Your data. Your life. Your control.
This page describes what LifeRoster does with your records, what it never does with them, and how you stay in control of both.
What never happens to your data
- Sold to anyone
- Used to target advertising
- Scanned to build a profile of you
- Shared without you choosing to share it
- Pulled in from your bank or other accounts
There is no business model here that depends on your information, which is why this list can be short and absolute.
Privacy detail
Your data lives on your device
LifeRoster keeps your records on the device you entered them on. That is the primary copy, not a cache — which is why everything works with no connection.
- Yours first, cloud second
- Every module reads and writes what is on your device. Nothing needs to reach a server for the app to be fully usable.
- Syncing is a convenience, not a requirement
- When you are online, your records are backed up and kept in step across your devices. Switch the network off and nothing about the product degrades.
- Encrypted where it is stored
- Your records are encrypted on your device. If that protection cannot be established, LifeRoster stops rather than storing anything in a readable form.
- A new device picks up where you left off
- Sign in on a replacement phone and your records come back as they were. Losing a device does not mean losing the years of history you put into it.
How your records are protected
Encrypted on the device, encrypted on the way to your backup, and tied to your account at every point.
- Encrypted in transit
- Anything that leaves your device to reach your backup or your other devices is encrypted before it goes and stays encrypted on the way.
- Private to your account
- Your records are visible to your account and no other. Isolation is enforced by the service itself rather than by the app asking nicely, and it is tested continuously.
- An extra lock, if you want one
- You can put a PIN or your fingerprint or face in front of the whole app — useful for the phone that gets passed around at home.
- Sensible about photographs
- Scanned documents and receipt photos are stored inside the app's own protected area rather than in your general photo library.
What LifeRoster never does
The simplest privacy promise is a short list of things that do not happen.
- Your records are never sold
- Not to advertisers, not to data brokers, not to anyone. There is no business model here that depends on your information.
- No advertising, no profiling
- Your health readings, spending and documents are not scanned to build a profile of you, and there are no ads in the product to target.
- No accounts you did not ask for
- LifeRoster does not connect to your bank, your utility provider or your health services. Every record in the app is one you entered.
- No hidden sharing
- Sharing is always something you do on purpose. Being connected to someone does not expose your records to them, and a split someone shares with you changes nothing in your own ledger unless you choose to add it.
The assistant
Most of what you say to it never leaves your device, and it cannot save anything without you.
- Understood on your device
- The entries people make most often — readings, expenses, ledger entries — are recognized on the device itself, with no connection involved.
- When it needs help
- If a request cannot be understood on the device, it is handled through a secure service that confirms the request is yours. Your records are read on your device, not by that service.
- Voice stays with you
- Dictation is transcribed on your device. The audio never leaves it, and the transcript goes into the box for you to check rather than sending itself.
- It learns phrasing, not facts
- What the assistant remembers is how you word things, so it gets quicker at understanding you. Your records are not used to train anything.
Staying in control
Leaving should be as straightforward as joining.
- See and remove your devices
- Every device signed in to your account is listed, and you can sign any of them out remotely — useful for a phone you no longer have.
- Signing out clears the device
- Switching accounts wipes the local copy, so a shared or handed-on phone does not carry the previous account's records. Signing back in restores them.
- Delete your account whenever you want
- Account deletion is a normal action inside the app, not a support request you have to chase.
- Your history is not silently discarded
- Records with history attached refuse to be deleted outright, and a deletion made on one device can be recovered from another.
Being straight with you
No app should ask you to take its security on faith, and none should promise perfection. LifeRoster encrypts your records on your device and in transit, keeps them private to your account, and never sells or profiles them. What it will not do is claim to be unbreakable, or use security language it cannot stand behind. If something here is ever no longer true, this page changes.
See how it is built.
How your data is protected follows from how the product is designed. Both are described in plain terms.
- Use it nowOpen the web app
- Coming soonGoogle Play
- Coming soonApp Store