfinished plan is kept, and it's replaced each time rather than building a history.
• Your email address, if you ask us to tell you when LifeScope opens. We also record which guide you were reading when you asked, and what brought you to the site (the name of the site that linked to us, such as a search engine or a social network, any tag on that link, and the first page of ours you opened), so we know which of them people find useful and where to spend our time. That's the whole record: no name, no account, and nothing else about you.
• If you press "Tell me when Plus opens", which feature you asked about and when, kept on your account so we can tell you when it does.
• What you write, if you send a bug report from Settings, together with the email address on your account, the page you were on, which browser you use and the size of its window. It's deleted along with your account if you delete it.
• What you write, if you use "Report a mistake" at the foot of a page, together with that page's title and address, and your email address if you choose to give one for a reply. It's sent to us by email and isn't stored in the database.
• If a page breaks while you're using it, a short technical note about what went wrong: the error, the page's address without anything after a question mark, which browser you use, and the time. It carries none of the figures you enter and nothing that names you, and it's sent to us by email rather than stored.

We don't collect real bank account numbers, card numbers, or credentials for any outside account. Every number in the calculator is a figure you've typed in yourself for planning purposes.

Why we collect it

If you joined the waitlist, your address is used to confirm you've joined, to email you when LifeScope opens, to remind you once before your early-bird price can no longer be claimed if you haven't claimed it, and, if you leave the list and then sign up again, to ask you to confirm. Every email that keeps you on the list carries a link that takes you off it, and using it is the end of it.

If you send a bug report, it's used to find and fix what went wrong, and to reply to you about it. Nothing else.

If you report a mistake, it's used to check the page against its source and correct it. Your email address, if you give one, is used only to reply to you.

If a page breaks, the note about it is used only to find and fix the fault.

Otherwise: to create and secure your account, to let you save and reload your own plans, to carry an unfinished plan from one of your devices to another so you don't have to start again, and to personalise the calculator: your date of birth and country let it set sensible starting defaults for your own projection instead of a generic example. We don't use anything you enter for advertising, and we don't sell your data.

Where it's stored

Your account, your saved plans, any bug reports you send and any waitlist address are stored in a database operated by Supabase, our database and authentication provider, on its servers in Sydney, Australia, and backed up daily. The site itself is hosted by Vercel, which also runs it from Sydney. Traffic between your device and our servers is encrypted (HTTPS) at all times, and the database is encrypted where it is stored.

Who can see it

Only you can see your own saved plans. This is enforced at the database level, not just in the app itself, so it holds even if something elsewhere in the app had a bug. The person operating this service reads the bug reports and mistake reports you send, and can access account-level information (such as your email) for support purposes, such as replying to a bug report or a support request you send us.

Other services we use

Running this app relies on a small number of infrastructure providers who process data on our behalf as part of that: Supabase (database and sign-in), Vercel (hosting, and anonymous site analytics: page views, visit counts, and which parts of the site and app are used, such as how far down the home page people read, which setup questions are answered or skipped and which buttons are pressed. Never the figures in your plan, and not tied to your name, email, or account), Resend (sending the emails this site sends, including the waitlist confirmation, the email that confirms a new account, a copy of each bug report and mistake report to us, and the note about a page that broke) and Cloudflare (the check that a form was filled in by a person). None of them uses your data for their own purposes beyond providing that infrastructure.

The calculator also fetches published exchange rates from jsDelivr, a public file-delivery network, so it can convert between currencies. That request carries none of the figures you enter, but like any request on the web it shows jsDelivr your IP address.

Cookies

We use essential cookies only: one to keep you signed in, and, while the site is in early access, one that remembers your browser has been let in. Neither is used for advertising or tracking you across other sites.

For the length of one visit, your browser also keeps a note of which site brought you here. It stays in your browser, is gone when you close the tab, and reaches us only if you join the waitlist, as described above.

Your choices

Whether an unfinished plan is kept on your account. This is on to begin with, so that opening LifeScope on your phone shows the plan you started on your laptop. Settings has a switch for it under "Across your devices". Switching it off deletes the copy on your account there and then, and from that point the figures you type stay in your browser, which also means clearing your browser data will lose them, and they won't appear on your other devices. Plans you have explicitly saved are separate and are not affected by this switch.

You can also delete any saved plan, or your entire account and everything attached to it, at any time from Settings. This happens immediately and can't be undone. "Start over" in Settings clears the unfinished plan from your browser and from your account at the same time. If you'd like a copy of your data, or have any other privacy question, contact us using the details below.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date at the top of this page.

Contact

Questions about this policy or your data, or a request for a copy of it: support@lifescope.co.nz