Lasmay privacy, in plain words
Version 1, draft.
Who runs Lasmay
Lasmay is made by Kai, a private person in Los Angeles, USA. Kai decides what happens to your data and is responsible for it. Contact: lasmay.app@proton.me.
What Lasmay keeps
Your email address (to sign you in), your passkeys (only the public half, never your fingerprint or face), the names of your signed-in devices, check-ins and ratings, what you did, to-dos and routines (your own steps too), focus sessions, trackers, life wheel ratings, goals and their steps, pets (profile, weight, vet and vaccine dates), your special interest, purchases, budget, bank and card lines you import (date, amount, description), bills and screen time, your Overton window marks, calendar titles and times you send from an iPhone Shortcut, reminder times (never medicine names), import keys (only as a scrambled code), notes and your journal (what you write or bring in from Obsidian; notes about people are locked on your phone with a passphrase, so the server keeps only scrambled text), and feedback you send. Text you type can include other people's names.
Health data needs your yes
Check-ins and ratings (mood, energy, body, clarity) are health data under Swiss and EU law. Lasmay keeps them only after you explicitly agree. Symptoms, libido, body check, Something happened, health trackers, meals and Apple Health values have their own switch, Off by default. Photos and voice memos have their own switch too. Cycle and medication stay on your phone, always.
Why
Only to run the app for you: suggestions, insights, reminders and sign-in, and a study only if you say yes to that study. Suggestions are advice, never decisions about you.
Research, only with your yes
Sometimes a study may ask to use Lasmay data. It shows in Settings → Privacy → Research, one study at a time, and nothing goes unless you say yes. What can go: check-in numbers, what you did and how you rated it, with times, under a random id made just for that study. Never your name, email, anything you typed, photos, memos, money or meals. You can stop any time, and nothing more goes after that.
Never
Sold, shown to anyone else (apart from a study you said yes to), used for ads, or used to train anyone's AI. No analytics, tracking or ad code in the app.
Where
On a rented server in Switzerland run by Infomaniak. Your data is encrypted on its way to the server and on the server's disk. Nightly backups are encrypted before they leave the server and are stored in Switzerland.
Who else handles it
Only these, and only for what's listed:
| Service | What it gets | When |
|---|---|---|
| Infomaniak, Switzerland | Everything above, encrypted on disk; it runs the server, backups and sign-in email | Always, under a data processing agreement |
| Apple, Google or Mozilla push service | An encrypted reminder it can't read | Only if you turn on reminders |
| USDA and Open Food Facts | Just the food words you typed, or the barcode you scanned | Only when you tap Look up food |
| Anthropic (makes Claude), USA | That one receipt or food label photo, to read it; Anthropic does not train on it, and Lasmay does not keep the photo | Only when you tap Scan a receipt or Scan a label |
Your name or email never goes with the last two.
Who can see it
Only you, in the app. Kai runs the server: he doesn't look at your answers, but as the admin he technically could. Kai sees who has an account, when they last signed in, and which features are on, never what's inside.
How long
Until you delete it. In Settings → Privacy you can export everything or stop and delete it from the server at any time. Backup copies are gone within 30 days after that.
Your rights
See your data, take a copy (one zip, open formats), fix it, delete it, and switch any part off at any time; switching off deletes what it covered. You can also let a server of your own fetch that copy, for example every night (Settings → Privacy → A copy on your own server). It gets only your data, only while your key is on, and once it's there it is yours, outside Lasmay. You can complain to the Swiss FDPIC (edoeb.admin.ch) or the data protection authority where you live.
Cookies
One sign-in cookie, so you stay signed in. Nothing else.
Age and medical
Lasmay is for adults (18+). It isn't a medical device and doesn't diagnose or treat anything. In a crisis, call your local emergency number.
If this changes
A new version shows in the app and asks you to agree again before anything new is kept. Old versions stay listed on this page.
Questions
lasmay.app@proton.me. We answer within 30 days, usually much sooner.