LifeKnot Privacy Policy
Makoto Tashiro (an individual; to be transferred to Senseis, a company planned to be established in January 2027) ("we") handles information in LifeKnot (the iPhone and Apple Watch apps and the related server, the "Service") as described in this policy.
1. How the Service works
The Service turns conversations you record on Apple Watch or iPhone into text, creates summaries and a daily journal entry with a cover illustration, and lets you read back and ask questions about your records.
- Recorded audio is never sent anywhere except from your Apple Watch to your iPhone. It is not sent to AI services or to us, and it is not included in iPhone or Apple Watch backups (iCloud backups or backups to a computer). Transcription runs on your iPhone using Apple's on-device speech recognition (SpeechAnalyzer). Audio is deleted automatically 24 hours after transcription is complete (even if no summary has been made yet; summaries are made from the remaining text).
- Records such as transcripts, summaries and journal entries are included in iPhone backups (see the table in 2.1). If you do not want them in your iCloud backup, go to iPhone Settings › [your name] › iCloud › iCloud Backup, then open "Backup details" for that iPhone and turn off LifeKnot (menu names can differ by iOS version).
- Text is sent to AI services only if you consent. To create summaries, journal entries, cover illustrations and answers, transcript text and related material are sent through our relay server to an AI service. We ask for consent on first use and in Settings, after showing where data goes and what is sent. If you don't consent, recording and transcription still work (summaries, journal entries, illustrations and answers are not created).
- You can withdraw consent at any time in Settings. Withdrawing stops new sending (to AI, weather and address lookups) from then on. Requests already sent may finish, and their results may be saved on your iPhone. Withdrawing does not delete results temporarily kept on the server (they are deleted when their period ends; to delete them right away, delete your account). If the destinations or contents change, we will ask for your consent again.
- Our server handles the contents only while sending them to the AI service and does not keep the contents of your conversations or journal in its records. Results kept for resending are encrypted with your device's key, and that key is not kept on the server (2.4).
2. Information we handle
2.1 Information on your devices (we do not receive it, except what is sent to AI in 2.2)
| Information | What it is | Where it is kept |
|---|---|---|
| Apple Watch recorded audio | Audio recorded on Apple Watch | Deleted from Apple Watch after confirming your iPhone has received it (kept on Apple Watch until it arrives). Not included in Apple Watch backups |
| iPhone recorded audio | Audio moved from Apple Watch and audio recorded on iPhone | Kept on your iPhone and deleted 24 hours after transcription is complete, even if no summary has been made yet (conversations without your own voice, which are not transcribed, are also deleted after 24 hours). Not included in iPhone backups (iCloud or computer) |
| Transcripts, summaries, tasks, journal entries, cover illustrations, reflections | Transcription results and what is made from them | Your iPhone. Included in iPhone backups (iCloud or computer). Section 1 explains how to exclude them from iCloud backup. Deleting a conversation removes it from your iPhone, but it stays in backups already made until you delete those backups |
| What you enter | Speaker names, notes, reflection answers, how-you-feel notes, vocabulary, ratings (thumbs up/down and comments), question history | Your iPhone (same as above) |
| Voice enrollment and voice profile | The audio you read aloud when enrolling and the voice features computed from it (comparable to a voiceprint). Used only to recognize your own remarks in conversations (to transcribe only conversations that include your voice, and to mark your own remarks) | Only on your iPhone. Kept until you delete the enrollment (you can delete it in Settings › My Voice; it is also deleted when you delete your account). Not included in iPhone backups. Never sent to AI services or to us, and we cannot read it |
| No-record places | Places you register and whether you are inside them | Only on your iPhone. Never sent out |
| Conversation places | Places you visit and when, and your location when audio arrives (deleted after 30 days); the place and address added to each conversation; places you name (when "Conversation places" is on) | Only on your iPhone. Not included in iPhone backups. Your actual location (coordinates, address) is never sent to AI. Only to look up an address is the location passed to Apple's map search (handled under Apple's privacy policy) |
| Health steps, sleep and exercise | Shown on the journal screen for that day (read only; never written) | Displayed only, not stored. Never sent to AI or to us |
| Photos | Photos taken that day, picked on your iPhone and shown in the journal | Never leave your iPhone |
| Calendar events | Events in the same time range, shown on the conversation screen for reference (only if you allow it) | Never leave your iPhone |
| Reminders | Only tasks you choose are added to Reminders | On your iPhone (Reminders sync follows your Apple settings) |
| Art for days without photos | Made on your iPhone with Apple's Image Playground, or a pattern drawn by the app | Made on your iPhone (nothing is sent to an outside service to make it). The art is kept on your iPhone and included in iPhone backups (including iCloud backup) |
2.2 Information sent to AI services (only with your consent)
| Purpose | Sent to | What is sent |
|---|---|---|
| Conversation summaries | OpenAI | Transcript text, times, speaker names you set, markers for remarks recognized as your own voice, and your output language setting |
| Journal entry (text and title) | OpenAI | That day's summary items; each conversation's time, length (minutes), title, category, ★ marks and the names of places you named; some remarks from conversations without a summary; markers for your own remarks and for things you wrote; your notes, how-you-feel notes, reflection answers and transcripts of voice reflections; your output language setting (weather is not sent) |
| Journal cover illustration | OpenAI (a text model and an image model) | The sentences in that day's journal entry written from conversations, and the season derived from the month. The text model rewrites them as a single scene (instructed not to depict addresses, numbers or names) and the image model draws it. Sentences written from your notes, how-you-feel notes or reflections, photos, Health data, weather and location are not sent |
| Answers to questions | OpenAI | Your question and the related remarks, summaries, conversation titles and dates/times picked on your iPhone, and your output language setting |
- These are sent through our relay server (running on Cloudflare). We do not send your name, email address or any identifier for you to the AI service.
- For identity checks, usage limits and resending, the relay server also receives your sign-in token, processing IDs, the day, and the key used to encrypt results (these are not sent to AI, and the key is not kept).
- Remarks from speakers you excluded as background voices, and conversations set to "Don't send to AI", are not sent.
- Never sent: recorded audio, your voice enrollment and voice profile, your actual location (coordinates, address), Health data, photos, calendar events, weather.
- The only AI service we send to is OpenAI. Our relay server is built to send subscribers' requests only to OpenAI, and changing our settings alone does not change the destination to another AI service. If we use another AI service, we will first update this policy and the app's consent screen and ask for your consent again. We will not send anything to a new destination until you consent again.
2.3 Information passed to Apple
| Purpose | What is passed |
|---|---|
| Sign in with Apple | We receive the user identifier issued by Apple (we do not request your email address or name) |
| Subscription (in-app purchase) | Apple processes payment. We receive the subscription's transaction IDs, status and expiration from Apple. We never receive your credit card or other payment details |
| Journal weather (when "Conversation places" is on and you consented to sending to AI) | The approximate location (rounded to about 1 km) where you spent the most time that day (or, if none, the last place measured that day), and the date, are passed to Apple Weather (WeatherKit) to get the weather and temperature. Weather is only displayed on screen; it is not sent to AI and not kept in your journal. The rounded location is kept on your iPhone to show that day's weather and is deleted together with "Clear place history" |
| Address lookup (when "Conversation places" is on and you consented to sending to AI) | Only when converting a conversation place to an address, the location (latitude and longitude) is passed directly from your iPhone to Apple's map search |
2.4 What remains on our servers
Our servers do not keep the contents of your conversations, journal or questions. We keep only the following.
| Information | Purpose | Retention |
|---|---|---|
| Your Sign in with Apple user identifier | Identifying you; linking subscription and usage records | Until you delete your account. After deletion, only the "deletion control record" below |
| Sign-in token (session) | Keeping you signed in | Expires 30 days after issue |
| Subscription record (transaction IDs, status and expiration; whether each transaction has been activated) | Verifying and fulfilling the subscription; handling refunds | While the subscription is active and for 30 days after it ends. Kept under a pseudonymous number (derived from your sign-in identifier) with no name or email address. Kept for this period even if you delete your account (so the subscription continues if you return with the same Apple ID) |
| Usage counts and amounts (daily counts of journal entries, illustrations and questions; daily cost of summaries) | Enforcing limits and preventing overuse | Counts about 3 days; summary cost 30 days. Kept under the same pseudonymous number and not deleted with your account (to prevent resetting limits by deleting and returning) |
| Processing reservations and settlements (operation IDs, estimated cost) | Settling costs | 48 hours, or until settled |
| Overall cost totals | Managing the monthly cost cap for the whole server | Kept without identifying anyone. The list of numbers allowed to use processing in a month is deleted at the end of the following month |
| Processing results (summaries, journal entries, cover illustrations) | Avoiding repeated processing when the connection drops | Encrypted with your device's key, which is not kept on the server. Summaries and journal entries are deleted after 7 days (8 at most), cover illustrations after 24 hours (48 at most), and all immediately when you delete your account. Answers to questions are not kept |
| Deletion control record (sign-in identifier, deletion time, generation number) | Rejecting sign-in tokens issued before deletion | 90 days after deletion (not deleted until revocation of Sign in with Apple has completed) |
| Error types | Investigating problems | The relay does not use Cloudflare's log storage, so these are not kept (they are visible only while the operator is watching live). Conversation and journal contents are never logged (when a subscription notification is not processed, its transaction ID may be logged) |
3. Why we use information
- To create transcripts, summaries, suggested tasks, journal entries and cover illustrations, and answers to your questions
- To identify you and to verify, fulfill and process refunds for your subscription
- To enforce usage limits and prevent overuse and abuse
- To investigate problems and operate the Service safely
We never use the contents of your conversations or journal for advertising or to train AI. The Service shows no ads and does not track you across other companies' apps or websites.
4. Sharing with outside services
We send data to the AI service in 2.2 (OpenAI) and to the platform for our relay server (Cloudflare) so that they can carry out the Service's processing. We treat this as entrusting them with the handling of personal information. We have signed a data processing agreement (DPA) with OpenAI, and Cloudflare's data processing addendum applies to our use of Cloudflare. Even though this is entrustment, we follow the rules on providing data to providers outside Japan (4.1).
- Under OpenAI's API policy, data you send is not used to train AI (as published by OpenAI as of November 2026).
- Not being used for training is different from not being retained. Text models are called with storage turned off (
store: false); the image model has no equivalent setting. For both, under OpenAI's policy, the data you send may be included in records kept for abuse monitoring and retained for up to 30 days (as published by OpenAI as of November 2026). - Our relay server is built not to keep what it sends or the results it receives in Cloudflare's records (logs). It does not use the log storage feature and does not put contents into error logs.
- Except as required by law, we do not share data beyond 2.2 and 2.3.
4.1 Providers outside Japan
| Provider | Role | Country |
|---|---|---|
| OpenAI | Summaries, journal entries, cover illustrations, answers | United States (we do not restrict the processing region) |
| Cloudflare | Relay server | United States (processing happens at Cloudflare locations worldwide, including Japan) |
| Apple | Sign-in, payment, weather, map search | United States |
On the app's consent screen, we show where data goes, what is sent and the destination country (the United States), make the information in this section 4.1 available to read, and then ask for your consent to sending data to providers outside Japan (Article 28 of Japan's Act on the Protection of Personal Information). If you do not consent, nothing is sent to AI services.
Name of the foreign country: United States of America (US).
The US system for protecting personal information (based on the Personal Information Protection Commission's survey on personal information protection systems in foreign countries):
- The US has no federal law, like Japan's Act on the Protection of Personal Information, that governs how businesses in general handle personal information.
- The Federal Trade Commission Act (FTC Act) regulates unfair or deceptive practices by businesses (such as handling data against a published privacy policy), and the Federal Trade Commission enforces it.
- There are federal laws for specific sectors (such as COPPA for children's online information and HIPAA for medical information) and state laws (such as the California Consumer Privacy Act, CCPA/CPRA).
- Compared with Japan's Act on the Protection of Personal Information, the rights of individuals (such as requests for disclosure, correction or suspension of use) and the scope of businesses' obligations differ by state and sector.
Measures taken by the providers (as published by each company as of November 2026):
- OpenAI: does not use data received through the API to train AI; deletes records kept for abuse monitoring within 30 days at most (except where retention is required by law); encrypts data in transit and at rest; has third-party audits (SOC 2 Type 2).
- Cloudflare: encrypts data in transit; has third-party audits and certifications (such as SOC 2 Type II and ISO/IEC 27001). Our relay runs with settings that do not keep the contents of conversations or journals in Cloudflare's records.
- Apple: handles data under Apple's privacy policy.
Measures we take: We limit what is sent to what each feature needs (2.2). We do not send your name, email address or any identifier for you to AI services. We encrypt results with your device's key and keep them only for a short period (2.4). When a provider's policy changes, we check it and, if needed, update this policy and the consent.
5. Recording and people around you
- Recording and sending the text of recorded conversations to AI services are two different things.
- About recording: When you record, follow the laws of the country or region where you are and the rules of the place. In Japan, we recommend telling the people present that you are recording and getting their agreement before you record. In places such as California in the US, where recording a confidential conversation requires the consent of everyone in it, telling people is not enough; you need everyone's consent.
- About sending to AI: Conversations may include other people's remarks and information about them, such as their names, health or work. Your consent on the consent screen is not consent from the other people in the conversation. Do not send a conversation to AI if the other people have not agreed to it being sent. Ways not to send: on the conversation screen, turn on "Don't send to AI" (that conversation is not used in summaries, journal entries or answers, and is not sent; the transcript stays on your iPhone); exclude a speaker as a background voice (that person's remarks are not used in summaries, journal entries or answers, and are not sent); delete the conversation; or withdraw your consent to sending to AI in Settings.
- The Service never automatically identifies people from voices or content (speaker names are only the ones you set). It does not store other people's voice features. Your own voice enrollment never leaves your device.
6. Your choices
- Stop sending to AI: You can stop at any time in Settings.
- Delete a conversation: Deleting a conversation removes its audio, transcript, summary, suggested tasks, question history that relied on it, and its items in the journal.
- Delete your voice enrollment: Settings › My Voice.
- Delete question history: One at a time or all at once on the Ask screen.
- Export: Settings › Export records lets you export a period or all records as Markdown, PDF and JSON. You can export even after your subscription ends.
- Share with AI: From "Share with AI" on a conversation, a journal page or the Journal screen, you can send the records you choose straight to an AI app you choose (such as ChatGPT or Claude) using the iPhone share sheet. Nothing goes through our servers. What you share is handled under that service's terms and privacy policy. The full transcript is included only if you choose it, and speakers you excluded as background voices and conversations set to "Don't send to AI" are left out.
- Report a problem: From Settings › Support › "Report a problem", you can send a report to us with your own mail app. Besides what you write, and only if you choose to attach it, it includes the app version, iOS version, device model, free storage, region and time zone settings, Apple Watch connection, sign-in, consent and subscription status, and recent activity codes (times and short reason codes). It never includes conversation audio, text, journal entries, names or places. You can check what will be attached before sending.
- Delete your account: Settings › Delete Account. You sign in with Apple again to confirm. We delete the information in 2.4 (except what 2.4 says is kept after deletion), revoke Sign in with Apple, and delete all LifeKnot records on that iPhone, including recordings not yet sent from Apple Watch. Older records in iCloud backups are removed when you delete those backups. Deleting your account does not cancel your App Store subscription. Cancel first in iPhone Settings › [your name] › Subscriptions.
- Requests for disclosure and other rights: Contact support@lifeknot.app. We will respond without undue delay after confirming your identity. Because our servers hold no conversation contents, what can be disclosed is the records in 2.4.
7. Security
- Keys for AI services are kept only on our server, never in the app.
- Communication between your device and our server is encrypted.
- Files on your device are protected. Audio on iPhone cannot be read until the device has been unlocked once after starting (so recordings can keep arriving). Voice enrollment recordings cannot be newly opened while the device is locked. Your voice features, like audio, can be read once the device has been unlocked after starting (so your own voice can be recognized while locked).
- Processing results are encrypted with your device's key before being stored briefly on our server; the key is not kept on the server.
8. Children
- The Service is for people aged 18 or older. People under 18 may not use it.
- The Service is not intended for children, and we do not aim to collect children's information.
- If we learn that someone under 18 is using the Service, we will stop that person's account and delete the information on our servers (2.4). Parents and guardians can contact support@lifeknot.app.
9. For residents of specific regions
- The Service is currently offered only in Japan.
- Before offering the Service in the US, we will put in place what state laws on voice features (comparable to voiceprints) require, such as Illinois's Biometric Information Privacy Act (BIPA): notice, written consent, and a retention and destruction policy. We will also address consent to recording and each state's privacy laws, and describe these in this section before we start.
- Before offering the Service in the EU or UK, we will add a section that meets the GDPR and similar laws.
10. Changes
We will announce changes to this policy in the app or on our website. If the destinations or contents of what is sent to AI change, we will ask for your consent again in the app.
11. Contact
- Operator: Makoto Tashiro (an individual)
- Address: YANMAR TOKYO 12F, 2-1-1 Yaesu, Chuo-ku, Tokyo 104-0028, Japan
- Contact: support@lifeknot.app
- Support page: https://lifeknot.app/en/support/