LifeShelf — Privacy Policy

Effective Date: August 18, 2026

LifeShelf ("LifeShelf", "we", "us", "our") is a product of HaloSync Global, a registered business (sole proprietorship) in Ontario, Canada. This Privacy Policy explains how LifeShelf handles information. By using LifeShelf you agree to this Policy.

Contact: HaloSync Global — contact@halosyncs.com — https://halosyncs.com

1. The short version

LifeShelf is built to be private. We do not collect your data. There is no LifeShelf account to create, no LifeShelf server, no analytics or tracking, and no ads. Your documents live on your device. They sync through your own Apple iCloud, which we cannot access. We never see, store, sell, or share your information.

2. What LifeShelf is

LifeShelf is a private home for the documents that protect your life — IDs and passports, insurance, medical records, financial and household paperwork. It reads and files them for you, tracks what is expiring, builds an emergency package you can hand to someone who needs it, and helps you plan who can reach your records if you no longer can.

3. There is no account, and there is no LifeShelf server

You never create an account with us and you never give us an email address or password to use the app. LifeShelf has no backend: your records are not uploaded to us, and there is no database of ours in which you appear. The "account" that carries your shelf between devices is simply the Apple ID already signed in on your device, and your data goes to your own private iCloud database — not to us.

4. What you put in, and where it lives

• Your documents and their details — the original files you scan, import or drop in, plus titles, categories, issuers, reference numbers, dates, expiry dates, tags, notes, and any text recognised inside them.
• People and things you describe — family profiles (which may include health details such as blood type, allergies, conditions, medicines, doctors and pharmacy, if you choose to enter them), vehicles, homes, trips, reminders, life-event packs, your own collections, and an optional inventory of accounts and contacts.
• All of it is stored on your device and mirrored to your own private iCloud database. It does not pass through HaloSync servers, and we have no copy of it.

5. Sync runs through your own private iCloud

LifeShelf syncs from the moment you install it. Your shelf is mirrored to your own private iCloud database using Apple's infrastructure, keyed to the Apple ID already signed in on that device, so the same shelf is on your iPhone, iPad and Mac and survives losing any one of them. It is not shared with us and it is not stored on any server of ours — we have none.

There is no sync switch to find and no setting to get wrong. If a device cannot reach iCloud, LifeShelf keeps working on that device and catches up when it can, and the app tells you when something is not getting through.

What is sealed with LifeShelf's own key, and what is not

This distinction matters, so we would rather state it plainly than let a broad claim stand:

• Your original document files are encrypted on your device before they leave it, using a key generated on your device and held in the device Keychain. That key travels between your own devices only through Apple's end-to-end-encrypted iCloud Keychain — never through us, and never through any server of ours. The encrypted originals are therefore unreadable to us, and unreadable to Apple.
• The text LifeShelf recognises inside your documents — along with titles, issuers, reference details and dates — is stored as ordinary data in your own private iCloud database, the way a note in Apple Notes is. Search has to be able to read it, so it does not carry LifeShelf's own encryption. It sits inside your private iCloud, protected by Apple's standard iCloud protections and your Apple ID. We never see it, because there is nowhere for it to reach us — but we do not describe it as end-to-end encrypted, because it is not.
• If you have Apple's Advanced Data Protection turned on for your Apple account, Apple end-to-end encrypts that iCloud data as well. That is Apple's setting, in your hands, not ours.

Because the key travels through iCloud Keychain, a device that does not have iCloud Keychain enabled may show your records but be unable to open their original files. LifeShelf tells you when that happens rather than failing silently.

6. Reading your documents happens on your device

LifeShelf recognises text, classifies documents, extracts dates and writes summaries on your device, using Apple's on-device frameworks. Where Apple Intelligence is available, LifeShelf uses Apple's on-device model for clearer summaries. The contents of your documents are never sent to an external AI service, to us, or to any third party for processing.

7. Things that only happen when you ask

Everything below is off, or does nothing, until you choose it.

• Emergency Package & exports. You can create a PDF of chosen records, optionally protected by a password you set; an "export everything" archive; or a metadata file. These are produced on your device. Once you share or save an export, that copy is outside LifeShelf's protection — store and share it carefully. If you set a password, we never receive or keep it, and it cannot be recovered.
• Read-only Emergency Share. You can send someone a private, read-only Apple iCloud invitation to a selected set of records. It uses Apple's sharing; the recipient must accept with their own Apple ID. LifeShelf does not verify on your behalf that they accepted or opened it, and says so in the app.
• Recovery Kit. An encrypted archive plus a printable recovery card that you store somewhere safe. Anyone holding both can open the package, so keep them apart.
• Legacy Plan. A private checklist of people you trust, and an optional setting that can open your Emergency Shelf after a long period of inactivity. Naming someone does not contact them, notify them, or grant them anything by itself.
• Reminders are scheduled as local notifications on your device.
• Spotlight search is off by default. If you turn it on, document and reminder titles can appear in your device's search outside LifeShelf.
• Widgets, Siri & Shortcuts show or file your own data on your own device; nothing is sent to us.

8. Deleting things

Deleted documents go to a Trash where they remain for 30 days so you can restore them, then they are removed. You can empty the Trash immediately, and Settings includes Delete All LifeShelf Data, which removes your records, profiles, reminders and encrypted originals from that device. Deletions propagate to your other devices through your own iCloud.

9. Purchases & subscriptions

LifeShelf is free to use up to a document limit. LifeShelf Premium is offered as an auto-renewable monthly subscription and as a one-time Lifetime purchase. Payments are handled entirely by Apple through your Apple ID — we never receive or see your card or payment details. A subscription renews automatically unless you cancel at least 24 hours before the end of the current period; you can manage or cancel it anytime in your Apple ID subscription settings. The Lifetime purchase is one-time and does not auto-renew.

10. What we do not do

• We do not collect, store, or transmit your documents to our servers — we have none.
• We do not use analytics or tracking SDKs, and we serve no ads.
• We do not sell or rent your information to anyone, ever.
• We do not have the ability to read your encrypted originals or recover a password you set.

11. Security

LifeShelf encrypts your original document files with AES-GCM before they are stored or synced — the recognised text and record details are not covered by that key, as section 5 explains — keeps the key in the device Keychain, and relies on iOS data protection for on-device storage and Apple's infrastructure for iCloud. You can add Face ID, Touch ID or passcode lock to the app itself. Because your data stays in your own device and your own iCloud, you remain in control of it — and no security measure is perfect, so keep exports and Recovery Kits somewhere you trust.

12. Children

LifeShelf is a general-audience consumer app intended for adults and is not directed to children under 13, and we do not knowingly collect information from children.

13. International

HaloSync Global is based in Canada. Your documents are stored on your device and, if you enable sync, in your own iCloud on Apple's infrastructure.

14. Not legal, financial, or medical advice

LifeShelf helps you organise your own records and plan who can reach them. It is not a law firm, a financial adviser, or a medical service, and it does not provide advice. A Legacy Plan, Recovery Kit or executor export inside LifeShelf is not a will and has no legal force on its own — please speak to a qualified professional about your estate, insurance, or health decisions.

15. Changes

We may update this Policy; we will post the new date above and, for material changes, note it in the app.

16. Contact

HaloSync Global — contact@halosyncs.com — https://halosyncs.com

This document is a good-faith, plain-language policy. It is not legal advice; please have a lawyer review it before launch for your specific obligations (e.g. PIPEDA, GDPR/CCPA, and Apple's App Store requirements).