1. Operator and contact
My Life Dashboard is operated by Levi Turner. “We” and “us” refer to the people operating the service. For privacy questions or requests, use the Contact Support form and choose “Privacy or data request.” The form sends your message to the support inbox and attempts to send a confirmation to the email address you provide.
2. Information we collect
Account and profile
We collect your email address, name, chosen college, password hash if you use email sign-in, sign-in provider identifier if you use Google or Apple, profile image if you add one, and account settings such as theme and subscription status. We record when and which versions of the Terms and Privacy Policy you accept.
Dashboard information
We store information you add or ask the app to create, such as classes, course notes, assignments, tasks, personal calendar events, goals, reflections, and related settings. Some preferences and unsaved working state may also be kept in your browser’s local storage.
School calendar feeds
If you connect a Canvas, shared iCloud (Apple Calendar), or other calendar feed, we receive the private feed URL and the calendar entries available through it, which may include course names, assignment titles, descriptions, and due dates. We do not ask for your Canvas password. The feed URL is encrypted in the app database, and parsed calendar entries are cached in encrypted form so the dashboard can display them and refresh the feed. We periodically retrieve the feed and may display the last successfully imported entries if a refresh fails. The connection is read-only and does not change events at the provider. Apple Calendar import uses a shared iCloud feed, not your Apple ID password. Treat the URL like a password: anyone who has a shared/public feed URL may be able to read that calendar. Turning off sharing at the provider stops future retrieval, but does not erase copies already obtained by recipients.
Google and Microsoft connections
Google sign-in receives identity information needed to authenticate you; it does not by itself connect Google Calendar or Gmail. If you separately connect Google Calendar, we receive primary calendar events. If Google Calendar editing is enabled for the service and you grant the event-editing permission, we can create or update events on your primary calendar. We store Google OAuth tokens encrypted. The requested Google scope technically permits deleting events on calendars you own, but our app has no Google event delete or cancel feature and never calls Google to delete or cancel an event. Existing read-only connections continue to display events until you reconnect to enable editing. If you connect Microsoft, we receive the account information and mailbox messages, send a reply only after you confirm it, and read basic calendar events where authorized. Gmail features, where enabled, can read inbox messages and send a reply you confirm; they require a separate connection and are unavailable when the server disables them. Provider permissions and school administrator settings can limit these features.
AI features and images
When you submit a question to the AI companion, the question, recent conversation history supplied with the request, your time zone, and any image you attach are sent to OpenAI to generate a response. Dashboard context is off by default. If you opt in to include it, selected classes, notes, assignments, tasks, goals, and personal events may be sent with the request; connected calendar context is a separate choice. Journal/reflection and inbox content are not included automatically in dashboard context; anything you type or attach yourself is part of your request. If you ask the assistant to edit or delete a personal calendar event, details of saved personal events may be sent to identify and carry out that action even when optional dashboard context is off. Requested calendar or class changes are saved to your dashboard. If you use voice input, the recording is sent to OpenAI for transcription and the resulting text is used for your AI request. If you upload a schedule screenshot for extraction, the image is sent to OpenAI to identify class details. OpenAI processes these requests under its privacy policy and API terms. Your prompts and uploads are not confidential from the AI provider; avoid submitting sensitive information you do not need for the feature. Provider retention depends on its terms and configuration.
Weather, billing, support, and technical data
A campus forecast request sends the latitude and longitude for the college in your profile to the National Weather Service; the app does not request your device’s precise location for this. An eligible account may start a free trial without providing payment information. Starting the account trial does not create a Stripe subscription or automatically charge you when the trial ends. If you choose a paid web subscription, Stripe processes checkout and payment card information; the app receives subscription and payment status, not your full card number. Apple processes App Store purchases and the app stores records needed to recognize your subscription. The support form sends your name, email, topic, and message through Resend to the support inbox; support messages are not stored in the dashboard database. The website also requests fonts from Fontshare, which receives request information such as your IP address and browser details when those fonts load. The site receives your IP address, browser and device information, and request details needed to serve and protect it. Railway and other infrastructure providers may maintain service and security logs under their own settings.
Cookies and site counts
The app uses essential cookies for sign-in sessions and temporary authorization flows. The public site also sets a random first-party visitor identifier that expires after one year to count unique visitors by day. The database stores a hash of that identifier and deletes visitor-count records after 90 days. If you visit through an approved referral link, a referral-code cookie lasts up to 30 days. We record referral-link clicks and may associate the code with your signup and subscription status to measure referrals. Campus partner applications store the email address, requested referral code, application status, and related tracking records. These records are separate from a student account. These cookies do not contain your dashboard content. You can clear cookies and local storage in your browser; this may sign you out or reset local preferences, but does not delete server-side account data.
3. How we use information
We use information to create and secure accounts; provide, personalize, and maintain the dashboard; save and refresh calendars you connect; respond to AI requests you submit; process purchases and subscriptions; send verification, recovery, and support emails; answer support and privacy requests; prevent abuse; troubleshoot errors; and meet legal obligations. We use the chosen college to provide relevant school selection and campus weather. We do not sell personal information or use dashboard content to build advertising profiles or for cross-context behavioral advertising.
We use Google user data only for the feature you authorize, such as sign-in, reading your primary Google Calendar, and creating or updating events only when you use those controls; we do not use Google user data for advertising. Our use and transfer of information received from Google APIs adheres to Google’s API Services User Data Policy, including its Limited Use requirements, and the Google Workspace API User Data and Developer Policy. We do not use Google user data to train generalized AI models. If you enable connected-calendar context for an AI request, relevant event details are sent to OpenAI to answer that request.
5. Your choices and privacy rights
You can choose whether to connect a provider, include available dashboard or calendar context in AI requests, and provide optional profile or schedule images. You can disconnect a provider in the app; you may also need to revoke its authorization in the provider’s security settings. You can correct profile and dashboard information in the app and use Settings to download an account-data export.
Use Profile → Delete account to delete your account. The app requires a recent sign-in and confirmation of your account email before deletion. An active, past-due, or unpaid web subscription must be canceled and its billing status updated before deletion can proceed. A Stripe-backed trialing subscription must also be canceled; the separate no-card account trial does not block deletion. If you cannot complete that process, contact support. Apple subscriptions must be canceled separately through Apple. You can also send a privacy request through Contact Support. Depending on your location and the laws that apply, you may have additional rights to access, correct, delete, obtain a copy of, or object to certain processing of your personal information. We may need to verify your identity before fulfilling a request. We will review and respond to requests as required by applicable law, explain any applicable exception, and explain how to ask us to reconsider a denial where the law provides an appeal right. You do not need to create an account to submit a privacy request.
6. Retention and deletion
We keep account and dashboard information while your account is active and as needed to provide the service. When account deletion succeeds, the app removes the account’s primary database records, including dashboard data and saved provider credentials. We attempt to revoke saved Google calendar/mail authorization and saved Apple sign-in tokens, but a provider may not accept the revocation; you can also remove the app from that provider’s account settings. Deleting your account does not remove information held by Google, Microsoft, Canvas, Apple, or other providers, and it does not cancel an Apple subscription.
Copies may remain in infrastructure backups until those backups expire or are replaced. The exact backup retention period is controlled by the hosting provider and is not specified here. We may retain limited information longer when needed to meet legal obligations, resolve disputes, enforce agreements, or protect the service. Support emails and campus partner applications are stored separately from your student account and are not automatically erased by the in-app account deletion action; include them in a support privacy request if you want them reviewed for deletion. Service providers may retain information under their own schedules. We retain visitor-count records for up to 90 days and Stripe webhook event records for up to 180 days, subject to periodic cleanup. Private-feed and temporary processing caches may remain briefly until they expire or the server restarts.
7. Security
We use measures including one-way password hashing, account-specific access controls, HTTP-only session cookies, and encryption of connected-provider tokens and saved calendar-feed data. Production cookies are marked Secure over HTTPS. These measures reduce risk but cannot guarantee absolute security. Use a unique password, keep private calendar links confidential, and avoid adding information that is not needed for your planning.
8. Children and school information
My Life Dashboard is intended for students age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. If you believe a child under 13 has provided information, contact us through the support form so we can review and delete it as appropriate.
The service is an individual planning workspace, not a school-operated student-record system. We do not act on behalf of a school or receive school records under a school-official arrangement. Ask your school before connecting a school account or calendar feed if you are unsure whether it permits that use.
9. Changes to this policy
We will update this page when our practices change and revise the effective date. If a material change requires notice or renewed consent, we will provide it as required by law. The rights available to you depend on your location and the laws that apply. For information about the Colorado Privacy Act, see the Colorado Attorney General’s guidance. For California residents, see the California Privacy Protection Agency’s FAQs. The FTC explains the federal COPPA Rule for children under 13 here.
For questions, requests, or complaints about privacy, use Contact Support and select “Privacy or data request.”