Privacy

Visible controls. Narrow collection.

TimeToLive separates local extension data from optional cloud persistence and does not inspect the content of pages you visit.

Data the control plane stores

Account identity, consent history, versioned questionnaire answers, preferences, symbolic activity events, daily summaries, feedback, and deletion workflow records. Your Life Horizon is an illustration drawn from public population tables for your birth year and country, never a prediction about you. Extension data stays on your device unless you sign in and ask for it to be synchronized.

Data we intentionally avoid

Disease history, medications, exact weight, browsing content, page URLs, raw authentication tokens, camera data, and claims that a behaviour added or removed lifespan.

Retention defaults

• Operational logs: 30 days.
• Raw symbolic activity events: 12 months.
• Daily summaries: until account deletion.
• Questionnaires and illustrations: until replaced or deleted.
• Incomplete anonymous onboarding data: 30 days.
• Verified deletion requests: targeted for completion within 30 days.

Your controls

Signed-in users can export cloud data directly and permanently delete their cloud records and identity without contacting support.