life

Privacy notice

This notice describes the existing private Google OAuth app life, operated by Tofu Ventures LLC for personal administration. Contact: [email protected]. life is an intended private consumer of the proposed Fearless direction; its current native integration is not a deployed shared Fearless service.

This website and hosting

These static pages offer no sign-in, forms or third-party embeds. Cloudflare adds email-address protection and performance-measurement scripts when serving fearless.tofu.vc under the existing domain settings. The performance script sends website usage and performance information to Cloudflare. Opening the contact link uses your email application.

Cloudflare Pages hosts these public information pages. Cloudflare processes visitor requests to deliver and protect these pages. Its privacy policy describes processing of end-user IP addresses, traffic routing data, system configuration information and other traffic information, and making some end-user data available to customers as logs. Cloudflare also derives network statistics and security information. Its retention depends on processing purposes and legal obligations; no fixed visitor-log retention or deletion deadline is promised here.

Cloudflare Pages serves only these information pages, not life’s Google integration or its stored credentials and selection records.

Google information and purpose

life uses Google account identity and email information to verify that each connection belongs to the intended account and to keep account access separate.

The authorized Gmail permission permits reading messages and attachments. The current native setup checks Gmail account information; automatic real-mail ingestion into life's records system is not enabled.

The authorized Calendar permissions permit reading calendar lists and events. Current native checks read calendar-list information, including calendar identifiers, names, time zones and access roles. They do not collect events.

For Google Drive, Docs, Sheets and Slides, life can retrieve app-visible file metadata and read or export supported files selected for life or created by the app. Explicit operations can append document text, update spreadsheet values, add slide content or update text files, subject to the file's permissions and the operation's checks. New-file creation is currently limited to test documents. File selection alone does not edit a file. These capabilities support personal record review and document work.

life does not request permission to send Gmail messages or change calendars.

Storage and access

Google continues to store the connected account's original messages, calendars and files. Requested data is processed by the native tool on the operator's computer. Read and export commands can return file contents or downloaded data to the operator; copies saved from those outputs are separate from the Google original.

OAuth credentials and refresh grants are stored in Doppler. Saved grants can also include verified issuance, refresh and known-expiry metadata; observations from ordinary read-only refreshes remain in memory. Account-bound file-selection records are stored in a private PostgreSQL database hosted by Neon. Those records include account and authorization identifiers, selected file identifiers, file type and selection time. The selection records do not contain document bodies. This integration is therefore not entirely local.

Google, Doppler and Neon process the information needed for their respective roles. The native integration contains no connection that sends Google content to a model provider. Any separately authorized use of other tools is outside this integration's current processing path and must be assessed before Google data is transferred to them.

Tofu Ventures LLC, as operator, can access data returned by the tools and administer the associated storage. Access to another authorized user's specific data requires that user's agreement, except where access is necessary for security or required by law.

Retention and your choices

There is no automatic deletion schedule or self-service deletion feature in the current integration. Saved credentials, selection records, and any operator-saved exports need separate review and removal. No fixed retention period or backup-deletion deadline is promised.

You can remove life's access through your Google Account connections. Revoking access does not itself delete previously saved records or exports. Contact [email protected] to request review or removal of data held by life. Do not send passwords, tokens or sensitive documents in an initial request.

Use restrictions and changes

life's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google data is not used for advertising, sale to data brokers, or training general-purpose models.

Before introducing new processing purposes, processors or a hosted service, the operator will update the relevant disclosures and obtain any required consent.