Your attention and your data belong to you.

You can use HourLife.com without creating an account. We do not build advertising profiles, sell visitor data, or use personal identity tracking on the site.

We use Google Analytics for aggregate traffic and performance measurement, and nothing else. We do not turn on Google Signals, advertising features, or anything that would let this data follow you to another site.

Whether we ask you first depends on where you are. In the EEA, the UK and Switzerland we ask before anything loads: until you say yes, no analytics script is requested and nothing is sent to Google. Everywhere else it runs unless you turn it off, and you can turn it off at any time with Cookie settings, linked in the footer of every page. We also honour Global Privacy Control: if your browser sends that signal, analytics stays off without you having to tell us twice.

Either way, a no takes effect immediately and completely. Declining is not a preference we record and then work around — where we ask first it means the request to Google is never made at all, and where you switch it off later it stops on the spot, before the next page loads.

Two things do not wait for that choice, because the site cannot work without them: a session cookie that remembers you are signed in, and small browser storage that remembers which insights you have voted on. Neither is used for advertising or shared with anyone.

The HourLife app is designed so your journal entries, goals, habits, and personal records stay on your devices.

If you enable sync, data is synchronized through your iCloud account. We do not receive or inspect that synced content.

Health records in the HourLife app — symptoms, medications taken as needed, sobriety, and anything read from Apple Health — never go to iCloud, even with sync on. If you pair your iPhone with HourLife on your Mac, those records go directly between the two devices over your local network, encrypted with a key the two devices agree when you pair them. They never pass through a server of ours or anyone else's. Unpair in Settings on either device to stop.

When you make or restore an in-app purchase, RevenueCat processes your purchase history and Apple receipt information on our behalf to validate the purchase, keep entitlements available, and restore access after reinstalling or changing devices. The iOS apps may send RevenueCat an opaque app-user identifier so a shared HourLife purchase can be recognized across participating mini apps. RevenueCat does not receive your journal, season, claim, or reckoning content, and we do not use purchase data for advertising or tracking.

Tend is a separate app for looking after your health, and this section is its whole policy. Tend has no account and no server of ours. Nothing you write in it is sent to us, and we cannot see any of it: not your records, not your readings, not a single word. There is no tracking and no advertising. The one other company involved is RevenueCat, which keeps the record of Tend Complete purchases for us — what it receives is set out below.

Everything you enter is stored on your iPhone. Tend has no account or server, does not sync, and copies nothing to iCloud or anywhere else on its own. Your iPhone's own backup — iCloud Backup, or a backup to a computer — may include Tend's data along with everything else on the phone. That copy is made by your iPhone under your Apple account, on Apple's terms; it is not something we make, hold, or can see. If you would rather Tend were not in a backup, that is set in your iPhone's own settings, not in Tend.

If you turn Apple Health on, Tend reads what Apple Health keeps that the Numbers page has a place for: your heart (blood pressure, heart rate and its variability, resting and walking heart rate, cardio fitness), your body (weight, waist, height, body fat, temperature), blood sugar and blood oxygen, breathing, activity and workouts (steps, distance, flights, exercise minutes, energy, speed and power), how you walk, sleep and mindful minutes, sound levels, what you've logged about food and drink, and a few more such as insulin delivered and falls — the latest of each, or as far back as you choose. Apple's permission sheet lists every one, and you can allow some and leave the rest. Once it's on, new readings come in by themselves while Tend is open. HbA1c and LDL cholesterol are never read; you type those yourself. A habit can also check itself against your steps, even if you haven't turned the rest on: then Tend reads your step count from Apple Health while Tend is open — so a target already met is already marked. Nothing is read while Tend is closed. Tend never writes anything back into Apple Health and never sends what it reads anywhere; the readings leave the phone only inside an export you make and send yourself. On the You page you can bring in your date of birth, sex, blood type, height and whether you use a wheelchair from Apple Health, so you don't retype them; once brought in they are part of what you've written about yourself, kept on this iPhone like the rest of it. You can turn it off at any time in Settings, or take Tend's permission away in the Health app.

Any reminder you set is scheduled by your iPhone and delivered by your iPhone; nothing about it leaves the device, and no reminder is ever sent by us. If you set a reminder to ring like an alarm, that alarm is set on this iPhone and rings on this iPhone. If you ask Tend to put a visit on your calendar, the visit's title and place — and nothing else: not your notes, not your questions — are written into the calendar you pick. That calendar belongs to whichever account it lives in, and it syncs or is shared on that account's terms, not ours; take the entry off in Tend and Tend removes it again. If you bring a visit in from your calendar, Tend reads the entries on this iPhone's calendars for the year ahead — each one's title, time, place, and which calendar it is in — so you can tick the ones that are yours. Only the ones you tick are kept, and a visit brought in that way may look at its entry again to keep its time in step. What Tend reads there is never sent anywhere, and Tend never changes or removes an entry it did not write. Speech is turned into words on this iPhone, and while iOS may download Apple's speech model for your language the first time, neither the recording nor the words leave the phone.

Tend's widgets, on the Home Screen and the Lock Screen, show what you have put in Tend — the day's habits, a visit, a note — to whoever is looking at the phone. If you turn on Tend's lock, every widget says only that Tend is locked, and none of your words, until you open it. A reminder's own words still show when it goes off, as above.

The spreadsheet, the archive, and the handoff sheet are made on this iPhone and go wherever you choose to share them. Apart from the purchase check below, that is the only time Tend sends anything anywhere: because you asked it to, and to a place you chose.

Sending a purpose to another app makes a fourth kind of file, and a deliberately small one: a version number, a made-up code for that project, the title you confirmed, and the day if you set one. Nothing else goes — no symptoms, no medicines, no notes, no records, no readings, and nothing about how any of it is going. Tend shows you every line of it before it is written, the title is yours to change or cut down first, and the file goes wherever you send it. Nothing happens on a schedule and nothing is sent in the background; each time is you, on that purpose's page. Stopping means Tend sends nothing more — it cannot reach a copy you have already sent.

Tend Complete is bought through Apple, and Apple takes the payment; we never see your card, your name, or your Apple Account. To know whether Tend Complete is yours, Tend asks RevenueCat, a company that keeps the record of in-app purchases for us. Each time Tend opens, it sends RevenueCat a random code made up on this iPhone, the code Apple gives Tend for this phone, the phone's model, the versions of iOS and of Tend, your language and App Store country, and — as any connection does — the network address it comes from. When you buy or restore, RevenueCat also receives Apple's receipt, and from it keeps a record of what was bought and when.

RevenueCat never receives anything you write in Tend, anything from Apple Health, or your name or email. We use the purchase record to let you in, to bring a purchase back on a new phone, and to count how many people buy. It is not used for advertising, not joined to anything else about you, and not sold. RevenueCat's own policy is at revenuecat.com/privacy.

If something goes wrong, Tend notes an error in your iPhone's own log, as apps do: what failed, never what you wrote. Those logs stay on the phone unless you choose to send them to Apple.

Delete everything in Tend, in Settings → Your data, deletes all of it from this device, with nothing kept back and no undo; deleting the app does the same. Neither can reach a file you exported and sent somewhere — that copy is wherever you put it, and yours to delete there.

Tend is meant for adults looking after their own health. It is not directed at children, and it collects nothing from anyone beyond the purchase check described above. The same words are in the app, under Settings → About → Privacy. If any of this changes, the new version will be here and in the app before the change takes effect. Questions about any of it: [email protected].

When you use Seasons at HourLife.com, the seasons, claims, estimates, and reckonings you write are stored in our database so they are available after you sign in. Private Seasons pages are excluded from analytics and search indexing, and sensitive fields are filtered from application logs and error reports.

You can export a complete copy from Seasons Settings or delete all Seasons data without deleting your HourLife account.

The full-screen tools at HourLife.com, such as the Weekly Review Board and the Time Audit, always save your work in your browser. If you are signed in, they also save a copy to your account so it opens on your other devices. The server stores that copy as the tool wrote it and does not read or analyse it. The tools save nothing to your account while you are signed out. You can delete one tool's copy, or all of them, in Settings, and each browser then clears its copy the next time you open that tool there.

If you explicitly enable closing reminders, Resend processes your email address and the generic message needed to deliver them. We do not put season names, claims, end phrases, or reckoning notes in those emails. Delivery events are retained for reliability; only complaints and permanent bounces suppress future mail.

Our hosting platform may retain standard request logs (IP, timestamp, path, browser) for security and debugging purposes with limited retention.

When this policy changes meaningfully, we update the revision date and describe the change in plain prose.