LEGAL
Privacy Policy
How we collect, use, and protect your personal data.
Last updated: July 2026
Introduction
LifeTap Ltd ("we", "us", "our") is the data controller responsible for your personal data. We're committed to protecting your privacy and handling your data transparently.
This policy explains what data we collect when you use the LifeTap platform and website (https://lifetap.uk), why we collect it, and what rights you have.
Our ICO registration is currently pending. We operate in full compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What data we collect
Account information
When you create an account, we collect your name, email address, authentication records, and an optional profile image. Authentication records include the information needed to keep you signed in securely, such as session identifiers and account-provider records.
Profile and consent information
Your LifeTap profile may include your postcode, age range, points balance, activity streak, referral code, account activity dates, and whether you accepted the terms or consented to marketing communications.
Learning, rewards, and referrals
We store education progress, quiz attempts and scores, points earned or spent, reward redemptions and their status, and related timestamps. If you send a referral, we store the recipient's email address, the referral status, and the date it was created so we can deliver and manage the invitation.
Usage data
We collect information about how you interact with the platform, including features used, content viewed, education completion, quiz and reward activity, and other engagement events. This helps us operate the product and understand how programmes are performing.
Technical data
Authentication and diagnostic records may include your IP address, browser or app user-agent, device type, and operating system for security, session management, and troubleshooting.
How we use your data
We use your personal data to:
- Provide and maintain your LifeTap account
- Send transactional emails, including password resets, referral invitations, and reward messages where those features are enabled
- Generate aggregated engagement insights for programme partners
- Improve the platform based on usage patterns
- Ensure platform security and prevent misuse
We don't sell your personal data. We don't use it for advertising.
Legal basis for processing
We process your data under the following lawful bases:
- Contract: Processing needed to provide the service you signed up for.
- Legitimate interests: Improving the platform, generating aggregated insights, and maintaining security.
- Consent:Where you've given specific permission, such as for optional communications.
- Legal obligation:Where we're required to retain or disclose data by law.
Third-party services
We use a small number of third-party services to run the platform:
- Convex — Database and real-time backend infrastructure. Your account and usage data is stored here.
- Vercel — Hosting and delivery of the LifeTap website and admin portal.
- Resend — Transactional email delivery when email features are enabled.
Each provider processes data under their own privacy policies. We only share the minimum data needed for each service to function.
Data retention
We keep your personal data for as long as your account is active or as needed to provide the service. You can permanently delete your account and associated app data from the Profile section of the LifeTap mobile app. You can also request account and personal-data deletion by emailing info@lifetap.uk. We will handle requests in line with applicable data-protection law and retain information only where we have a lawful reason to do so.
Aggregated, anonymised data (which can't identify you) may be retained indefinitely for research and platform improvement.
Cookies
We use essential cookies only, for authentication and session management. For full details, see our Cookie Policy.
Your rights
Under UK GDPR, you have the right to:
- Access — Request a copy of the personal data we hold about you.
- Rectification — Ask us to correct inaccurate or incomplete data.
- Erasure — Ask us to delete your personal data.
- Portability — Receive your data in a structured, machine-readable format.
- Restriction — Ask us to limit how we process your data.
- Objection — Object to processing based on legitimate interests.
To exercise any of these rights, email us at info@lifetap.uk. We'll respond within 30 days.
If you're not satisfied with how we handle your request, you have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.