1. When this policy applies
This policy applies to Lainey's website, desktop workspace, installed web app, Content Studio, Projects, Life, Brain, connected services, support, and related member services. Lainey is intended for adults. It is not an account service for children.
A service you choose to connect, such as Google, Microsoft, ChatGPT, Claude, or a social platform, also handles information under its own terms and privacy policy.
2. Information we collect and hold
Depending on the features you use, this can include:
- Account and membership information: name, email address, account ID, membership status, authentication, and session information.
- Business and Brain information: business details, offers, ideal clients, positioning, messaging, customer journeys, goals, projects, launches, clients, tasks, team details, working patterns, and recurring work.
- Voice and content information: writing and spoken samples, brand voice guidance, opinions, pillars, ideas, captions, scripts, slides, designs, templates, uploaded media, approvals, schedules, and publishing state.
- Conversations and source material: messages, voice notes and transcripts, documents, screenshots, PDFs, images, links, and information extracted from them.
- Life and family information: household member names and roles, birthdays, school or care details, activities, schedules, food preferences, allergies, routines, home tasks, meals, shopping, journals, wellbeing check-ins, feelings, and other information you choose to add.
- Birth and chart information: birth date, birth time, whether the time is known, birth city, permission timestamps, and generated Human Design or astrology data.
- Connected-service information: encrypted access and refresh tokens, granted permissions, connected account names and IDs, calendar events, selected Drive files, social content, publishing records, analytics, and messages made available through a connection you approve.
- Restricted Gmail pilot information: sender details, subject, message preview, the body of a message you deliberately open, and a reply draft you ask Lainey to create.
- Payment and support information: plan and transaction references, support messages, bug reports, screenshots, and feedback. Full card details are handled by the checkout and payment providers rather than Lainey.
- Technical, usage, and audit information: device and browser information, IP address in normal infrastructure logs, feature and action names, provider and model, timing, token or audio counts, success, failure, retries, affected record IDs, and security events.
Some optional information may be sensitive, including wellbeing information, allergies, private family information, information about children, opinions in source content, and birth details. You do not need to add this information to use Lainey's core business features.
3. How we collect information
- Directly from you when you type, speak, upload, approve, publish, or contact us.
- From a service you connect, within the permissions shown to you.
- From ChatGPT or Claude when you instruct that connected client to use Lainey.
- About another person when you choose to add a client, lead, team member, or family member.
- Automatically through authentication, security, usage, cost, and reliability systems.
4. Why we use information
- Provide, secure, and support your account.
- Build and maintain the context you choose to keep in your Brain.
- Create the plans, drafts, designs, summaries, interpretations, and suggestions you request.
- Connect Weekly Wins, Content Studio, Projects, Life, and the dashboard.
- Transcribe voice notes and return them only to the field that owns the recording.
- Extract reviewable information from documents, screenshots, images, and room photos.
- Read or manage calendar events, create Gmail drafts, and schedule or publish approved content at your direction.
- Provide the optional ChatGPT and Claude connection within the scopes you approve.
- Monitor reliability, security, abuse, cost, and conflicting or duplicate changes.
- Meet legal, accounting, dispute, and security obligations.
We do not sell personal information or use it for third-party targeted advertising.
5. How Lainey uses AI
Lainey's primary native AI provider is OpenAI. If an eligible provider or credential failure occurs and fallback is configured, the same request may be processed by Anthropic so the feature can recover. OpenAI also processes voice audio for transcription. ElevenLabs processes text when you ask Lainey to read it aloud.
For an AI task, Lainey sends only the request and stored context reasonably needed for that task. This may include your prompt, relevant Brain context, a document or image, screenshot, room photo, voice audio or transcript, and an account reference used for safety and metering.
We do not use your content to train a general-purpose Lainey model. We do not use Google user data to train general-purpose AI or machine-learning models. AI output can be inaccurate or unsuitable, so review it before you publish, send, apply, or rely on it.
6. Voice notes and spoken playback
Long voice notes may be stored temporarily in private media storage while transcription runs. Successful audio is deleted after transcription. If a transcription fails, the audio remains private so you can retry or discard the same recording. The recovery job expires after 48 hours. Failed audio is also removed when you explicitly discard it or delete your account.
A transcript becomes part of a chat, Brain field, content piece, project, or Life record only when you use or send it there. When spoken playback is used, the text is sent to ElevenLabs. Audio marked for reuse can be cached for up to 90 days.
7. Share to Lainey, room photos, and other people
You can deliberately share selected text, a link, screenshot, image, or PDF from Android, the web, or an installed iPhone Shortcut. You can also upload room photos in Life. The material is processed to create a structured proposal for you to review. Lainey clears its raw copy after extraction and keeps the proposal, source label, time, and changes you approve.
Only share information you own or are allowed to use. Avoid faces, addresses, access codes, financial information, private documents, or other details the task does not need.
If you add information about a child, client, lead, team member, or family member, you must have a lawful reason and any permission needed to provide it. Information about a child remains controlled by the adult member's account. If you believe information was added without authority, contact us so we can investigate it.
8. Human Design and astrology
If you request a chart, birth date, birth time, and a cleaned version of the birth city are sent to Total Human Design. Relationship calculations send the birth details for both selected people. Lainey records permission before storing another person's birth details for this purpose and stores the returned chart in the relevant Life record.
If a birth time is unknown, Lainey can use a documented noon fallback and marks the result as limited. These features are for personal reflection and planning, not medical, psychological, financial, employment, or other professional advice.
9. Connected services
Connections are optional. The consent screen shows the requested permission. Connected-account access and refresh tokens are encrypted at rest and used only for the connected feature.
The standard Google connection requests basic identity and permission to manage events on calendars you own. Google Picker separately requests access only to the file you deliberately select. Its temporary Picker token is not intentionally stored, although extracted text may be saved when you add it to a workflow.
For an approved restricted cohort, Lainey can also request Gmail read-only and compose permissions. This lets Lainey show recent inbox details, fetch a full message only when you open it, and create a reply draft when you ask. Lainey does not request Gmail send permission. It cannot send the draft, and raw Gmail message bodies are not intentionally persisted in Lainey's product data store.
Lainey's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the user-facing features you request. It is not used for advertising, credit decisions, or general-purpose model training, and is not made available for human reading except with your affirmative agreement, for security or abuse investigation, or where required by law.
Microsoft
The Microsoft connection requests basic identity, offline access so the connection can continue securely, and permission to read and manage calendar events. Lainey does not currently request access to Outlook Mail.
Social accounts
Social publishing, analytics, and inbox features may be provided through Zernio and the social platform you connect. When you approve a publish, schedule, reply, or automation action, the relevant content, media, account, and timing are sent to those services. Published content and sent messages can remain on the destination service after they are deleted from Lainey.
ChatGPT and Claude
Eligible members may connect ChatGPT or Claude using narrow Brain, project, and Content Studio permissions. The external client receives the information needed for the tool you ask it to use. It can create or update specific records within the approved scopes, but it cannot directly publish, use a general delete tool, silently overwrite the Brain, or start paid Lainey AI generation.
Brain changes from the connection are review proposals and imported content stays unapproved. Tool activity creates a limited audit record without the bearer token, prompt body, Brain text, or output body. The connected AI provider's own terms and privacy settings also apply.
10. Who receives information
We disclose information only as reasonably needed to provide the service, follow your direction, maintain security, or comply with law. Depending on the feature, recipients can include:
- Clerk for authentication, sessions, and connection consent.
- Vercel and configured database and storage providers for hosting, logs, product records, and media.
- OpenAI for primary AI and transcription, and Anthropic for configured AI fallback.
- ElevenLabs for spoken playback and Total Human Design for requested chart calculations.
- Zernio and connected social platforms for publishing, inbox, and analytics features.
- Google and Microsoft for the services you connect.
- AWS and Remotion infrastructure for supported media rendering, and GIPHY for animated-media search.
- ThriveCart and payment providers for checkout and billing.
- ChatGPT or Claude when you connect and instruct that client to use Lainey.
- Professional advisers, insurers, regulators, courts, or authorities where reasonably necessary or required by law.
11. Overseas processing
Some providers process or store information outside Australia, including in the United States and other countries where their subprocessors operate. Privacy protections and government access rules can differ. We take reasonable steps for the information and service involved when selecting providers and limiting access.
12. How long we keep information
Brain, chats, content, projects, launches, clients, and Life records are generally kept while your account is active or until you delete the record through an available control. Shorter current limits include:
- OAuth connection state: about 10 minutes and single use.
- Voice transcription recovery job: up to 48 hours.
- Connected-app credential record: a rolling 90-day expiry unless refreshed or disconnected.
- Detailed AI usage records: up to 45 days.
- AI usage aggregates: up to 400 days.
- ChatGPT and Claude connector audit records: up to 180 days and the latest 1,000 events per member.
- Reusable spoken-audio cache: up to 90 days.
Payment, security, provider, backup, dispute, and legal records can follow a different period where reasonably needed or required by law. See the Data Deletion page for what account deletion does and what can remain with an external provider.
13. Security
Lainey uses controls designed for the nature of the service, including authenticated account scoping, encrypted connected-account tokens, private storage for temporary voice and selected media, least-privilege permissions, rate limits, version checks, audit trails, and confirmation before important external actions. No online service can promise absolute security.
14. Your choices and privacy rights
You can review and edit much of your information inside Lainey, disconnect services from Connections, revoke the iPhone Shortcut from Life, export your Brain, and use the in-product account deletion control.
You can request access to, correction of, or deletion of personal information by emailing hey@lainey.io. We may verify that the request belongs to you. Where applicable, we will handle the request in accordance with the Australian Privacy Principles.
15. Privacy questions and complaints
Email hey@lainey.io with enough detail for us to understand your concern. We will acknowledge it, investigate it, and aim to respond within 30 days. If the Australian Privacy Act applies and you are not satisfied, you may be able to complain to the Office of the Australian Information Commissioner.
16. Data incidents and automated recommendations
We assess and respond to suspected data incidents and provide notifications when a law that applies to Lainey requires them. Lainey uses AI and rules to suggest next actions, create drafts, and connect progress. These outputs support the member's own decisions. They are not intended to make a solely automated decision that significantly affects another person's legal rights or interests.
17. Changes and contact
We may update this policy when features, providers, or legal obligations change. We will update the date above and give reasonable notice of a material change where appropriate. We will not use information for a materially different purpose without taking the steps required by law.
Privacy contact: hey@lainey.io
Postal address: PO Box 486, Eltham VIC 3095, Australia.