1. Who we are

LifeHub is an app made by TwoTatoes. TWOTATOES MY SERVICES (003718637-V), of Lot 5644, Taman Pantai Mas, Batu 2 1/2, Jalan Seremban, 71000 Port Dickson, Negeri Sembilan, Malaysia, is responsible for your personal data in LifeHub ("we", "us").

For anything about your data, write to hello@twotatoes.com.

This policy says what we collect, why, who else sees it, where it is kept, how long for, and what you can ask of us. It applies to the LifeHub app and to the LifeHub website, lifehub.twotatoes.com.

2. What we collect

What you give us

• Your account: email address, password (held by our sign in provider; we never see it), display name, username, and if you add them a bio, a website, a profile photo and your time zone. If you sign in with Google, we receive your Google account's name and email address.
• Money: expenses, income, jars, budgets, bills, debts, account names and balances, splits and settlements, and any notes you write. We do not store bank account numbers or card numbers.
• Photographs and documents: receipts, bank slips, bank statements and bills you photograph, upload or share into the app.
• Health: food logs and food photographs, workouts, weight and the trackers and targets you set.
• Memories: the photographs, notes and dates you keep there.
• People you record: a contact's name, and their phone number or email if you add them, picked from your phone one person at a time. LifeHub never reads your whole address book.

What comes from using LifeHub

• Location, only when you ask. When you tap the location button on "Where was this?", the app reads where your phone is, once, to put a pin on the map. It does not track you in the background. A place you then save on an expense (its name and position) is stored with that expense.
• What you search for when you look up a place.
• Health Connect, only if you turn it on: steps, sleep, weight, active calories and exercise sessions, read from Android's Health Connect.
• Your device: a notification token, the kind of phone, the app version and when the app was last used.
• How you use LifeHub: for each day, which parts of the app you used and how often, which app version you are on, and which screens are opened. We also record each use of an AI feature (which feature, how long it took and what it cost), but never what was sent or answered.
• Crash reports when the app or our servers go wrong.

On our website

• The waitlist: if you join it, your email address, to tell you when you can try LifeHub.
• Your preferences: the site remembers on your own device whether you chose light or dark mode and that you closed the cookie notice. It uses no advertising or tracking cookies.

3. Why we use it

We use your personal data to:

1. run LifeHub for you: keep your records, work out your jars, budgets and analytics, and show your household what you share with it;
2. read receipts, slips and statements, and estimate food, when you ask;
3. find places when you search, and put them on a map;
4. send you the notifications you have asked for, such as bill reminders;
5. keep your account secure, including two-factor sign in;
6. fix problems and improve LifeHub, using usage records and crash reports;
7. send you an occasional note about LifeHub, which you can turn off in Settings at any time;
8. meet our legal obligations.

We do not sell your personal data, and we do not use it for advertising.

You must give us an email address and a password (or a Google account) to use LifeHub. Everything else is up to you, but some features need it: a receipt cannot be read without its photograph.

4. Who can see it

Inside LifeHub

• Your household's full members (owner and partner) see the household's money, including each other's expenses and the places put on them.
• Members with limited access see only what is shared with them.
• Someone you split a bill with sees that split, and can open the receipt photograph attached to it, which may show other items on the bill.
• No other household can see your data.
• Our administrators can see account details and usage records to run LifeHub and help you. Every action they take is logged.

Service providers who work for us

They handle your data only to provide their service to us.

• Supabase (on Amazon Web Services) (Singapore): database and sign in. Receives your account and everything you record.
• Google Cloud (Singapore): runs our servers; stores secrets. Receives everything passing through LifeHub.
• Cloudflare R2 (worldwide): stores your photographs and files. Receives your photographs and documents.
• Anthropic (Claude) (United States): reads receipts, statements and slips; estimates food. Receives receipt photographs and statement PDFs as they are; bank slips as text, with account numbers masked; food names and food photographs. Never your name or email.
• Perplexity (United States): estimates food, with sources. Receives food names and food photographs. Never your name or email.
• Open Food Facts (France): looks up packaged food. Receives the barcode you scan, and nothing else.
• Google Places (worldwide): place search and map positions. Receives what you type, and roughly where the map is centred.
• Photon, run by komoot (OpenStreetMap) (Germany): place search when Google is not used. Receives what you type, and roughly where the map is centred.
• Google Maps (worldwide): shows the map. Receives the area of map on your screen, from your phone.
• Firebase (Google) (worldwide): notifications, crash reports, which screens are used. Receives a notification token, crash details, screen names.
• Sentry (outside Malaysia): server crash reports. Receives error details from our servers.

Assistants you connect

If you use Connect an AI, the assistant you connect (for example Claude or ChatGPT) can read the modules you allow, under that assistant's own privacy policy. You choose the modules, and you can disconnect it at any time.

When the law requires it

We may disclose personal data when the law requires us to, or to protect someone's safety, and only as much as is needed.

5. Sending data outside Malaysia

Most of LifeHub's data is kept in Singapore, and some of it is sent to the United States and elsewhere, as the table above shows. We choose providers who protect data to a standard comparable to Malaysian law, and we send each one only what its job needs. By using LifeHub you consent to these transfers.

6. How long we keep it

• While your account is open, your records stay until you delete them.
• Something you delete in Finance can be undone for 7 days, then it is removed for good.
• Deleting your account: for 30 days you can reactivate it. After that your account, your own records, health data, memories and files are removed for good.
• What a household keeps: when you leave a household or delete your account, the household keeps its shared financial history, because it is also the other members' record. Your name is kept as it appeared, or shown as "Former member" once your account is gone. A file those records rely on, such as a bill or a slip, stays with the household.
• Place search: map positions from Google are kept for 30 days, search results from OpenStreetMap for 7 days, and the count of your searches for 62 days.
• The waitlist: your email is kept until LifeHub opens to you, or until you ask us to remove it.
• Backups: before a large change we take a copy of the database. Copies are kept securely and deleted within 90 days.

7. How we protect it

• Data travels over encrypted connections.
• Your password is handled by our sign in provider and never stored by us.
• Two-factor sign in is available, and backup codes are stored only as a hash.
• Every request is checked for who you are and which household you are in, and access is closed unless it has been opened on purpose.
• Database tables are locked so that nothing reaches them except our servers.

No system is perfectly secure. If a breach puts your personal data at risk, we will tell you and the authorities as the law requires.

8. Your rights

You can:

• see your data, and take a copy: Settings, Export everything;
• correct it: edit it in the app, or ask us;
• delete it: delete a record, or your whole account in Settings;
• withdraw consent: turn off location, Health Connect or notifications in your phone's settings, turn off news from us in LifeHub, or delete your account;
• ask us to stop processing your data in a particular way;
• complain to us at hello@twotatoes.com, and if you are not satisfied, to the Personal Data Protection Commissioner of Malaysia.

We answer requests within 21 days. We may ask you to prove who you are first.

9. Children

LifeHub is for people 18 and older. A child can use it only as a member with limited access in a household run by their parent or guardian, who consents for them. A parent or guardian may ask us to see, correct or delete a child's data at any time.

10. Changes to this policy

When we change this policy, we will update the version and date at the top and ask you to agree again in the app before you carry on.

11. Contact

TWOTATOES MY SERVICES
Lot 5644, Taman Pantai Mas, Batu 2 1/2
Jalan Seremban, 71000 Port Dickson
Negeri Sembilan, Malaysia
hello@twotatoes.com