Security

Lifewoven reads three things, keeps them in one encrypted place in the EU, and never trains anything on them. Section 11 lists everything we have not done yet, including a security audit.

Written against the code as it stands. Lifewoven opens to the founding circle in September 2026.

Effective 27 July 2026

1. What Lifewoven can see, and why#

Three things, and only to read them: your calendar, your contacts, and — if you choose — your email.

All three are read-only. Lifewoven never asks Google for the ability to change or delete anything.

The mail permission covers your whole mailbox, not a slice of it. How far back Lifewoven actually reads is a separate choice, and it is yours — described in section 4.

Email is optional: the checkbox starts unticked, and everything else works without it.

2. Where your data lives#

On an encrypted volume, in the European Union.

Each person’s weave lives in its own directory, and every file access is checked against it. Anything landing outside your own directory is refused, not corrected.

Backups are encrypted before they leave, held in the European Union, and unreachable from the public internet.

3. How it’s protected, and what that protection does not cover#

The volume is encrypted. Traffic is encrypted. Keys for your Google sources are encrypted on arrival, with the decryption key held outside the database.

What that does not cover: the volume key is kept on the same system that mounts it, so it can restart unattended. Encryption protects a stolen disk, not someone who takes control of the running system.

4. How far back it reads, and what it keeps#

Lifewoven weaves as far back as you let it. It begins with a recent window and goes deeper when you ask — the deeper it goes, the more it sees.

What it reads, it keeps, until you delete your account. Depth is a limit on reading, not on keeping: what it read in June is still there in December.

One exception: newsletters and receipts are set aside unread — who sent them and when, never what they said.

5. Nobody trains a model on your data#

The model that reads your words is Google’s Gemini, on a paid tier. Under Google’s paid-tier terms, your prompts and the responses are not used to improve Google’s products or train their models.

One caveat: Google keeps short-lived logs for abuse detection, and no setting turns those off. That applies to every caller of the API.

Lifewoven itself trains nothing on your data.

6. When a question leaves#

Almost nothing in Lifewoven reaches outside itself. One thing does, and only if you allow it: some questions are about the world rather than about you — the current guidance on something, what happened this year — and your own pages cannot answer those.

When you switch this on, Lifewoven rewrites your question into a general one with your names, dates, numbers and anything private removed, and sends only that rewritten question to Google Search. Lifewoven never sends your pages, your mail, your calendar or your captures. If the rewritten question still holds something personal, Lifewoven sends nothing — the check refuses rather than trims, so a question it cannot clean is a question that stays here.

This stays off until you switch it on. Before your first question leaves, Lifewoven shows you the exact rewritten question it would send and waits for your answer. Switching it off in Yours takes effect on your next question. Lifewoven marks every answer that used the web and shows you its sources.

Google is not a new party here: Google already runs the model that reads your pages. This adds a use, not a recipient.

7. Who else touches it#

Google, for the model and the mail APIs. Hetzner, for the machine the encrypted volume sits on. Resend, for one deletion confirmation. Your device’s push service, if you turn reminders on. Each one is named on the privacy note, with what it receives and the basis for any transfer out of the EU.

There is no analytics, no tracking, no advertising network and no error-reporting service anywhere in Lifewoven. Not disabled — absent.

8. Getting your data out, and getting rid of it#

Deleting works, and it’s complete. Type DELETE in your settings and everything goes: every page, every kept item, your raw mail and calendar copies, your chats, your captures. Lifewoven hands your permission back to Google in the same operation. The encrypted backups age out within thirty days.

Getting a copy out. Export downloads your whole weave in a form you can read without us, and it does not depend on us being available to honour it.

9. How we make money#

You pay us. That’s the whole model.

Lifewoven is paid software. There is no advertising, and there never will be. We do not sell what’s in your brain and we do not share it. Lifewoven has taken no outside investment.

If Lifewoven is ever acquired, we will tell you before it happens, with time to take everything out and delete your account.

What your weave costs us to build

Two numbers, and they are different things. Setting your brain up — the first ten minutes, plus your first month of daily briefs — is capped at five dollars of computing. That is the cost of getting you started.

Reaching back through your history is a separate budget, capped at fourteen dollars of computing for each person, spent gradually over months rather than all at once. Most mailboxes reach five years well inside it. If yours runs deeper than that budget allows, the reading stops there and we tell you exactly how far it got, rather than quietly leaving you to assume it finished.

We publish these because a service that reads your whole life has to be honest about what that costs it, and because a budget you can see is a budget you can hold us to.

10. Why the founding circle is small#

Google classifies mail access as restricted. Using it at any scale requires an annual independent security assessment, called CASA, which Lifewoven has not completed. Until Google’s verification is done, the app is capped at one hundred people, and everyone who signs in sees a warning screen saying the app is unverified.

Common questions · The privacy note

Back to lifewoven.app