Privacy notice

Last updated: 7 October 2026

Who is responsible

LifeImprovement.ai is a Nightingale product operated by Stephen OConnor, Camino de las Cerezas 3, Canada del Fenollar, Alicante, Spain, 03699. Contact: hello@nightingales.ai. The operator is responsible for deciding how your personal information is used.

What we process and why

We use account information, including your email address, account identifier and sign-in information, to authenticate you and keep your Improvements associated with your account. If you use Google sign-in, Google and our authentication provider exchange the basic identity information needed to sign you in. We do not request access to your Gmail, Drive or contacts.

We store the messages you submit, your Improvement goals, approved outcomes, progress, generated outputs and account preferences so that you can use the service and return to saved work. Relevant conversation and Improvement content is sent to OpenAI to generate responses and outputs. Please avoid including passwords, payment details, sensitive personal information or confidential information about others in chat.

If you choose voice input, your browser requests microphone permission. When you finish a recording for transcription, audio is sent through our server to OpenAI. The application does not save an audio file to its database or filesystem; processing providers may retain data under their own applicable policies. Transcribed text becomes part of saved conversation history when you send it as a message.

We process technical information necessary to deliver and protect the service, such as network requests and limited operational logs. Support and deletion requests are processed to respond to you. If paid billing is enabled and you subscribe, Stripe processes your payment information; our account record stores billing identifiers and subscription entitlement information rather than full card details.

Where GDPR applies, providing the requested service relies on performance of our agreement with you; proportionate security and abuse prevention rely on legitimate interests; records required by law rely on legal obligations. Optional microphone use is your choice and can be stopped through your browser. Browser permission is not a blanket consent to unrelated processing.

Providers and transfers

Our current providers include Supabase for authentication and saved data, DigitalOcean for hosting, OpenAI for AI processing and transcription, Google when you choose Google sign-in, and Stripe for paid billing when enabled. Information necessary for each function is processed by the relevant provider. We may disclose information when legally required or necessary to protect the service and its users.

These providers operate internationally, so processing may take place outside Spain or the European Economic Area. Contact us for information about the destinations and applicable transfer safeguards. We do not represent that all processing is EU-only. Provider privacy information is available at supabase.com/privacy, digitalocean.com/legal/privacy-policy, openai.com/policies/privacy-policy, policies.google.com/privacy and stripe.com/privacy.

Cookies

We use essential cookies to maintain secure sign-in, complete authentication and remember your selected Improvement. The current app sets an access-token cookie for approximately one hour, an authentication-flow cookie for one hour, and refresh/selected-Improvement cookies for up to 30 days. These can be renewed during use. Blocking these cookies can prevent sign-in or saved-session features. Optional Meta advertising measurement is described below and loads only after you accept.

Retention and deletion

Saved Improvements remain available while you keep your account, including completed and archived Improvements. Archiving is not deletion. Subscription lapse does not itself erase your history. You can export your Improvements from Your account and request account deletion there or contact us. Deletion requests are reviewed and processed; pressing the request button does not immediately erase data.

The prototype does not currently apply an automatic expiry to account or Improvement records. They remain stored until deletion is processed. We assess requests and any limited exceptions required by law, dispute resolution or security. Provider backups and operational records may outlast deletion from the active application; their retention depends on the provider and record type. Contact us for details applicable to your request. We do not promise immediate removal from every backup.

Your rights

Depending on applicable law, you may request access, correction, deletion, restriction or portability of your information, object to processing based on legitimate interests, and withdraw any consent where processing relies on consent. Contact us to exercise these rights; we may need to verify your identity. You may complain to your local data-protection authority. Where GDPR applies, we normally respond within one month, subject to its permitted extensions. AI outputs do not make legally binding eligibility decisions about you.

Optional advertising measurement

If you accept advertising cookies, we use Meta Pixel and the Conversions API (dataset 1581066644028555) to measure public page visits, completed signups and first paid subscriptions. Meta receives the event time, our public website address, IP address, browser information and advertising identifiers. A subscription event also includes the amount paid and currency. We do not send email addresses, improvement topics, messages, card details or other private conversation content. We disable automatic event detection and advanced matching. The browser Pixel stops when the private workspace opens; our server sends only the named conversion events.

This measurement is optional and based on your consent. Choose Cookies on the landing page or in Account to accept or decline. Consent expires after 90 days. Declining removes this site's Meta cookies and stops future conversion delivery for the associated account; it does not remove information already received by Meta. Technical attribution identifiers are retained for up to 90 days, while a minimal conversion ledger prevents duplicate counting for the life of the account. Unsent events expire after six days. We exclude demo and known internal accounts from conversion events. Meta processes received information under its Privacy Policy.

Changes

We will date updates to this notice and make material changes clear. Contact us with privacy questions using the details above.