Privacy Policy

What Live Zero Path stores on this origin. Not a country-specific filing. Terms cover the account contract.

What we do not take

We do not accept or persist PAN, CVV, or bank-login passwords. Checkout is hosted Stripe or in-app purchase. We may keep last4 and processor ids after Plus, not the card number.

Account

Name, lowercase email, password hash, when you agreed to the terms. Profile fields you set (including date of birth, sex, height, weight, currency, country). Invite names and emails you save under Household. Sessions: HttpOnly refresh cookie, CSRF cookie, access token in memory (not localStorage). We may store IP, a short user-agent string, and a coarse location (city / country when the edge provides it) on the session. Not GPS.

Household data you type

Owner-scoped ledgers. Another user cannot read them. National IDs on policies stay encrypted. Fitdays import is parsed in the browser before you save logs.

Public pages

Home FIRE estimator is not saved. Contact from the landing or signed-in Support stores the message. Public contact requires an email and we store it so we can reply. Signed-in Support may attach a file (image, PDF, text, or log, up to 5 MB). Operators may read those messages and files.

Payments and sign-in

Google / Apple / Stripe (or stores) process pay or sign-in. We keep subscription and invoice metadata needed to show your plan. Admin processor secrets are encrypted.

Export and delete

Settings → Privacy & data: download the household money file (profile, accounts, cash flow, lots, funds, policies, children) after Sudo — not life vision, health logs, or invoices — or delete the account (confirm, then Sudo). Delete wipes owned rows, then the user. Audit log stays append-only. Contact rows no longer point at the user. Demo and season overlays do not write your real household.

Logs

Request id may be logged. Authorization, cookies, passwords, MFA codes, tokens, account numbers, IBAN, and card-like numbers are not meant to be kept there.

Contact

Questions: Contact on the home page. UTF-8 names and messages are accepted.