Privacy Policy
How LIFEBOX collects, uses, and protects your data.
Data controller
LIFEBOX FZ-LLC, registered in the Emirate of Dubai, United Arab Emirates, is the data controller responsible for your personal data under this policy. For data-protection enquiries, contact us at info@lifebox.ae.
Your privacy comes first
LIFEBOX stores your data securely and never sells it to third parties. Your information is yours, and we treat it with the care it deserves.
What we collect
We collect the information you provide — account details, people you add, documents, and financial records — to deliver the service. Documents and sensitive files are kept in private storage with access restricted to your space.
How we use it
We use your information only to deliver and improve LIFEBOX — reminders, insights, and the features you've enabled. We do not use your personal data to train external models or show you third-party advertising.
Analytics & cookies
We use Google Analytics to understand, in aggregate, how visitors use LIFEBOX — which pages are viewed and how often — so we can improve the product. Google Analytics uses cookies to recognise your browser. We send it a sanitised page address that never contains sensitive query parameters such as password-reset tokens, invitation ids, or item ids; those are stripped from the address bar before any measurement script runs. We do not serve personalised advertising and do not share your analytics data with advertisers. Because LIFEBOX is offered to users in the United Arab Emirates and the GCC rather than the European Union, we do not show a cookie consent banner; you can still manage cookies in your browser settings, and core features do not depend on analytics cookies.
AI & document analysis
When you use AI-assisted features — such as document auto-analysis, capture, or the LIFEBOX assistant — the contents of your uploaded documents and files are sent to a third-party AI provider (an LLM with vision capability) for processing. A time-limited signed URL to the file is shared with that provider so it can read the document; the file itself remains in your private storage and is not stored permanently by the provider. Sensitive details such as identity numbers are transmitted to the provider as part of analysis. You can avoid this by entering document details manually instead of using auto-analysis.
Bank connections & transaction data
When you connect a bank account, LIFEBOX uses Lean, a regulated open-banking provider, to link your bank and retrieve account balances and the last 90 days of transactions on your behalf. The connection is authorised through Lean's secure flow, and LIFEBOX never receives or stores your online banking credentials. The Lean connection flow loads Lean's loader script, which in turn pulls further Lean scripts (without fixed version numbers) and a Mixpanel session-recording script onto your device for the duration of that flow; Lean and Mixpanel operate as separate controllers for those scripts and any data they collect through them. We store the retrieved accounts, balances, and transaction details (amount, date, description, and merchant name) so you can see your spending and insights inside LIFEBOX. You can disconnect a bank at any time, which removes its linked accounts, transactions, and any spending entries already imported from those transactions from LIFEBOX.
AI transaction categorisation
To organise your spending, transactions are first sorted by automatic rules. For transactions the rules cannot classify, the merchant name, description, and amount are sent to our AI provider to assign a spending category and subcategory. No other transaction details are sent for this purpose, and the AI provider does not retain the data beyond processing. You can correct any category, and your correction is saved and applied to future transactions from the same merchant.
Device permissions & media
LIFEBOX requests camera, microphone, and location permissions only when you use a feature that needs them, and each is used solely for that feature. The camera captures photos of documents, receipts, and attachments for capture and auto-analysis. The microphone records short voice clips for voice capture and the voice assistant; recordings are transcribed and the audio is not retained beyond the request. Approximate device location is used only to show a weather illustration on the home greeting and is sent to the weather provider (Open-Meteo) for that single request. Photos and audio are processed for the feature you invoked and are not used for advertising or any unrelated purpose. You can revoke any permission at any time from your device settings; the matching feature will simply be unavailable until you re-grant it.
How long we keep it
We keep your data for as long as your account is active. Account data is deleted within 30 days of an account-deletion request. Documents and files in private storage are removed with the account. We keep limited billing records (invoices and payment identifiers) for as long as required by tax and accounting law, and security logs for up to 12 months, after which they are deleted or anonymised.
Service providers & processors
We share data only with processors who help run LIFEBOX under strict confidentiality: cloud hosting and database infrastructure, Google for Google Analytics web and app measurement (which uses cookies), Stripe for payment processing, an email delivery provider for transactional and notification email, Lean for open-banking bank connections and transaction retrieval, an AI provider for the assistant and transaction categorisation features, and a weather provider (Open-Meteo) that receives your approximate device location only when you grant location permission, to show a weather illustration on the home greeting. Each processor only receives the data necessary to perform its function and is bound to protect it.
Sharing
We do not sell or rent your data. We share information only with the providers above, under strict confidentiality, or when required by law.
Your control
You can request deletion of your account and data at any time — either in-app from Settings, or without the app at lifebox.ae/delete-account. Account data is deleted within 30 days of a verified request. You control which people can access each part of your information through role-based permissions. You may request a copy of your data or ask us to correct it by contacting info@lifebox.ae.
Security
We apply industry-standard safeguards to protect your data. No system is perfectly secure, but we work continuously to keep your information safe.
Contact
For any privacy question or request, contact us at info@lifebox.ae, or by post to LIFEBOX FZ-LLC, Dubai, United Arab Emirates. You can also reach us through the Help Centre in Settings.