Privacy Policy

Last updated: August 5, 2026

This Privacy Policy explains how AGENCY BRAUN EOOD collects, uses, stores and protects personal data when you visit the LifeDesk website, create a LifeDesk account or use the LifeDesk web and mobile applications.

1. Controller

The controller responsible for the processing of personal data is:

AGENCY BRAUN EOOD
Bulgarian company name: АГЕНЦИЯ БРАУН ЕООД

78 Angel Dimitrov Street
8016 Burgas
Bulgaria

UIC/EIK: 206587414
VAT ID: BG206587414

Managing Director: Artur Braun

Privacy enquiries: privacy@lifedesk.me
Legal enquiries: legal@lifedesk.me
Customer support: support@lifedesk.me

In this Privacy Policy, “LifeDesk”, “we”, “us” and “our” refer to AGENCY BRAUN EOOD.

2. Scope of this Privacy Policy

This Privacy Policy applies to:

  • the LifeDesk website;
  • the LifeDesk web application;
  • the LifeDesk applications for iOS and Android;
  • LifeDesk accounts and subscriptions;
  • customer support and service communications;
  • marketing communications where you have subscribed to them;
  • connected services such as payment providers, app stores, bank connection providers and AI infrastructure providers.

3. Personal Data We Collect

The personal data we collect depends on how you use LifeDesk.

3.1 Account and Profile Data

When you register for LifeDesk, we may collect:

  • your name;
  • your email address;
  • your authentication credentials, such as a securely stored password hash;
  • your preferred language;
  • your country or region;
  • your time zone;
  • your subscription plan;
  • your account settings and preferences;
  • your profile information.

3.2 Content You Add to LifeDesk

LifeDesk allows you to enter and manage information relating to different areas of your private and professional life. This may include:

  • tasks, goals and calendar entries;
  • notes and uploaded files;
  • project and client information;
  • business activities and marketing plans;
  • information about assets and property;
  • hobbies, learning activities and interests;
  • information about relationships and contacts;
  • time-tracking information;
  • financial records, budgets, income and expenses;
  • health and fitness information.

You decide which information you add to LifeDesk.

3.3 Health Data

If you choose to enable the LifeDesk Health area, you may enter or upload
information such as:

  • symptoms and health conditions;
  • medication and supplements;
  • medical events and appointments;
  • physical or mental health information;
  • body measurements;
  • health-related goals and notes;
  • medical documents and photographs.

Health data constitutes a special category of personal data under applicable
data protection law.

LifeDesk processes data stored in the Health area only after you have actively
enabled the Health features and provided explicit Health Data Consent.

Your Health Data Consent also covers access to selected data from the Health
area by the LifeDesk AI Assistant where you actively request such processing.
Health data stored in the Health area is not automatically submitted to or
analysed by the AI Assistant.

You may withdraw your Health Data Consent at any time under
Settings → Legal & Privacy. Withdrawal will disable the Health area and delete
the health data stored in that area from our active systems.

Deleted health data may remain temporarily in encrypted backups until those
backups are overwritten in accordance with our backup retention schedule.
Deleted data will not be restored to your account.

The withdrawal of Health Data Consent does not automatically delete information
that you independently entered in the general AI conversation. The general AI
conversation can be deleted separately or as part of an account deletion.

LifeDesk does not sell health data, use it for advertising or use it to create
advertising profiles.

LifeDesk is an organizational and tracking service. It is not a healthcare
provider, medical device, emergency service or substitute for professional
medical advice, diagnosis or treatment.

3.4 Financial Data

If you use the finance features, we may process:

  • income and expense records;
  • budgets and financial goals;
  • transaction descriptions and categories;
  • account balances;
  • merchant and transaction information;
  • manually entered financial information;
  • information imported from connected financial accounts.

Financial data is used to provide the finance features selected by you. We do not sell financial data or use it for targeted advertising.

3.5 Connected Bank Accounts

If you choose to connect a bank account, the connection may be provided through an authorized open-banking provider such as Plaid.

Depending on the connection and permissions selected by you, we may receive:

  • the name and type of the connected account;
  • account identifiers in masked or tokenized form;
  • account balances;
  • transaction history;
  • transaction dates, amounts, descriptions and categories;
  • bank or financial institution information.

LifeDesk does not request that you send your online banking password directly to us. Bank authentication is normally handled by your bank or the applicable open-banking provider.

A bank connection is optional and may be disconnected through LifeDesk or the applicable open-banking provider.

3.6 AI Assistant Data

When you use the LifeDesk AI Assistant, we may process:

  • the prompts and instructions you submit;
  • relevant previous messages from your LifeDesk AI conversation;
  • LifeDesk content required to answer your request;
  • information you select or request the AI Assistant to use;
  • AI-generated responses;
  • technical information necessary to provide and secure the AI feature.

To generate a response, LifeDesk transmits the information required for the
request to Anthropic, PBC (“Anthropic”) through Anthropic’s commercial API.
Anthropic processes this information on our behalf as an AI infrastructure
provider and data processor.

LifeDesk only makes Health-area data available to the AI Assistant where you
have active Health Data Consent and actively request the AI Assistant to use
that information. Health data stored in the Health area is not automatically
submitted to Anthropic.

You may also choose to enter health information or other sensitive personal
information directly into the general AI conversation. Where you deliberately
submit such information and request a response, LifeDesk processes it only for
the purpose of responding to that request.

Do not submit sensitive information concerning another person unless you are
authorized to do so.

Anthropic states that inputs and outputs submitted through its commercial API
are not used to train its models by default. LifeDesk does not opt in to the
use of LifeDesk API inputs or outputs for general model training and does not
intentionally submit user conversations to Anthropic as product feedback.

Under Anthropic’s standard API retention policy, API inputs and outputs are
generally deleted from Anthropic’s backend systems within 30 days. Limited
exceptions may apply, including where longer retention is required for legal,
security or usage-policy enforcement purposes or where a specific Anthropic
feature has a different retention period.

LifeDesk may retain the AI conversation in the user’s LifeDesk account so that
the user can continue and review the conversation.

We do not use the AI Assistant to make decisions that produce legal or similarly
significant effects concerning users.

AI-generated content may be inaccurate, incomplete or outdated. It should not
be relied upon as a substitute for professional medical, legal, financial or
other expert advice.

3.7 Payment and Subscription Data

If you purchase a paid LifeDesk subscription, we may process:

  • your selected plan;
  • payment status;
  • billing address;
  • country;
  • applicable tax information;
  • VAT identification number, where provided;
  • invoice and transaction numbers;
  • subscription start, renewal, cancellation and expiry dates;
  • limited information about the payment method.

Payments may be processed by Stripe, Apple, Google or another payment provider shown during checkout.

Payment providers generally process complete card or payment credentials themselves. LifeDesk does not normally receive or store your complete payment card number.

3.8 Communications and Support Data

When you contact us, we may process:

  • your name and email address;
  • the content of your message;
  • attachments and screenshots;
  • support history;
  • technical information relevant to your request;
  • information required to verify account ownership.

Please do not send unnecessary health, banking, password or payment information through ordinary email.

3.9 Technical, Device and Usage Data

When you use the website or applications, we may automatically process:

  • IP address;
  • device type and operating system;
  • browser and application version;
  • language and time-zone settings;
  • date and time of access;
  • login and authentication events;
  • pages, screens and features used;
  • error reports and crash information;
  • security and fraud-prevention signals;
  • cookie and similar technology identifiers.

This information is used to operate, maintain, secure and improve LifeDesk.

Website Analytics

On the LifeDesk website, we use Google Analytics 4, a web analytics service
provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland.

Google Analytics may process information such as:

  • pages viewed and interactions with the website;
  • approximate location derived from the IP address;
  • device, browser and operating-system information;
  • referral source;
  • date, time and duration of visits;
  • cookie and device identifiers;
  • consent signals and campaign information.

For users in the European Economic Area, Switzerland and the United Kingdom,
Google states that IP addresses are used for deriving approximate location
information and are not logged or stored.

Google Analytics is activated only after you have provided the required
consent through our consent settings. You may withdraw your consent at any
time through the cookie or privacy settings on the website.

Legal basis: consent under Article 6(1)(a) GDPR and the applicable rules
concerning access to or storage of information on the user’s device.

Google may process information in the United States and other countries.
Applicable transfer safeguards are described in Section 9.

Website Security

We use Wordfence on the LifeDesk WordPress website to protect the website
against unauthorized access, malicious requests, malware, attacks and other
security threats.

Wordfence may process:

  • IP addresses;
  • request and access information;
  • attempted login information;
  • browser and device information;
  • security events;
  • information associated with suspected malicious activity.

The provider is Defiant, Inc., United States.

This processing is necessary for the security and integrity of the LifeDesk
website.

Legal basis: our legitimate interests under Article 6(1)(f) GDPR in protecting
our website, systems and users against attacks, fraud and unauthorized access.

Information may be transferred to the United States. Applicable transfer
safeguards are described in Section 9.

3.10 Newsletter and Marketing Data

If you subscribe to marketing communications, we may process:

  • your email address;
  • your name, where provided;
  • your language and country;
  • subscription and consent information;
  • delivery, opening and link interaction data, where permitted;
  • your marketing preferences.

You may unsubscribe at any time using the unsubscribe link in the relevant email or by contacting us.

4. Sources of Personal Data

We receive personal data:

  • directly from you;
  • automatically from your browser, device or application;
  • from payment providers and app stores;
  • from connected banks and open-banking providers at your request;
  • from authentication, hosting and security providers;
  • from other services that you choose to connect to LifeDesk;
  • from another LifeDesk user where that user enters information concerning you.

We process personal data for the following purposes and legal bases:

Providing LifeDesk

We process account data, user content and technical information to create and operate your account, synchronize your data and provide the features selected by you.

Legal basis: performance of a contract or steps taken at your request before entering into a contract.

AI Assistant

We process prompts, relevant conversation context, selected LifeDesk content
and AI-generated responses to provide the AI Assistant requested by the user.

Legal basis: performance of a contract or steps taken at the user’s request
before entering into a contract.

Where a user deliberately submits special-category personal data directly in
an AI prompt and requests that it be processed, we rely on the user’s express
request and consent for that specific processing.

Where the AI Assistant accesses data stored in the LifeDesk Health area, we
also rely on the user’s separately recorded explicit Health Data Consent.

Processing Health Data

We process data stored in the LifeDesk Health area to provide the optional
Health features selected by the user, including user-initiated AI access to
selected Health data.

Legal basis: performance of the requested service and explicit consent under
Article 9(2)(a) GDPR for the processing of special-category personal data.

Bank Connections and Financial Features

We process financial information to provide budgeting, transaction, categorization and connected-account features requested by you.

Legal basis: performance of a contract, your authorization and, where legally required, your consent.

Payments, Billing and Taxes

We process subscription and transaction information to process payments, manage subscriptions, issue invoices, collect taxes and comply with accounting obligations.

Legal basis: performance of a contract and compliance with legal obligations.

Service Communications

We send account verification messages, security alerts, subscription notices, password-reset messages and other communications necessary to operate LifeDesk.

Legal basis: performance of a contract, compliance with legal obligations and our legitimate interest in operating and securing the service.

Customer Support

We process communications to answer questions, investigate technical problems and resolve complaints.

Legal basis: performance of a contract and our legitimate interest in providing effective customer support.

Security and Abuse Prevention

We process technical and account information to detect unauthorized access, fraud, abuse, security incidents and violations of our Terms of Service.

Legal basis: our legitimate interests in protecting LifeDesk, its users and third parties and, where applicable, compliance with legal obligations.

Product Improvement

We may use aggregated, anonymized or appropriately limited usage information to understand how LifeDesk performs and to improve its functionality.

Where optional analytics technologies access or store information on your device, we obtain consent where required by law.

Marketing

We send newsletters, product announcements and promotional communications where you have provided consent or where another legally permitted basis applies.

You may withdraw your consent at any time.

We may process information to comply with legal requirements, respond to lawful requests and establish, exercise or defend legal claims.

Legal basis: compliance with legal obligations and our legitimate interests in protecting our legal rights.

6. Cookies and Similar Technologies

LifeDesk may use cookies, local storage, software development kits and similar technologies.

Strictly necessary technologies may be used to:

  • keep you signed in;
  • maintain sessions;
  • remember security and privacy settings;
  • process payments;
  • prevent fraud;
  • maintain the website and application.

Optional analytics or marketing technologies are activated only after consent where consent is required.

You can manage optional technologies through the cookie or privacy settings provided on the website.

Refusing optional technologies does not prevent you from using the essential functions of LifeDesk.

The LifeDesk website uses Google Analytics only after the required consent has
been provided.

Strictly necessary security technologies, including technologies used by
Wordfence to protect the website against attacks and unauthorized access, may
be used without optional analytics or marketing consent where permitted by law.

Consent choices are recorded and communicated to relevant services through
the website’s consent-management configuration.

You may withdraw or change your consent at any time through the cookie settings
available on the LifeDesk website. Withdrawal does not affect processing that
took place before the withdrawal.

7. Service Providers and Recipients

We use service providers and other recipients where necessary to operate,
secure and provide LifeDesk.

These include or may include:

  • ALL-INKL.COM – Neue Medien Münnich, Germany, which hosts the public
    LifeDesk WordPress website and related website data;
  • Hetzner Online GmbH, Germany, which provides server and infrastructure
    services for the LifeDesk application, databases, file storage and backups;
  • Anthropic, PBC, United States, which processes information required to
    provide the LifeDesk AI Assistant through its commercial API;
  • Google Ireland Limited and affiliated Google companies, which process
    website analytics information through Google Analytics where the user
    has provided consent;
  • Defiant, Inc., United States, which provides the Wordfence website security
    and firewall service;
  • Stripe, which processes direct subscription payments, billing information
    and applicable tax information;
  • Apple and Google, which distribute the mobile applications and may process
    subscriptions and in-app purchases;
  • Brevo, which processes transactional emails, service communications,
    newsletters and marketing communications;
  • Plaid and connected financial institutions where a user chooses to connect
    a bank account;
  • professional advisers, including accountants, tax advisers, lawyers and
    auditors;
  • public authorities where disclosure is required by applicable law.

Service providers acting as processors may process personal data only for the
agreed purposes and according to our instructions, contractual terms and
applicable data protection requirements.

Certain recipients, including payment providers, app-store operators,
financial institutions and open-banking providers, may also process personal
data as independent controllers under their own privacy notices.

We do not sell personal data.

We do not disclose health or financial data to data brokers or use such data
for targeted advertising.

You may contact privacy@lifedesk.me for further information about the current
service providers and safeguards involved in the processing of your personal
data.

8. Business Users and Data About Other People

LifeDesk allows users to store information concerning clients, business contacts, employees, contractors, family members and other people.

If you enter personal data concerning another person, you are responsible for ensuring that you have a lawful basis for doing so and that the person receives any information required by applicable law.

Where a business user determines the purposes and means of processing personal data entered into LifeDesk, the business user may act as controller and AGENCY BRAUN EOOD may act as processor. Additional data-processing terms may apply in such cases.

9. International Data Transfers

The public LifeDesk website is hosted by ALL-INKL.COM in Germany. The LifeDesk
application infrastructure is hosted by Hetzner Online GmbH. The exact server
location depends on the Hetzner location selected for the relevant service.

Some other service providers may process personal data outside Bulgaria or
outside the European Economic Area.

In particular:

  • information submitted to the LifeDesk AI Assistant may be processed by
    Anthropic and its subprocessors in the United States and other countries;
  • Google Analytics information may be processed by Google companies and
    service providers outside the European Economic Area;
  • website security information processed through Wordfence may be transferred
    to Defiant, Inc. and its service providers in the United States.

Where personal data is transferred outside the European Economic Area, we rely
on an appropriate transfer mechanism, such as:

  • an adequacy decision adopted by the European Commission;
  • the EU–US Data Privacy Framework where the recipient is validly certified;
  • European Commission Standard Contractual Clauses;
  • another transfer mechanism permitted by applicable law.

Where required, we enter into data-processing agreements and use contractual,
technical and organizational safeguards appropriate to the transfer.

Our contractual arrangement with Anthropic includes a Data Processing Addendum
and European Commission Standard Contractual Clauses.

You may contact privacy@lifedesk.me for information about the safeguards used
for a particular international transfer and, where applicable, how to obtain
a copy of them.

10. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

The following general retention periods apply:

  • Account information and user content are retained while your account is active.
  • When you delete your account, account content is scheduled for deletion from active systems within 30 days unless retention is legally required.
  • Deleted information may remain in encrypted backups for up to 90 days before being overwritten.
  • Security and technical logs are generally retained for up to 12 months unless a longer period is required to investigate an incident.
  • Support communications may be retained for as long as necessary to resolve the request and establish or defend legal claims.
  • Marketing data is retained until you unsubscribe or withdraw consent. We may retain limited suppression information to ensure that we respect your unsubscribe request.
  • Payment, invoice, tax and accounting records may be retained for up to 10 years or for another period required by applicable law.
  • Information connected to an active legal dispute, investigation or statutory obligation may be retained until the matter has been resolved.

Data may be anonymized instead of deleted where it can no longer be linked to an identifiable person.

LifeDesk AI conversations are retained while the relevant account is active.
They are deleted when the LifeDesk account is deleted, unless limited retention
is required by law.

Information transmitted through Anthropic’s standard commercial API may be
retained by Anthropic for up to 30 days, subject to the limited exceptions
described in Section 3.6.

When Health Data Consent is withdrawn, data stored in the LifeDesk Health area
is made inaccessible and deleted from active systems. Remaining backup copies
are overwritten according to the backup retention schedule described above.

11. Account and Data Deletion

You may delete individual entries through LifeDesk where the relevant feature provides that option.

You may request deletion of your account and associated personal data through:

We may ask you to verify your identity before processing the request.

Certain information may be retained where required for legal, accounting, fraud-prevention, security or dispute-resolution purposes.

Disconnecting a bank account stops future imports but may not automatically delete information that was already imported into LifeDesk. Imported information can be deleted separately or through an account-deletion request.

Withdrawing Health Data Consent deletes data stored in the LifeDesk Health area
but does not delete the user’s general AI conversation because the general AI
conversation is not assigned to individual LifeDesk sections.

Users may request deletion of the general AI conversation separately or delete
it together with their LifeDesk account.

12. Your Data Protection Rights

Subject to applicable law, you may have the right to:

  • obtain information about the processing of your personal data;
  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • receive certain personal data in a structured, commonly used and machine-readable format;
  • object to processing based on legitimate interests;
  • withdraw consent at any time;
  • object to direct marketing;
  • lodge a complaint with a competent supervisory authority;
  • not be subject to a decision based solely on automated processing that produces legal or similarly significant effects, where applicable.

To exercise your rights, contact privacy@lifedesk.me.

We may need to verify your identity before completing a request. We normally respond within one month where the GDPR applies. This period may be extended where legally permitted for complex or numerous requests.

13. Complaints

You may contact us first at privacy@lifedesk.me so that we can investigate your concern.

You also have the right to lodge a complaint with a competent data protection authority.

Our lead supervisory authority in Bulgaria is:

Commission for Personal Data Protection
2 Prof. Tsvetan Lazarov Boulevard
1592 Sofia
Bulgaria

Email: kzld@cpdp.bg

You may also contact the data protection authority in the EU or EEA country where you live, work or believe an infringement occurred.

14. United States Privacy Rights

Depending on your state of residence and whether the relevant law applies to LifeDesk, you may have additional rights concerning access, correction, deletion, portability, consent withdrawal and the use or disclosure of personal data.

LifeDesk does not sell personal data.

LifeDesk does not use health or financial data for cross-context behavioral advertising.

Residents of Washington and other jurisdictions with consumer health privacy laws should also review our Consumer Health Data Privacy Policy.

Requests may be submitted to privacy@lifedesk.me.

15. Security

We use appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration and disclosure.

No online service or storage system can guarantee absolute security. You are responsible for keeping your login credentials confidential and for informing us promptly if you suspect unauthorized access to your account.

16. Children

LifeDesk is not intended for children under the age of 16.

We do not knowingly collect personal data from children under 16. If you believe that a child has created an account or submitted personal data without appropriate authorization, contact privacy@lifedesk.me.

17. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes to LifeDesk, our service providers or applicable legal requirements.

The current version will be published on the LifeDesk website with the date of the latest update.

Where a change materially affects how we use personal data, we will provide an appropriate notice through the website, application or email before the change takes effect where required by law.

18. Contact

For privacy questions, requests or complaints, contact:

AGENCY BRAUN EOOD
Email: privacy@lifedesk.me

78 Angel Dimitrov Street
Apartment C101
8016 Burgas
Bulgaria