Last updated: July 28, 2026 · Effective: July 28, 2026
 
The short version. We do not store your conversations. They are kept only on your phone, encrypted, and we have no copy of them and no way to read them. To generate a reply, the message you send is transmitted to our AI provider (Anthropic), which processes it and does not use it to train its models. We collect your email address to sign you in, and technical records that a conversation happened — never what it said. Because your conversations exist only on your device, if you lose your phone or delete the app, they are gone permanently and we cannot recover them.
This Privacy Policy explains how True Success For All ("TSFA," "we," "us") collects, uses, protects, and shares information when you use the Living Fully app (the "Service"). It should be read together with our Terms of Service.

1. Information we collect

Information you provide:

• Email address. Used as your account identity and to send you one-time sign-in codes. Sign-in is passwordless — we do not store a password.

• Your conversations — stored on your device, not by us. The messages you send and the AI's replies are written to an encrypted database on your phone. They are not stored on our servers. Each message is transmitted to us and to our AI provider in order to generate a reply, and is discarded as soon as that reply is delivered.

• Notes the AI keeps about you — also on your device. So that it doesn't start from scratch every time, the app writes a short set of notes about you: durable facts you have mentioned, and dated observations from earlier conversations. These are generated by the AI from what you have said, stored in the same encrypted database on your phone, and sent along with your messages to generate each reply. They are not stored on our servers. You can read every one of them in the app under "What I remember" in the menu, and clear them all at any time.

Information collected automatically:

• Conversation metadata. For each turn we record that it happened and what it cost: a timestamp, whether it was you or the AI, which conversation it belonged to, which AI model and prompt version were used, and token/usage counts. This is what lets us understand how the Service is used and what it costs to run. It contains none of the words you or the AI wrote — there is no field in our database for message text.

• Basic technical/device data. Standard information needed to deliver a mobile app and secure the Service (for example, app version and network information).

We do not intentionally collect special categories of data. Because Living Fully is a reflective tool, you may choose to share sensitive personal thoughts in your messages. Those thoughts stay on your phone; what you should be comfortable with is that they are transmitted to our AI provider to generate a reply, as described in Section 3.
2. How we use your information
We use your information to:

• Provide the Service — authenticate your sign-in and generate AI responses. Keeping your conversation history is done by the app on your device; we play no part in it.

• Maintain and secure the Service — prevent abuse, debug problems, and protect against fraud and security threats.

• Improve the Service — using the content-free metadata described in Section 1 and any feedback you choose to send us. We cannot analyze the content of your conversations, because we do not have it. We do not use your conversations to train AI models.

• Communicate with you — for example, to send sign-in codes and important notices about the Service.

• Comply with law — meet legal obligations and respond to lawful requests.

3. Who can see your conversations
Nobody at TSFA can, and that is enforced by design rather than by policy. Our servers never store what you write, so there is no archive for our staff to browse, no database to subpoena, and nothing for us to hand over — including in response to a legal request. We could not read your conversations if we were ordered to.
There is exactly one way conversation content reaches us:

• When you report a response. If you tap "Report" on an AI reply, that one message and any note you write are sent to TSFA staff for review, so we can find and fix problems with the AI. The app tells you this before you submit. Nothing else from the conversation is sent.

Our AI provider processes your messages to generate replies. To produce a response, your message, the recent conversation context your phone uploads with it, and the notes described in Section 1 are transmitted to Anthropic (the maker of the Claude AI models) over an encrypted connection. Anthropic processes this to return a reply, and under our commercial API terms that content is not used to train its models. Anthropic's automated trust-and-safety systems may retain content that they flag, for up to two years; this is outside our control and applies regardless of our own practices.
An important consequence for safety. Because we cannot see your conversations, TSFA staff cannot review one — including one where you may be at risk — unless you send it to us using the report feature. Living Fully is not monitored by a human. In a crisis, call or text 988 (US Suicide & Crisis Lifeline) or call 911.
4. How your data is protected
The strongest protection is that we don't hold your conversations at all — a breach of our servers cannot expose what was never there. On top of that:

• Encryption on your device. Your conversations, and the notes the AI keeps about you, are stored in a database on your phone encrypted with AES-256 (SQLCipher). The key is generated on your device and held in the iOS Keychain, marked so that it is never included in an iCloud backup and never transferred to another device. If a backup of your phone were restored onto a different device, the conversations would be unreadable there.

• Encryption in transit. All traffic between the app, our servers, and our AI provider uses TLS (HTTPS).

• Nothing at rest on our side. Your messages exist in our server's memory only for the seconds it takes to generate a reply, and are never written to disk.

Two honest limits. First, your phone's own protections matter: someone who can unlock your device can open the app. Second, no system is perfectly secure, and we cannot guarantee absolute security.
5. How we share information
We do not sell your personal information, and we do not share it for advertising. We share information only with service providers (sub-processors) who help us run the Service, under contracts that require them to protect it:
Sub-processorPurposeWhat it processes
AnthropicAI model inference (generating replies)Your messages, recent conversation context, and the AI's notes about you, in transit only
Fly.ioApplication hosting and managed databaseAccount details and content-free usage metadata; no conversation content
MailgunSending one-time sign-in code emailsYour email address
We may also disclose information when required by law (see Section 3) or in connection with a merger, acquisition, or sale of assets, in which case we will require the successor to honor this Policy.
6. Data retention
We retain no conversation content, so there is no retention period for it. Your messages are held in server memory only while a reply is being generated.
What we do keep:

• Your account — your email address and sign-in status, for as long as your account is active.

• Content-free usage metadata — the records described in Section 1 that a turn happened and what it cost. These contain no message text.

• Responses you report to us — kept for review under Section 3.

On your device, your conversations and the AI's notes about you are kept until you delete them, delete your account, or delete the app. The notes can also be cleared on their own, at any time, from "What I remember" in the menu. Signing out leaves everything in place, so signing back in on the same phone finds it intact; it is erased if a different account signs in on that device. Deleting your account erases the on-device database and destroys its encryption key.
We cannot restore your conversations. If you lose your phone, delete the app, or delete your account, they are gone permanently. There is no backup on our side, because there was never a copy on our side.
7. Your choices and rights
You can:

• Access your history — your conversations are in the app, on your device. We have no copy to give you, and a request for "all conversation data we hold about you" would return nothing, because we hold none.

• See and clear what the AI remembers — the notes it keeps about you are listed in the app under "What I remember," and you can clear them there at any time without affecting your conversations.

• Delete your data — delete your entire account from within the app (under the menu). This erases the encrypted database on your phone and destroys its key, and removes your account record and usage metadata from our servers.

Depending on where you live, you may also have rights under laws such as the California Consumer Privacy Act (CCPA/CPRA), the Colorado Privacy Act (CPA), Washington's My Health My Data Act and similar consumer-health-data laws, and the EU/UK GDPR, including the right to access, correct, delete, or obtain a copy of your personal information, to opt out of sale or sharing (we do not sell or share for advertising), and to be free from discrimination for exercising these rights. Because your conversations may touch on your wellbeing, we treat that content as sensitive and do not use or disclose it except as described in this Policy. To exercise any of these rights, contact us at erik@truesuccessforall.com. We will verify your request (typically via your account email) and respond within the timeframes required by law. You may appeal a decision by replying to our response.
8. Children's privacy
Living Fully is not intended for anyone under 16. We do not knowingly collect personal information from children under 16, and we comply with the US Children's Online Privacy Protection Act (COPPA). If you believe a child under 16 has provided us information, contact us and we will delete it.
A note on health privacy law. Living Fully is a personal-development tool, not a healthcare provider or health plan. We are not a HIPAA-covered entity, and using the Service does not create a provider–patient relationship. Your privacy is governed by this Policy and by the consumer-privacy and consumer-health-data laws described in Section 7 — not by HIPAA.
9. International users
We operate the Service from the United States. Your account information is stored in the United States, and your messages are processed in the United States and in the locations of our sub-processors while a reply is generated. Your conversations themselves stay on your device, wherever that is. If you access the Service from outside the US, you understand your information will be transferred to and processed in the US, where privacy laws may differ from those in your country.
10. Changes to this Policy
We may update this Policy from time to time. If we make material changes, we will take reasonable steps to notify you (in-app or by email) and update the "Last updated" date above. Your continued use after changes take effect means you accept the updated Policy.
11. Contact us
True Success For All Durango, Colorado, USA Privacy: erik@truesuccessforall.com