Our Life is built so that your medical records are readable only by you. This policy explains what we collect, the large amount we deliberately cannot see, and the rights you have over your information. Plain-language summaries open each section; the detail follows.
This Privacy Policy describes how Our Life ("Our Life," "we," "us") handles information when you use the Our Life iOS application and related services (the "Service"). It should be read together with our Terms of Service and Medical Disclaimer.
By using the Service, you agree to this policy. If you do not agree, please do not use the Service.
Our Life provides the Service and acts as the data controller for the limited account information we can access. Because of the Service's end-to-end encrypted design, we are technically unable to access the contents of your health records, and for that encrypted content we function only as a custodian of unreadable data.
For privacy questions or to exercise your rights, contact privacy@itsourlife.ai.
When you import records from Apple Health, scan documents, or upload files, that content is encrypted on your device before it is stored or synced. We receive and store it only as ciphertext.
We do not require, and the app is not designed to collect, advertising identifiers or location tracking for marketing.
This is the core of how Our Life works. Your encryption key is generated on your iPhone and stored in the iOS Keychain; it never leaves your device and we never receive a copy. As a result, we cannot read:
We can see that an encrypted record exists and when it synced — never what it contains. For more technical detail, see our Security page.
We rely on the following legal bases under the GDPR: performance of our contract with you, our legitimate interests in securing and improving the Service, your consent where required, and compliance with legal obligations.
When you use the "Ask" feature or request an explanation, only the minimal record snippets needed to answer your request are decrypted on your device and sent over an encrypted connection to our third-party AI provider, Anthropic (the Claude model), to generate a single response. The snippets are used only to compose that answer and are not retained by the provider and not used to train models. The app requests your explicit permission before any snippet is sent to the AI. These features are designed to explain and summarize your records — they do not diagnose, and they are not used to build an advertising profile of you. Your records themselves remain stored zero-knowledge (encrypted blobs the server cannot read); the AI only ever sees these transient, on-device-selected snippets.
We use a minimal set of vetted providers, for example cloud hosting and storage (which hold only encrypted data), authentication via Apple and Google, and Anthropic (the Claude model) as the third-party AI provider for the the Ask features. Providers are bound by contract to use data only to provide their services to us. A current list is available on request via privacy@itsourlife.ai.
We retain your account information and encrypted content for as long as your account is active. When you delete your account, your data — including the encrypted blobs — is permanently removed; because we never held your key, there is nothing readable to retain. Backups and logs are cycled out on a rolling basis. We may retain limited records where required for legal or security purposes.
Depending on where you live, you may have rights under the GDPR, the CCPA/CPRA, or similar laws, including the right to access, correct, delete, port, restrict, or object to processing of your personal information, and the right not to be discriminated against for exercising them.
We do not sell or "share" personal information as those terms are defined under the CCPA/CPRA, so there is no opt-out to perform. You may use an authorized agent where the law permits.
The Service is intended for adults. An adult may manage a child's or dependent's records as a caregiver; in that case the adult is responsible for the information they add and for having the authority to do so. We do not knowingly let children create their own accounts. If you believe a child has created an account, contact us and we will address it.
We may process information in countries other than where you live. Where we transfer personal information internationally, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses. Your encrypted content remains unreadable to us wherever it is stored.
We may update this policy from time to time. If we make material changes — particularly any change to our encryption model — we will notify you in the app or by email and update the "Last updated" date above.
Questions about this policy or your information? Email privacy@itsourlife.ai. For security matters, see our responsible disclosure contact.