Your archive is yours.

DB.Life exists to hold the patterns your body reveals over a lifetime. We collect only what you enter or explicitly connect (devices, labs). We never sell data. We never train models on it. We never let advertisers near it. You can export or delete everything, any time, with one click.

• Account details you give us (email, password hash, name).
• Profiles you create for yourself and people in your archive.
• Patterns, observations, notes, tags.
• Vitals, sleep, activity, nutrition, meds, labs, conditions, allergies, immunizations — whatever you log or sync.
• Device and integration metadata (which device, when last synced — not credentials).
• Billing details at our payment processor (we never see full card numbers).

• Advertising identifiers.
• Third-party tracking beacons.
• Raw GPS traces from wearables (we take aggregates only).
• Anything you didn't put in yourself.

• You, always.
• People in your family graph — only to the extent you've explicitly shared a pattern with them.
• Legacy recipients — only after the activation of your legacy rules (confirmed by two missed reminders and your designated next-of-host).
• Our engineers — never, unless you grant one-time read access via the support console for a specific bug.

• Cloud hosting: AWS, Frankfurt region (EU data residency).
• Email: Postmark (transactional only; no marketing).
• Payments: Stripe.
• Error monitoring: Sentry (with PII scrubbed client-side).

• Export everything, anytime, in JSON / CSV / FHIR.
• Delete everything, anytime — purged within 7 days.
• Download a full activity log of who accessed what.
• Email [email protected] with any question, and a human will answer within 3 business days.