Privacy

Visible controls. Narrow collection.

TimeToLive separates local extension data from optional cloud persistence and does not inspect the content of pages you visit.

Data the control plane stores

Account identity, consent history, versioned questionnaire answers, preferences, symbolic activity events, daily summaries, feedback, and deletion workflow records. Phase 1 does not calculate a life estimate or synchronize extension data.

Data we intentionally avoid

Disease history, medications, exact weight, browsing content, page URLs, raw authentication tokens, camera data, and claims that a behaviour added or removed lifespan.

Retention defaults

• Operational logs: 30 days.
• Raw symbolic activity events: 12 months.
• Daily summaries: until account deletion.
• Questionnaires and illustrations: until replaced or deleted.
• Incomplete anonymous onboarding data: 30 days.
• Verified deletion requests: targeted for completion within 30 days.

Your controls

Signed-in users can export cloud data directly and permanently delete their cloud records and identity without contacting support.