Privacy Policy

OnTheCouchStudio ("OnTheCouchStudio," "we," "us," or "our") operates OnTheCouchStudio.com and publishes products and services, including LifeFused. This Privacy Policy explains what information we collect, how we use and disclose it, and the choices available to you when you use our website, LifeFused, or another OnTheCouchStudio product that links to this Policy.

1. Scope

This Policy applies to the OnTheCouchStudio website and to current OnTheCouchStudio products that link to it. Features and providers vary by product. References to LifeFused describe LifeFused specifically; they do not mean that every OnTheCouchStudio product uses the same features or services.

2. Information We Collect

Depending on the product and features you choose to use, we may collect or process:

• Account and contact information: email address, authentication status, account identifier, email-verification and password-recovery status, and information you submit through website contact, support, feedback, or privacy-request forms.
• LifeFused content: profile information, preferences, settings, notes, plans, tasks, calendar entries, reminders, journal or reflection content, household and inventory information, travel information, and other content you choose to enter, import, scan, or back up.
• Health and wellness information: information you choose to record in LifeFused health and wellness tools, such as activity, sleep, breathing, cycle, medication, insurance, or other personal tracking information.
• Financial and planning information: information you choose to enter into budgeting, goal, tax-document, subscription, or other planning tools. LifeFused is not a bank and does not need your full payment-card number to provide these organizational tools.
• Photos, camera input, and scan data: images you select or capture for supported features, including Universal Scan, receipts, kitchen or inventory review, and insurance-card processing, together with extracted results you review or save.
• AI and provider-feature input: prompts, selected context, text to translate or speak, coarse location and search criteria for local recommendations, and other information needed to perform a provider-backed feature you request.
• Purchase and entitlement information: store, product identifier, transaction or purchase token, subscription or entitlement status, transaction-verification result, AI Credit balance and usage, and refund, revocation, or acknowledgment status.
• Technical, analytics, diagnostic, and security information: app version, platform, device or installation signals, pseudonymous account identifier, feature interactions, performance information, crash reports, safe error categories, request counts, integrity signals, and network information such as IP address that service providers ordinarily receive when handling a request.
• Calendar and notification information: selected calendar events when you connect or import calendar data, notification preferences, reminder schedules, and delivery state.

3. How We Use Information

We use information to:

• create and secure accounts, authenticate users, verify email addresses, and recover access;
• provide, synchronize, and improve requested product features;
• store user-selected content and maintain encrypted LifeFused cloud backups;
• process optional AI, scanning, translation, voice, local-recommendation, calendar, and notification features;
• verify purchases, subscriptions, entitlements, and AI Credit transactions and prevent duplicate fulfillment, fraud, abuse, or unauthorized access;
• measure reliability and product use, diagnose crashes and errors, enforce rate and cost limits, and protect users and systems;
• respond to support, feedback, legal, and privacy requests; and
• comply with legal obligations and enforce applicable terms.

4. LifeFused Accounts, Storage, and Backups

LifeFused uses Firebase Authentication for account registration, sign-in, email verification, password recovery, and authenticated account deletion. Account-associated records may be stored in Google Firebase services, including Cloud Firestore and Firebase Storage.

LifeFused is designed as a local-first product, but it does not claim that all data always remains only on your device. If you use account, synchronization, cloud, provider-backed, or backup features, relevant information is transmitted to our cloud services and service providers.

Eligible LifeFused users may use encrypted cloud backup. The current implementation encrypts structured backup records and supported backup media before upload; Firebase Storage receives encrypted backup media. Cloud restore and recovery are temporarily unavailable in the current release while recovery safety is improved; existing cloud backups remain preserved. Encryption reduces risk but no security control can guarantee absolute protection. Some account, entitlement, operational, and backup-management metadata must remain readable by the service so it can authenticate users, locate backups, enforce retention, and operate the feature.

5. Camera, Photos, and Universal Scan

Camera and photo-library access is used only when you choose a feature that needs an image. For supported Universal Scan workflows—including general item recognition, receipts, kitchen or inventory reconciliation, and insurance-card extraction—LifeFused resizes and transmits the selected image and limited technical image metadata to our authenticated cloud function and the configured AI processing provider.

The current Universal Scan backend does not persist the raw scan image or the provider's detected proposal content as a permanent LifeFused image archive. It retains limited request, status, usage, review, security, and cost-control records, and you decide whether to confirm or save supported extracted results into LifeFused. Content you affirmatively save, and media you separately choose to include in an encrypted cloud backup, follow the storage and deletion practices described elsewhere in this Policy.

6. Luna AI and Provider-Backed Features

Luna AI is optional and consent-controlled. LifeFused records Luna consent in the authenticated user's server-side account data, and Luna requests are rejected by the server unless enabled consent is present. You may use non-AI parts of LifeFused without enabling Luna.

When you request a provider-backed feature, LifeFused transmits only the information the implemented feature requires, such as your prompt and selected LifeFused context for Luna, an image for Universal Scan, text and language choices for translation or speech, or coarse location and search preferences for nearby recommendations. These services may return generated text, structured results, audio, places, or events. Do not submit information unnecessary for the requested feature.

Luna and Universal Scan currently use OpenAI processing through OnTheCouchStudio's server-side integration. AI output can be incomplete or inaccurate and should be reviewed before use. LifeFused may temporarily retain request status, bounded results or proposals, provider usage, and safety or cost records needed to deliver the feature, prevent duplicate requests, reconcile credits, and secure the service.

7. Health, Wellness, and Financial Tools

LifeFused health and wellness features are personal organization and educational tools. They are not medical devices, do not provide medical diagnosis or treatment, and are not a substitute for advice from a qualified healthcare professional. Seek appropriate professional or emergency help when needed.

LifeFused finance, budgeting, tax-document, and planning features are organizational and educational tools. OnTheCouchStudio is not acting as your financial, investment, tax, or legal adviser. Review important decisions with an appropriately qualified professional.

8. Purchases, Subscriptions, and AI Credits

Purchases and subscriptions are processed by the applicable platform store—Apple App Store or Google Play—under that store's terms and privacy practices. OnTheCouchStudio does not receive or store your full payment-card details.

To provide purchased access and AI Credits, prevent duplicate fulfillment, and handle renewals, refunds, revocations, and restoration, LifeFused sends store transaction information to its server for verification and maintains purchase, entitlement, wallet, and reconciliation records associated with your account. Store records may remain subject to Apple, Google, accounting, fraud-prevention, and legal retention requirements even after an account request.

9. Analytics, Diagnostics, and Security

LifeFused uses Firebase Analytics and Firebase Crashlytics for product measurement, stability, and diagnostics, and Firebase App Check and authenticated server controls to help protect backend resources. We seek to keep private user content out of generic analytics and operational telemetry. Operational records may include pseudonymous identifiers, feature and provider names, usage quantities, safe failure categories, timestamps, and cost or security signals.

9.1 LifeFused Optional Product Analytics — Detailed Usage Reports

LifeFused offers a separate optional feature called Detailed usage reports. It is off by default and requires your explicit choice to enable it in Settings > Detailed usage reports. Optional reporting becomes enabled only after the server acknowledges consent. You can disable it in the same Settings screen and continue using LifeFused without enabling these reports.

These reports use allowlisted interaction categories, such as supported Lab opens and actions, account-invitation or registration actions, connected-workflow stages, and supported campaign or call-to-action categories, together with timestamps and random app-instance/event identifiers. The service uses pseudonymous identifiers to process and aggregate these observations. They are not a claim that all app data is anonymous or that app instances are verified individual people. The optional event payload excludes private Lab entries, notes, financial amounts, health records, precise locations, images, free-form text, and Luna prompts or conversations; sensitive Lab categories are excluded from this optional pipeline.

When you withdraw consent, new optional collection and dispatch stop immediately on that device, and pending events are removed from the active local queue. This is not a guarantee of secure physical removal of all device storage remnants. A request already in flight may still complete. Previously transmitted events require server-confirmed erasure; switching off is not itself confirmation that those events have been erased.

LifeFused attempts to save an independent pending-revocation record and contact the server even if saving the normal analytics queue fails. While offline or when the server is unavailable, a saved request remains pending for retry when the app can reach the service. Completion is not instantaneous or guaranteed while offline. If the app cannot durably save your opt-out locally and server revocation also fails, optional collection stays stopped for the current running app, but the choice may be lost after the app closes. The app reports that durability limitation and offers retry; it does not claim a successfully persisted opt-out or completed server erasure. The pending request is kept through account cleanup until erasure is acknowledged.

Optional event receipts become eligible for deletion after 45 days, and related optional subject and consent records become eligible for deletion after 90 days, under their record-specific expiry settings. These windows do not promise physical deletion on an exact date. Scheduled cleanup uses bounded processing; service failures, retries, processing capacity and backlogs affect completion. Pending-erasure consent markers are protected from ordinary expiry deletion until erasure is confirmed. Withdrawal can request erasure before the expiry windows.

The Detailed usage reports switch controls only this optional feature. It does not disable Firebase Analytics, Firebase Crashlytics, operational or security records, purchase, billing or entitlement records, or Luna AI/provider processing. Those services and records have separate purposes, controls and retention practices described in this Policy. Choosing an AI/provider-backed feature may transmit the input needed for that feature under its separate controls. Optional reporting withdrawal does not promise removal of all third-party, billing, legal or security records.

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and feature, including access controls, authenticated requests, validation, encryption in transit, encrypted backup content, integrity checks, and abuse controls. No storage or transmission system is completely secure, and we cannot guarantee absolute security.

10. Notifications and Calendar Connections

LifeFused can schedule local notifications and reminders when you grant permission and enable them. Notification content may appear on your device's lock screen depending on your operating-system settings. You can change notification permissions in LifeFused or device settings.

Calendar features may read selected calendar information or save LifeFused calendar data when you initiate those actions and grant access. Your operating-system or calendar provider may independently process calendar information under its own privacy policy. Disconnecting access does not automatically delete information you previously imported or saved in LifeFused.

11. Website, Support, and Feedback

Our website may process information you submit through contact, upload, support, newsletter, and privacy-request forms, along with ordinary server logs and security information. Newsletter subscriptions and linked third-party storefronts or services are governed by the relevant provider's practices in addition to this Policy.

LifeFused's Feedback & Bug Reports feature opens a Google Form. Google processes information submitted through that form, and the feedback type may be prefilled. You choose what additional information to submit. Do not include passwords, payment-card details, or unnecessary sensitive information in feedback or support messages.

12. How We Disclose Information

LifeFused does not sell personal information. We disclose information only as needed to operate requested features, process transactions, protect the service, comply with law, or complete a business transaction subject to appropriate safeguards. Provider use depends on the features you choose and may include:

• Google Firebase: Authentication, Cloud Firestore, Firebase Storage, Cloud Functions, Analytics, Crashlytics, and App Check.
• OpenAI: optional Luna AI and supported Universal Scan processing.
• Google Places: nearby places and local recommendations based on submitted search criteria and location.
• Google Cloud Translation: translation of text you submit.
• ElevenLabs: optional Translator Voice text-to-speech processing and generated audio delivery.
• Ticketmaster: nearby event discovery when requested.
• Apple and Google: purchases, subscriptions, transaction verification, entitlements, refunds, and fraud prevention.
• Google Forms: feedback and bug-report submissions you choose to make.
• Device, calendar, and notification providers: permissions and requested integrations controlled through your device or connected service.
• Hosting, security, and professional providers: limited processing needed to host, maintain, secure, support, or legally administer our services.

Providers may process information in the United States or other countries where they or their subprocessors operate. Data-protection laws may differ from those in your location. Where required, we use appropriate contractual or legal mechanisms for cross-border processing.

13. Other OnTheCouchStudio Products

Certain OnTheCouchStudio games may use Unity services, advertising, analytics, gameplay features, or leaderboards. If applicable, those products may process player names, gameplay and interaction data, device or advertising identifiers, diagnostics, and ad information under their product disclosures and the relevant provider's privacy terms.

This scoped game language does not describe LifeFused. LifeFused is not represented by this Policy as using Unity Ads, advertising identifiers, gameplay tracking, or leaderboards.

14. Retention

We retain information for as long as reasonably necessary to provide the service, maintain your account, fulfill the purpose for which it was collected, and meet security, fraud-prevention, billing, dispute, accounting, and legal obligations. Retention periods vary by record type. Some operational records use shorter expiration periods; encrypted backup generations and cached provider results may be rotated or deleted under feature-specific retention controls; and verified transaction, entitlement, abuse-prevention, or legal records may need to be retained longer.

Deleting content in the app or deleting an account removes covered active account data through the implemented deletion process, but deletion may not be instantaneous from encrypted backups, provider systems, fraud and billing records, or legally required archives. Third parties retain information under their own policies and legal obligations.

15. Your Choices and Privacy Rights

Depending on your location and subject to applicable exceptions, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing, and to withdraw consent where processing relies on consent. You may also:

• disable Luna AI consent and choose not to use optional provider-backed features;
• manage camera, photo, calendar, and notification permissions in device settings;
• manage analytics or store privacy choices through available app, device, Apple, or Google controls;
• edit or delete supported LifeFused content; and
• contact us to exercise an applicable privacy right.

We may need to verify your identity before fulfilling a request. You may appeal or contact the relevant privacy regulator where local law provides that right. We will not discriminate against you for exercising applicable privacy rights.

16. Account and Data Deletion

LifeFused supports account deletion from within the app. The in-app process requires authentication and is designed to remove the Firebase sign-in identity, account-owned cloud data, and account-owned LifeFused data on the device, subject to the retention exceptions described above.

If you cannot use the in-app option, or want to make another privacy request, submit the public Delete My Data request form or email onthecouchstudio@onthecouchstudio.com with the subject “Data Deletion Request.” The website form submits a request for review; it does not itself authenticate an app account or automatically delete data. We will review and process verified requests according to this Policy, generally within 30 days, unless applicable law permits or requires a different period.

17. Children's Privacy

Our website and products, including LifeFused, are not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher minimum age may apply where required by local law. If you believe a child has provided personal information without appropriate authorization, contact us so we can investigate and take appropriate action.

18. Changes to This Policy

We may update this Privacy Policy to reflect product, provider, legal, or operational changes. We will post the revised Policy on this page and update the effective date. We may provide additional notice in the app or by another appropriate method when a change is material.

19. Contact OnTheCouchStudio

For privacy questions or requests, contact:

OnTheCouchStudio
Email: onthecouchstudio@onthecouchstudio.com
Privacy request: OnTheCouchStudio Delete My Data