LifeGrid Privacy Policy
Last updated: September 12, 2026 • Applicable to: LifeGrid for Android (com.tidalwavedev.lifegrid) and LifeGrid for Windows
Summary of Key Principles
- Local-First Storage: Your productivity data (tasks, notes, mood journals, budget records, attachments) is stored locally on your device in an isolated SQLite database. We do not operate external developer servers to collect, view, or sell your content.
- Zero Sale of Personal Data: We do not sell, rent, or trade your personal information to third parties under any circumstances.
- Optional Third-Party Integrations: Features like Google Drive cloud backup and Microsoft To Do import are strictly user-initiated and interact directly with Google and Microsoft APIs.
- Full Data Ownership: You can permanently delete all on-device data at any time via the in-app "Clear All Data" setting or by uninstalling the application.
1. Introduction
This Privacy Policy explains how Tidal Wave Dev ("we", "us", or "our") handles personal
information and data when you install and use LifeGrid (the "App"), available as a mobile
application for Android (Package ID: com.tidalwavedev.lifegrid) and as a native desktop
application for Windows. Except where a section below calls out a platform difference, this policy applies
equally to both.
We believe that personal productivity, habit tracking, and financial budgeting require the highest degree of confidentiality. LifeGrid is built on a local-first architectural model: your records live on your hardware under your control. By using LifeGrid, you acknowledge and agree to the practices outlined in this Privacy Policy. If you do not agree with this policy, please do not use the App.
2. Data Handled Locally (User Content & Local Storage)
LifeGrid provides a comprehensive suite of personal productivity features, including:
- Tasks & Subtasks: Task titles, descriptions, due dates, priority levels, checklist items, and tags.
- Recurring Task Pools: Repeating schedules, cadence intervals, and completion counters.
- Notes & Attachments: Freeform notes, scratchpads, and referenced file or image paths.
- Mood Journals: Daily mood ratings, journal reflections, timestamped log entries, and emotional check-ins.
- Budget & Financial Tracking: Expense categories, income and transaction logs, budget caps, and savings goals.
Storage Architecture: All of the items listed above are saved strictly within your device's private application sandbox in a local SQLite database.
No Developer Server Collection: Tidal Wave Dev does not maintain, host, or operate external servers that ingest, synchronize, process, or monitor your tasks, notes, journal entries, or budget records. Your productivity content never passes through our systems.
3. Third-Party Services, Advertising, and Payments
To support the development and maintenance of LifeGrid, provide optional authentication, and offer user-requested synchronization tools, the App incorporates selected third-party SDKs and Application Programming Interfaces (APIs). These providers process data according to their respective privacy standards:
3.1 Google Mobile Ads (AdMob) — Android only
The free tier of LifeGrid for Android displays banner and interstitial advertisements provided by Google AdMob. LifeGrid for Windows carries no advertising SDK and shows no ads.
- Information Processed: Google AdMob may collect and process device identifiers (including the Google Advertising ID / AAID), IP address (used for approximate regional geolocation), network connection type, device make and model, operating system version, and ad interaction telemetry.
- Purpose: Serving relevant advertisements, capping ad display frequency, detecting and combating invalid traffic or fraud, and reporting aggregated ad performance.
- User Controls & Opt-Out: You can reset or delete your Google Advertising ID or opt out of personalized ad targeting at any time on your Android device by visiting: Settings > Google > Ads.
- Privacy Reference: Learn how Google handles advertising data by reviewing the Google Advertising Policies and the AdMob Privacy & Data Policy.
3.2 Google Play Billing (In-App Purchases) — Android only
LifeGrid for Android offers an optional one-time In-App Purchase ("Remove Ads") that permanently eliminates all banner and interstitial advertisements. There is no equivalent purchase on Windows, since the Windows app has no ads to remove.
- Financial Data Handling: All payment transactions are executed exclusively through the Google Play Store billing infrastructure.
- No Financial Data Stored by Developer: Tidal Wave Dev never receives, processes, or stores your credit card numbers, debit cards, bank account details, or billing addresses.
- Entitlement Verification: Google Play communicates an obfuscated purchase token and entitlement status receipt to verify that the "Remove Ads" feature has been unlocked for your account.
- Privacy Reference: Governed by the Google Privacy Policy.
3.3 Signing in with Google
On Android, the App uses Firebase Authentication and Android Credential Manager solely to provide a secure sign-in experience and maintain session tokens for optional cloud integrations.
- Information Processed: When you choose to sign in with Google, Firebase processes your unique user identifier (UID), email address, and authentication tokens.
- Purpose: Verifying identity and granting authorized access to user-directed cloud backups.
- Privacy Reference: Review the Firebase Privacy & Security Documentation.
On Windows, sign-in does not go through Firebase at all. The App uses the Windows operating system's native OAuth support to open your default browser directly to Google's own sign-in page; LifeGrid never sees your Google password. The resulting access and refresh tokens are stored using Windows Credential Manager, the operating system's built-in secure credential store, rather than in the App's own database file.
3.4 Google Drive API (Optional Cloud Backup & Restore)
LifeGrid offers an optional, user-initiated cloud backup feature allowing you to save a copy of your data directly to your personal Google Drive account. This works the same way on both platforms, using an identical backup file format so a backup taken on one device restores cleanly on the other.
- Direct Transmission: Backup data flows directly between your device (Android or Windows) and Google Drive servers via HTTPS/TLS. Tidal Wave Dev operates no intermediary proxy or cloud storage server.
- Access Scope: LifeGrid requests access restricted specifically to its own application data folder (the Drive API's
drive.appdatascope). We cannot inspect, access, or modify any other files or folders in your Google Drive. - Google API Limited Use Disclosure: LifeGrid's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
3.5 Microsoft Authentication Library (MSAL) & Microsoft Graph API
LifeGrid provides an optional integration allowing users to import their task lists and items from Microsoft To Do into the local LifeGrid task repository.
- User-Initiated: Connection requires your explicit sign-in and consent via the Microsoft identity platform.
- Scope & Handling: LifeGrid requests read-only permission (such as
Tasks.Read) strictly to fetch your task lists upon your command. Once imported, the tasks reside in your local on-device database. - No External Storage: OAuth access tokens are kept within protected local Android Keystore storage and are never transmitted to Tidal Wave Dev servers.
- Privacy Reference: Review the Microsoft Privacy Statement.
4. Android Device Permissions
To execute its core and optional functions, LifeGrid may request specific Android runtime and install permissions. You maintain full control over these permissions through your device's application settings:
INTERNET&ACCESS_NETWORK_STATE: Required to verify network availability, fetch advertisements in the free version, validate Google Play Billing purchases, and perform user-initiated Google Drive and Microsoft To Do sync.POST_NOTIFICATIONS(Android 13+): Used strictly to dispatch local reminder notifications, task alarms, and habit nudges that you have configured. LifeGrid does not send unsolicited promotional push notifications.BILLING: Enables communication with Google Play services for the in-app purchase to Remove Ads.- Storage Access Framework / SAF: Utilized when you manually export or import database backup files to or from your device's local file manager.
5. Data Retention, User Control, and Data Deletion
We provide you with clear, autonomous tools to manage and permanently delete your data at any time:
- In-App "Clear All Data" Feature: Navigate to Settings > Storage & Backup within LifeGrid and select "Clear All Data". This action permanently and irreversibly wipes the SQLite database, cached assets, task records, journal logs, and preferences from your device.
- Application Uninstallation: Uninstalling LifeGrid via the Android launcher or App Settings automatically deletes the application sandbox directory, including all local databases and cached files.
- Managing Cloud Backups: If you utilized the optional Google Drive backup, you can view or delete your backup files at any time through the Google Drive app or web interface.
- Revoking Connected Accounts:
You can disconnect connected accounts directly inside LifeGrid settings by signing out, or by managing authorized third-party apps in your account portals:
- Google Account Permissions: myaccount.google.com/permissions
- Microsoft Account Consents: account.live.com/consent/Manage
- Data Deletion Requests: Because all user content is stored locally on your device, we do not have access to delete files on your behalf. However, if you have questions regarding any diagnostic or auxiliary data, please email us at revsphere.mail@gmail.com.
6. Google Play Data Safety Disclosure
In accordance with Google Play Developer Policy and Data Safety requirements, the table below provides a quick reference for how data is handled by LifeGrid:
| Data Category | Data Type | Collection Status | Shared with Third Parties? | Purpose & Details |
|---|---|---|---|---|
| Personal Info | Name & Email Address | Optional (User-provided) | No | Only processed by Firebase Authentication if you choose to sign in for cloud features. Not stored on developer servers. |
| Financial Info | Purchase History | Optional (Google Play) | No (Google Play only) | Handled entirely by Google Play Billing for "Remove Ads" entitlement. Developer never sees credit cards or banking info. |
| App Content | Tasks, Notes, Mood Journals, Budget Records | Local Only | No | Stored 100% locally in on-device SQLite database. Optional user-initiated backup directly to user's Google Drive. |
| Device & Other IDs | Advertising ID (AAID), Device Telemetry | Collected (Free tier only) | Yes (Google AdMob) | Used by Google AdMob for ad serving, fraud prevention, and analytics. Disabled upon purchasing "Remove Ads". |
| Security Practices | Data Encryption & Deletion | Implemented | N/A | All network transmissions use HTTPS/TLS 1.3. Users can wipe all data locally at any time via "Clear All Data". |
7. European Privacy Rights (GDPR & UK GDPR)
If you reside in the European Economic Area (EEA) or the United Kingdom (UK), you possess statutory rights under the General Data Protection Regulation (Regulation (EU) 2016/679) and UK GDPR regarding any personal data processed:
- Legal Bases for Processing:
- Contractual Necessity (Art. 6(1)(b)): To provide core app functionality and fulfill in-app purchases.
- Consent (Art. 6(1)(a)): For optional Google Drive backups, Microsoft To Do imports, and personalized advertising where applicable.
- Legitimate Interests (Art. 6(1)(f)): For fraud prevention, app security, and troubleshooting technical issues.
- Your Statutory Rights: You have the right to access (Art. 15), rectify (Art. 16), erase (Art. 17), restrict processing of (Art. 18), obtain a portable copy of (Art. 20), and object to the processing of (Art. 21) your personal data.
- Supervisory Authority: You maintain the right to lodge a complaint with your local Data Protection Authority if you believe our data processing violates applicable regulations.
To exercise any GDPR rights, please contact our privacy representative at revsphere.mail@gmail.com.
8. California Consumer Privacy Rights (CCPA / CPRA)
Under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), California residents are entitled to specific disclosures:
- Categories Collected: In the preceding 12 months, we have not collected personal data directly on our servers. Third-party advertising partners (Google AdMob) may collect unique device identifiers (Advertising ID, IP address) in the free version.
- No Sale or Sharing of Personal Data: We do not sell your personal information, nor do we share your personal information with third parties for cross-context behavioral advertising.
- Consumer Rights: You have the right to know what personal information is collected, request deletion of personal information, opt out of third-party ad tracking, and not receive discriminatory treatment for exercising your privacy rights.
9. Children's Online Privacy Protection Act (COPPA)
LifeGrid is designed for and directed to a general audience aged 13 years and older. The App is not intended for children under 13, and we do not knowingly collect, solicit, or maintain personal identifiable information from children under the age of 13.
If you are a parent or legal guardian and discover that your child under 13 has provided personal data or created an account, please contact us immediately at revsphere.mail@gmail.com. We will promptly take all necessary measures to purge such data from any accessible records.
10. Data Security Measures
We prioritize the protection of your personal and productivity information:
- Device Sandboxing: Android isolates app files within private, sandboxed directories accessible only by LifeGrid.
- Encrypted Connections: All API communication (Google Play Billing, Firebase Authentication, Google Drive API, Microsoft Graph) is conducted strictly over encrypted HTTPS connections using industry-standard TLS 1.3/1.2 protocols.
- No Developer Intermediary: By eliminating custom intermediary servers, we remove centralized server attack surfaces and data breach vulnerabilities.
11. International Data Transfers
Because LifeGrid utilizes cloud services operated by Google LLC and Microsoft Corporation, any information processed by those services (such as authentication tokens or cloud backups) may be processed on servers located outside of your country of residence, including the United States. These providers maintain rigorous international transfer mechanisms, including Standard Contractual Clauses (SCCs) and adherence to recognized data privacy frameworks.
12. Changes to This Privacy Policy
We may periodically revise this Privacy Policy to reflect app updates, new features, or evolving regulatory requirements. When changes are published, we will revise the "Last updated" date at the top of this document. For material revisions, we may provide prominent in-app notices or release notes accompanying Google Play Store updates. We encourage you to review this policy periodically.
13. Contact Us
If you have any questions, suggestions, or concerns regarding this Privacy Policy, or if you wish to exercise your data protection rights, please reach out to us:
com.tidalwavedev.lifegrid