Legal
Privacy Policy
Last updated: January 2026
1. Introduction
LifeAdmin Ltd ("LifeAdmin", "we", "us", or "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our household finance management service.
LifeAdmin Ltd is the data controller responsible for your personal data. We are registered in England and Wales.
Contact Details:
Email: privacy@lifeadmin.xyz
Address: LifeAdmin Ltd, London, United Kingdom
2. Data We Collect
We collect and process the following categories of personal data:
2.1 Account Information
- Name and email address
- Password (stored as a secure hash, never in plain text)
- Account preferences and settings
2.2 Financial Data (via Open Banking)
When you connect your bank accounts through TrueLayer, we receive:
- Account names and identifiers
- Account balances
- Transaction history (payee names, amounts, dates, categories)
- Account holder information
Important: We never receive or store your bank login credentials. Authentication happens directly with your bank via Open Banking.
2.3 Email Data (via Nylas)
When you connect your email account, we access:
- Email metadata (sender, subject, date) for emails identified as bills
- Email content and attachments for bill extraction
- PDF documents attached to billing emails
We only process emails that our system identifies as bills or financial documents. Personal correspondence is not read, stored, or processed.
2.4 Extracted Bill Data
From your emails and documents, we extract:
- Provider/company names
- Bill amounts and due dates
- Account references and payment details
- Service period information
2.5 Usage Data
- Log data (IP address, browser type, pages visited)
- Feature usage analytics
- Error reports and diagnostics
3. How We Use Your Data
We use your personal data for the following purposes:
3.1 Service Provision
- Aggregating your bank accounts and displaying transactions
- Extracting and organising bills from your email
- Matching bills to bank transactions
- Sending renewal alerts and notifications
- Providing household sharing features
3.2 Service Improvement
- Improving AI extraction accuracy
- Developing new features based on usage patterns
- Fixing bugs and technical issues
3.3 Communication
- Account-related notifications
- Service updates and announcements
- Responding to support requests
3.4 Legal Compliance
- Complying with legal obligations
- Responding to lawful requests from authorities
- Protecting our legal rights
4. Legal Basis for Processing
We process your data under the following legal bases (GDPR Article 6):
- Contract: Processing necessary to provide our service to you
- Consent: Where you have given specific consent (e.g., marketing communications)
- Legitimate Interests: For service improvement and fraud prevention, where our interests don't override your rights
- Legal Obligation: Where we must comply with legal requirements
5. Third-Party Service Providers
We work with trusted third-party providers to deliver our service:
5.1 TrueLayer
TrueLayer provides our Open Banking connectivity. They are authorised and regulated by the Financial Conduct Authority (FCA) as an Account Information Service Provider (AISP). TrueLayer processes your bank data to provide it to LifeAdmin.
5.2 Nylas
Nylas provides email connectivity, allowing us to access your email inbox to identify and extract bills. Nylas processes email data on our behalf.
5.3 Anthropic
Anthropic provides AI services (Claude) for bill extraction. Bill documents are processed by Anthropic's AI to extract structured data. Anthropic does not retain your data for training purposes under our data processing agreement.
5.4 Hosting and Infrastructure
We use cloud hosting providers with data centres located in the UK and EU to store and process your data securely.
6. Data Security
We implement robust security measures to protect your data:
- Encryption in Transit: All data transmitted between your device and our servers is encrypted using TLS 1.3
- Encryption at Rest: All stored data is encrypted using AES-256 encryption
- Access Controls: Strict access controls limit who can access personal data
- Security Audits: Regular security assessments and penetration testing
- Data Centre Security: Our hosting providers maintain ISO 27001 certification
7. Data Retention
We retain your data for as long as necessary to provide our service:
- Active Accounts: Data is retained while your account is active
- Deleted Accounts: Personal data is deleted within 30 days of account deletion
- Transaction History: We retain transaction data for up to 7 years for regulatory compliance
- Backups: Backup data is purged within 90 days of deletion
8. Your Rights (GDPR)
Under UK and EU data protection law, you have the following rights:
8.1 Right of Access
You can request a copy of all personal data we hold about you.
8.2 Right to Rectification
You can request correction of inaccurate or incomplete data.
8.3 Right to Erasure
You can request deletion of your personal data ("right to be forgotten").
8.4 Right to Restrict Processing
You can request that we limit how we use your data.
8.5 Right to Data Portability
You can request your data in a machine-readable format to transfer to another service.
8.6 Right to Object
You can object to processing based on legitimate interests or for marketing purposes.
8.7 Rights Related to Automated Decision-Making
You have the right not to be subject to decisions based solely on automated processing that significantly affect you.
To exercise any of these rights, please contact us at privacy@lifeadmin.xyz. We will respond within 30 days.
9. Cookies
We use cookies and similar technologies:
9.1 Essential Cookies
Required for the service to function (authentication, security). These cannot be disabled.
9.2 Analytics Cookies
Help us understand how you use LifeAdmin so we can improve. You can opt out of these in your account settings.
We do not use advertising or tracking cookies.
10. International Data Transfers
We primarily store and process data within the UK and European Economic Area (EEA). Where data is transferred outside the UK/EEA (e.g., to Anthropic in the US), we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
11. Children's Privacy
LifeAdmin is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through the app. The "Last updated" date at the top indicates when the policy was last revised.
13. Contact Us
For privacy-related questions or to exercise your rights:
Email: privacy@lifeadmin.xyz
Address:
LifeAdmin Ltd
London, United Kingdom
Complaints
If you're unhappy with how we've handled your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):