LifeDash Mobile — Privacy

Effective 2026-11-01. Last verified against the app's code: 2026-11-01. This page adds detail to the Responsive Design LLC Privacy Policy.

In short: LifeDash Mobile has no account, no analytics, no ads and no LifeDash server. Your entries stay on your phone. The cards you turn on fetch data directly from public providers (weather, news, prices…), which receive the details those cards need — for example your chosen location for the weather.

What is stored, and where

Settings and tracker logs live in app-private storage (Capacitor Preferences / Android SharedPreferences); android:allowBackup=false keeps them out of Google backups. API keys are encrypted with the Android Keystore (web/PWA build: plain localStorage). Exports are written to the app cache and handed to the share sheet only when you export. Pill-reminder notifications are local and marked private on the lock screen.

What you may enter

  • location (typed place, or one coarse device fix when you tap "Use this device's location")
  • health trackers (pills, weight, sleep, water, caffeine, habits)
  • finance (bills, mortgage, holdings, RSUs)
  • inventor name (Patents)
  • package tracking numbers
  • API keys for optional providers

Who the app talks to

Only the data sources of the cards you turn on — never a Responsive Design server:

  • Open-Meteo geocoding (geocoding-api.open-meteo.com) — when you search a place — requested directly from your phone: the city / ZIP text you typed
  • Open-Meteo forecast (api.open-meteo.com) — Weather / Sun & Moon cards — requested directly from your phone: latitude/longitude of your chosen place (LifeDash desktop: rounded to 2 decimals ≈ 1 km before sending, and stored at that precision; Mobile: rounded to 4 decimals ≈ 11 m from a coarse device fix)
  • Google News RSS (news.google.com) — News / Sports cards (News is on by default) — requested directly from your phone: region edition, your news topics, team names
  • CoinGecko (api.coingecko.com) — Crypto card (on by default) — requested directly from your phone: coin ids + currency (your holdings stay local); optional key
  • Finnhub (finnhub.io) / Yahoo Finance (query1.finance.yahoo.com, Mobile only) — Stocks card (off by default) — requested directly from your phone: ticker symbols; your Finnhub key
  • USPTO (api.uspto.gov) — Patents card (off by default, needs your key) — requested directly from your phone: inventor first/last name and company you enter; your key
  • TheSportsDB (thesportsdb.com), ESPN RSS — Sports card (off by default) — requested directly from your phone: team search text / team ids; team badge images are loaded directly by the app
  • wheretheiss.at, Launch Library (ll.thespacedevs.com) — ISS / Launches cards — requested directly from your phone: nothing about you
  • any URL you add (RSS feeds, Quick Links, Connect-anything widgets) — only what you configure — requested directly from your phone: an ordinary request to that address (Connect-anything may include {lat}/{lon}/{zip}/{city} if you put them in the URL)

Each source sees an ordinary request (including the IP address of the device or server making it) and handles it under its own privacy policy.

Android permissions

  • INTERNET
  • ACCESS_COARSE_LOCATION — only used when you tap "Use this device's location" (approximate, never in the background)
  • ACCESS_NETWORK_STATE
  • POST_NOTIFICATIONS — local reminders you set up (e.g. pill reminders)
  • SCHEDULE_EXACT_ALARM — local reminders you set up (e.g. pill reminders)
  • RECEIVE_BOOT_COMPLETED — local reminders you set up (e.g. pill reminders)
  • WAKE_LOCK — local reminders you set up (e.g. pill reminders)

Analytics, ads, purchases, accounts

None.

Children

This app is not directed at children under 13, and we do not knowingly collect personal information from children.

Your choices