Privacy Policy

1. General overview

This Privacy Policy explains how the LifeDesk: Life Manager mobile application (“LifeDesk”, “the app”), developed by BZOTech (“we”, “us”, “our”), handles information. LifeDesk is a privacy-focused personal life manager that stores data locally. It includes a calendar, finance tracker, goals, habit tracker, mood tracker, notes, secure vault, shopping lists, a small-business sales book (MyShop), a rewards program, and an AI Assistant powered by Google Gemini that can create entries from a typed or spoken request.

The app is available in English, Vietnamese, Spanish, French and Chinese. It follows your device language by default, and you can change it at any time.

2. On-device data storage and zero server collection

• Local storage: All data you enter, along with your preferences and app state, is created and stored only on your device in a local SQLite database inside the app’s sandbox. This covers your profile (name, photo and any optional details you add), events, reminders, transactions, wallets, budgets, goals, habits, mood entries, notes, vault entries, shopping lists, MyShop products, customers and orders, reward points and settings. Photos and voice recordings you attach (such as receipts, shopping items, product images, document scans and voice notes) are kept on your device. If you add your own Google Gemini API key for the AI Assistant, it is also kept only on your device.
• No developer backend: We do not operate servers or databases for LifeDesk. We do not collect, store or sell your personal information, and we cannot see the content you create.
• No account system: The app does not require registration, an email address or a password. All features are available as soon as you enter the name you’d like to be called.
• Offline use: All core features work without an internet connection. A connection is only needed for ads, the optional Google features in section 5, and the services listed in section 3.

3. Every network connection the app makes

For full transparency, this table lists every service LifeDesk connects to. All connections use HTTPS encryption.

Service	When	What is sent	Optional?
Google Gemini API	When you send a message (text or voice) to the AI Assistant	Your message and your existing category names, sent directly from your device using a shared trial key or your own Gemini API key	Yes — only when you use the AI Assistant
Google Drive API	When you tap Connect, Back Up Now or Restore	A backup file of your LifeDesk data, saved to your own Google Drive	Yes, off until you turn it on
Google Calendar API	When you turn on sync in Calendar settings	Event titles, descriptions, locations and times	Yes, off until you turn it on
Google Sign-In	When you connect Google Drive or Google Calendar	Standard Google OAuth sign-in	Yes
Google AdMob and User Messaging Platform (UMP)	When the app opens (at most one ad per day), on the footer banner of main screens, and when you choose to watch a rewarded ad	Advertising ID, IP address and device information, according to your consent choices	You can limit ad personalization
Firebase Cloud Messaging	To subscribe to general system announcements	A push token that is not linked to your LifeDesk data	You can turn off System notifications
Firebase Remote Config	Each time the app opens	A request to read the minimum supported app version	No
ipwho.is / ipapi.co	Once, before first-time setup is finished	Your IP address only, to estimate your country	No

LifeDesk does not include any analytics SDK, crash-reporting SDK (such as Firebase Analytics or Crashlytics) or any ad network other than Google AdMob.

4. Language, region and approximate country

• The app sets its display language from your device’s system language. If your language is not supported, the app shows English.
• To pick sensible defaults (for example, Vietnamese, VND and the dd/MM/yyyy date format for new users in Vietnam), the app makes a single request to an IP geolocation service (ipwho.is or ipapi.co) before first-time setup is finished. Only your IP address is sent, only your country is used, and the result is not stored or sent to us.
• The app does not request or access GPS or any other device location permission, for this or any other purpose.
• You can change your language, region, currency and date format at any time under Profile → Language & Region and Profile → Preferences.

5. Optional Google features you turn on yourself

Two optional features send data to Google on your behalf using your own Google account. Both are off until you connect them and grant permission through Google’s sign-in screen.

Feature	Access requested	What is sent and where it goes
Google Drive backup	drive.appdata: only a hidden app-data folder that belongs to LifeDesk	A single backup.json file, created when you tap Back Up Now, stored in the hidden app-data folder of your own Google Drive. LifeDesk cannot see or touch any other file in your Drive, and the backup is never sent to BZOTech.
Google Calendar sync	calendar.events on your primary calendar only	Event titles, descriptions, locations and times, synced in both directions with your own Google Calendar. LifeDesk does not read or change your other calendars.

What the backup contains: your profile, the data from every module, reward points, settings and the Vault encryption key, so that your Vault can still be read after you restore on a new phone. Your app lock and PIN settings are not included, so you won’t be locked out on a new phone. The backup file is protected by your Google account and Google’s encryption, but it is not additionally encrypted by LifeDesk, so keep your Google account secure (for example, with 2-Step Verification).

This data is handled by Google under the Google Privacy Policy. You can switch these features off in the app at any time, or remove LifeDesk’s access in your Google Account at myaccount.google.com/connections. Disconnecting does not delete data on your device or in your Google account. LifeDesk’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

6. Third-party advertising and AI processing (Google AdMob & Google Gemini)

LifeDesk is free, with no paid plans or in-app purchases. We support it with a small number of ads served through the Google AdMob SDK:

• App-open ads: at most one per day, only after first-time setup is finished, and never on top of the lock screen.
• Rewarded ads: shown only when you tap to watch one, for example to earn points or freeze a habit streak.
• Banner ads: a small banner appears in the footer of the main screens (Home, Calendar, Finance, Goals, Habits, Mood and Shopping List).
• There are no interstitial ads that interrupt you, and no ads mixed into your content.

• Data processed by a third party: Google AdMob may automatically collect device identifiers (such as the Advertising ID on Android or IDFA on iOS), IP address, general device information and ad diagnostics. Google uses this to serve personalized or non-personalized ads, to measure ads and to prevent fraud.
• Consent management: Before the first ad, we use the Google User Messaging Platform (UMP) SDK to ask for consent where required, including the European Economic Area (EEA), the United Kingdom and Switzerland under the GDPR, and to provide opt-out choices required by US state privacy laws. You can review or change your choice at any time under Profile → Privacy & Data → Ad Privacy Options.
• Apple App Tracking Transparency (ATT): On iOS, the app asks for your permission before it can access the IDFA. If you choose “Ask App Not to Track”, you can still use every feature, and only non-personalized ads are shown.
• Advertising ID controls: On Android you can reset or delete your advertising ID under Settings → Google → Ads (or Settings → Security & privacy → Ads). On iOS you can manage tracking under Settings → Privacy & Security → Tracking.
• We never give AdMob any of the content you create in LifeDesk.

Learn more in the Google Privacy Policy and in How Google uses information from sites or apps that use its services.

AI Assistant (Google Gemini)

The AI Assistant lets you type or speak a natural request, such as “Bought coffee for 45k”, and turns it into an entry in the right module. To do this, LifeDesk sends the message you type or speak, together with the names of your existing categories (so the AI can pick the correct one), directly from your device to Google’s Gemini API over HTTPS. This call does not pass through any BZOTech server.

• Trial key: By default, requests use a shared trial API key built into the app, so you can use the AI Assistant right away. This trial has a limited quota; when it runs out, the app asks you to add your own key rather than blocking the feature.
• Your own key: You can add your own free Google Gemini API key at any time under Profile → AI Assistant. Once added, your requests use your key instead, are sent directly from your device to Google, and are governed by Google’s own Gemini API terms and privacy notice.
• We do not store your AI Assistant messages on any server and cannot read them ourselves. They are processed by Google to generate a response, subject to Google’s own data handling practices for the Gemini API.
• Avoid including information you would not want processed by a third-party AI service, such as full card numbers or passwords, in your requests to the AI Assistant.

7. Data safety and app privacy summary

The table below matches the Google Play Data safety section and the Apple App Store App Privacy details for LifeDesk.

Data type	Collected by BZOTech	Collected by third-party SDKs	Purpose
Name, email address, phone number	No (stored only on your device)	No	Not collected
Financial info, health and mood data, calendar, photos, files, messages and other app content	No (stored only on your device, or in your own Google account if you turn on backup or sync)	No	Not collected
Precise location (GPS)	No (permission not requested)	No	Not collected
Approximate location	No (country estimated once from IP, not stored)	No	Not collected
Device or other identifiers (Advertising ID / IDFA)	No	Yes (Google AdMob)	Third-party advertising
App info and performance (diagnostics)	No	Yes (Google AdMob and Firebase SDKs)	Ad delivery, analytics and app functionality
Text or voice messages you send to the AI Assistant	No (not stored by BZOTech)	Yes (Google Gemini API, only when you use the AI Assistant)	App functionality (creating entries from your request)

All data is encrypted in transit. You can request deletion of your data directly in the app (see section 11).

8. Notifications

Reminders you create, such as event alerts, habit and mood check-ins, goal deadlines, budget warnings, shopping list reminders, document and card expiry reminders and scheduled MyShop posts, are scheduled on your device using your phone’s notification system. Their content is never sent to us. Separately, the app may receive general announcements from us through Firebase Cloud Messaging. These are sent to all users and are not targeted at you. You can turn each notification type off under Profile → Notifications or in your device settings.

9. Device permissions

LifeDesk asks for permissions only when a feature needs them:

• Notifications: to show the reminders you set.
• Face ID / fingerprint: to unlock the app and the Vault. Biometric checks are handled by your device’s operating system, and LifeDesk never receives your biometric data.
• Photo library: to add a profile photo, receipt photos, shopping item photos, product images and shop logos, or images attached to Vault documents. Images stay on your device.
• File picker: to attach files to documents in the Vault.
• Microphone: to record voice notes in Notes and to let you speak a request to the AI Assistant instead of typing it. Recordings and voice input are only sent to Google’s Gemini API when you use the AI Assistant, as described in section 6; voice notes attached to a note stay on your device.
• App Tracking Transparency (iOS): for more relevant ads through AdMob, as described in section 6. You can decline and still use the whole app.
• Internet and Advertising ID (Android): for ads, the AI Assistant, Google Drive and Google Calendar, and Firebase.
• LifeDesk does not use your location, contacts or call logs, and does not access the camera directly (photos are chosen through your device’s photo library).

10. Security, app lock and the Vault

• App lock: You can lock LifeDesk with Face ID or fingerprint, with a 4-digit PIN as a backup. The app locks when it starts and after it has been in the background for more than 5 minutes. Your PIN is never stored in plain text. Only a peppered SHA-256 hash is kept, in the iOS Keychain or Android Keystore.
• Vault: The Vault has its own separate PIN and locks every time you leave it or the app goes to the background. Passwords, card numbers and CVVs are encrypted with AES-256-GCM before they are saved. The 256-bit key is randomly generated on your device and kept in the Keychain or Keystore. It is not derived from your PIN.
• Secrets such as the PIN hash and the encryption key are excluded from Android Auto Backup.

Your data is only as safe as the device it lives on, so keep your phone’s operating system updated and use a screen lock. Because we never hold a copy of your data, we cannot recover your data or reset your PIN if your device is lost or reset, or if the app is uninstalled without a backup.

11. Data retention and deletion

Your data stays on your device until you delete it. You can:

• Export all of your data as a JSON file at any time under Profile → Privacy & Data → Download My Data.
• Permanently erase everything under Profile → Privacy & Data → Delete Account. This removes all local data, your PINs, the Vault encryption key and the saved Google sign-in from your device.
• Uninstall the app, which removes its local database from your device.

Deleting data in the app does not remove a backup you saved to Google Drive. For step-by-step instructions, including how to remove that backup, see Delete Your Data.

12. Your privacy rights

EEA, UK and Switzerland (GDPR / UK GDPR): We do not process your personal data on our own systems. Where Google processes data for advertising, it relies on the consent you give through the UMP consent form, and you can withdraw that consent at any time in Ad Privacy Options. You also have the right to lodge a complaint with your local data protection authority.

California and other US states (CCPA/CPRA and similar laws): We do not sell personal information. Personalized ads served by Google may count as “sharing” for cross-context behavioral advertising under California law. You can opt out as described on our Do Not Sell or Share My Personal Information page. We will not treat you differently for using your privacy rights.

Because we do not hold your data, we are not able to access, correct or delete it for you. You can do all of these directly in the app. For requests about data processed by Google, please use the tools Google provides.

13. Children’s privacy

LifeDesk is not directed to children under 13 (or under 16 in the EEA and UK), and we do not knowingly collect personal information from children. The app itself collects no personal information. If you believe a child is being served personalized ads through the app, please contact us.

14. Sharing and exporting

If you choose to share something from LifeDesk, such as an event image, a shopping list, a finance report, a MyShop post image or a Vault item, your device’s share menu sends it to the app or person you select. That transfer is under your control and is governed by the privacy policy of the service you choose.

15. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top of this page. For important changes, we will also let you know in the app or in the release notes.

16. Contact us

If you have questions about this Privacy Policy or about your privacy while using LifeDesk, contact us at [email protected] or visit our Support page.