OwnLife App Privacy Policy
Effective date: 01 November 2026 Last updated: 01 November 2026
This privacy policy explains what personal data the OwnLife app collects, including data we receive from Google with your permission ("Google user data"), how we use it, who we share it with, how we protect it, how long we keep it, and how you can delete it.
In short: we use your data for one purpose only, to show you your own performance profile and personal routines. We never sell your data, never use it for advertising, and never use Google user data to train general AI or machine-learning models.
1. Who we are
The OwnLife app ("OwnLife" or "the app") is provided by OwnLife Analytics Ltd, a company registered in England and Wales (company number 12424334), whose registered address is 24 Westminster Road, Poole, BH13 6JN, United Kingdom. In this policy, "we", "us" and "our" mean OwnLife Analytics Ltd. "You" means the person using the app.
We are the data controller for the personal data described in this policy. This policy applies to the OwnLife mobile app (iOS and Android), and to the Google API project through which OwnLife connects to your Google account.
Privacy contact: info@ownlifeanalytics.com
2. Information we collect
We collect only what OwnLife needs to build your performance profile.
Account information: your name, email address and the login details needed to create and secure your account.
Information you enter: details of your routines and how you work, such as sleep, food and drink, movement and other habits you log, and your own ratings of focus, energy and performance.
Insights we generate for you: your performance profile, such as your productive and peak-performance hours, and the patterns between your routines and your performance, calculated from the information above and from any Google user data you choose to connect.
Technical information: device type, operating system version, app version and crash reports, used only to keep the app working.
Google user data: only if you choose to connect your Google account (see section 3).
We do not collect your precise location, contacts, photos, files or microphone data.
3. Google user data we access
Connecting OwnLife to your Google account is optional and the app works without it. We access Google user data only after you grant permission on Google's consent screen, and only for the data types you approve. You can approve some data types and not others.
If you grant permission, OwnLife will access the following Google user data through the Google Health API:
Sleep data (read only): sleep sessions, including start and end times, duration and sleep stages. Scope: https://www.googleapis.com/auth/googlehealth.sleep.readonly
Activity data (read only): steps, exercise sessions, active minutes and movement. Scope: https://www.googleapis.com/auth/googlehealth.activity_and_fitness.readonly
Heart rate data (read only): heart rate readings. Scope: https://www.googleapis.com/auth/googlehealth.health_metrics_and_measurements.readonly
We request read-only access. OwnLife does not write, change or delete any data in your Google account. We do not request access to any other Google data, such as Gmail, Google Drive, Contacts or Calendar.
4. How we use your information, including Google user data
We use your information only to provide and improve the user-facing features of OwnLife. Specifically, we use it to:
create and secure your account and run the app;
show you the times of day you tend to perform at your best;
show you how your sleep, activity, heart rate, food and other routines relate to your focus, energy and performance;
give you personalised insights and suggestions based only on your own data;
show your progress over time; and
fix faults and keep the app secure, using technical information.
Google user data (sleep, activity and heart rate) is used only to calculate and display your own performance profile and the insights described above. It is processed for you alone.
What we never do with your data
We do not use your information, including Google user data, for any purpose other than providing and improving OwnLife's user-facing features. In particular, we never:
sell it, or give it to data brokers or information resellers;
use it for advertising, including targeted, personalised, retargeted or interest-based advertising;
use it to determine credit-worthiness or for lending purposes;
use it to build databases or profiles for any purpose unrelated to your use of OwnLife; or
use it to develop, improve or train generalised or non-personalised artificial intelligence (AI) or machine-learning (ML) models, and we do not transfer it to anyone else for that purpose.
We do not make automated decisions about you that have legal or similarly significant effects.
Legal bases (UK GDPR and EU GDPR)
We process account, routine and technical data to provide the service you asked for (contract) and, for technical data, for our legitimate interest in keeping the app working and secure. We process health-related data, including Google sleep, activity and heart rate data, only with your explicit consent, which you can withdraw at any time.
5. How we share, transfer or disclose information
We do not sell, rent or trade your personal data, and we do not share it, including Google user data, with any third party for their own purposes. Your data, including your Google user data, is disclosed only in the following limited situations:
Service providers who host and run OwnLife for us. These providers process data only on our instructions, under a written data processing agreement, and may not use it for their own purposes:
Amazon Web Services EMEA SARL (AWS): cloud hosting, database storage and processing, including Google user data. Data is held in London, United Kingdom (AWS eu-west-2).
Legal requirements. Where we are required to by law, such as by a valid court order, we disclose only what is legally required and, where permitted, tell you first.
Business transfer. If OwnLife Analytics Ltd is merged, acquired or sells its assets, your data may transfer to the new owner, who must continue to protect it under this policy. We will tell you in advance, and you can delete your account before the transfer. Google user data will be transferred only with your consent.
At your request. If you choose to export your data, we provide it to you.
We do not transfer or disclose your information, including Google user data, to third parties for any purpose other than those listed above.
6. Limited Use disclosure for Google user data
OwnLife's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
In line with those requirements, for the Google user data we receive:
we use it only to provide or improve user-facing features that are visible and prominent in OwnLife's interface;
we transfer it to others only as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with your consent;
we do not use or transfer it for serving advertisements, including retargeting, personalised or interest-based advertising;
we do not sell it, or use or transfer it to determine credit-worthiness or for lending purposes;
we do not use or transfer it to develop, improve or train generalised or non-personalised AI or ML models; and
no person at OwnLife reads it unless you have given affirmative consent to view specific data, it is necessary for security purposes (such as investigating abuse), it is necessary to comply with applicable law, or the data has been aggregated and anonymised and is used only for OwnLife's internal operations as permitted by the policy above.
7. How we store and protect your data
Your data, including Google user data, is stored on AWS servers in London, United Kingdom. We protect it with the following measures:
Encryption in transit: all data sent between the app, our servers and Google is encrypted using TLS 1.2 or higher.
Encryption at rest: stored data, including Google user data and backups, is encrypted using AES-256.
Protection of Google access tokens: OAuth access and refresh tokens are encrypted and stored server-side, are never shown in the app, and are deleted when you disconnect Google or delete your account.
Access controls: access to production systems is limited to authorised staff who need it to run the service, protected by multi-factor authentication, and logged.
Ongoing security: we apply security updates, monitor our systems and carry out regular security reviews.
Incident response: if a personal data breach affects you, we will notify you and the relevant regulator where the law requires.
No system is completely secure, but we work continuously to protect your data.
8. How long we keep your data and how to delete it
We keep each type of data for the following periods:
Account information: while your account is open. Deleted within 30 days of account deletion.
Information you enter and insights: while your account is open, so you can see your history. Deleted within 30 days of account deletion.
Google user data (sleep, activity, heart rate): while your Google account is connected and your OwnLife account is open. Deleted within 30 days of you disconnecting Google or deleting your account.
Google OAuth tokens: deleted immediately when you disconnect Google or delete your account.
When a retention period ends, we permanently delete the data. We keep specific records for longer only where the law requires it, and only for as long as it requires.
How to delete your data
Disconnect Google: in OwnLife, go to Settings > Connected services > Google > Disconnect. We stop collecting Google user data immediately and delete the Google user data we hold within 30 days.
Revoke access through Google: go to your Google Account at https://myaccount.google.com/permissions, select OwnLife and remove access. This has the same effect as disconnecting in the app.
Delete your account: in OwnLife, go to Settings > Account > Delete account. All of your personal data, including Google user data, is deleted within 30 days.
By email: send a deletion request to info@ownlifeanalytics.com from the email address on your account. We will confirm when deletion is complete.
9. Your choices and rights
You are in control of your data. Depending on where you live, you can:
choose which Google data types to connect, and connect or disconnect them at any time;
access and export the personal data we hold about you, in a portable format;
correct information that is wrong;
delete your data or your whole account;
withdraw consent at any time, without affecting processing that happened before you withdrew it; and
object to or restrict our processing.
To use any of these rights, email info@ownlifeanalytics.com. We aim to reply within one month. If you are in the UK or EU and are not satisfied with our response, you can complain to your data protection authority, such as the Information Commissioner's Office (https://ico.org.uk) in the UK.
10. Children
OwnLife is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us data, contact us and we will delete it.
11. Changes to this policy
We may update this policy from time to time, and the "Last updated" date at the top will always show the date of the latest version. If we change how we access, use, share or keep Google user data, or make another significant change, we will notify you in the app or by email before the change takes effect and, where required, ask for your consent again.
12. Not medical advice
OwnLife is not a medical device. It does not diagnose, treat or prevent any condition, and its insights are for personal understanding only. Speak to a qualified healthcare professional about any health concern.
13. Contact us
OwnLife Analytics Ltd, 24 Westminster Road, Poole, BH13 6JN, United Kingdom
Email: info@ownlifeanalytics.com
Telephone: 0207 459 4807
Website: https://ownlifeanalytics.com
