Privacy Policy

Last updated: March 12, 2026

Alejandro Carbajo ("we," "us," or "our") operates Agent Life (the "App"), available on Android, iOS, macOS, and the web. This Privacy Policy explains how we collect, use, and protect your information when you use our App.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Email address
Display name (if provided)
Authentication credentials (managed by Firebase Authentication)

1.2 Subscription and Payment Data

If you subscribe to Agent Life Pro, we collect purchase history and subscription status. Payment method details are processed and stored exclusively by our payment processors (Stripe for web/desktop, Apple/Google via RevenueCat for mobile). We do not store your credit card number or financial instrument data on our servers.

1.3 Device and Technical Data

We automatically collect:

Device platform (Android, iOS, macOS, Web)
Push notification tokens (Firebase Cloud Messaging and Apple Push Notification service)
App version and build number
Crash reports and diagnostic data (via Firebase Crashlytics)

1.4 Usage Data

We collect server-side analytics to improve the App: feature usage patterns, session duration, and API request metadata.

1.5 Information We Do NOT Collect

Agent Life connects to your self-hosted OpenClaw gateway. We want to be clear:

AI conversations: Your interactions with your AI agent are transmitted directly between your device and your OpenClaw gateway. We do not intercept, read, store, or process any AI conversation content.
Gateway credentials: Your OpenClaw gateway authentication token is stored locally on your device in the platform's secure keychain/keystore. It is never transmitted to our servers.
Widget/surface content: The cards and widgets displayed on your dashboard are rendered locally from data provided by your OpenClaw gateway.
Plugin data: The Agent Life plugin runs locally on your OpenClaw installation. Usage ledger data, surface persistence, and engagement tracking are stored in your local OpenClaw data directory.

2. How We Use Your Information

Provide and maintain the App
Process subscriptions and payments
Send transactional emails (account verification, password reset, purchase receipts)
Send push notifications for agent activity (if enabled)
Send marketing emails (only with your explicit consent)
Detect and prevent fraud and abuse
Improve the App through aggregated, anonymized analytics

3. Third-Party Services

Service	Purpose	Data Shared
Firebase (Google)	Auth, crash reporting, push	Email, device tokens, crash logs
Stripe	Payments (web/desktop)	Email, payment method
RevenueCat	In-app purchases (mobile)	Purchase history
Brevo	Email delivery	Email address
DigitalOcean	Server hosting	Data on our servers
Cloudflare	CDN, DDoS protection	IP address, request metadata

We do not sell your personal data to any third party.

4. Data Retention

Account data: Retained while your account is active. Deleted upon account deletion request.
Payment records: Retained for the legally required period (6 years under Spanish tax law).
Crash reports: Retained for 90 days.
Push notification tokens: Deleted when you uninstall the App or unregister your device.
Server logs: Retained for 30 days, then automatically purged.

5. Your Rights

Under GDPR (EU/EEA)

You have the right to access, rectify, erase, restrict processing, port your data, object to processing, and withdraw consent at any time. Contact us at carbajo.dev@gmail.com. We will respond within 30 days.

You may lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

Under CCPA (California)

California residents have the right to know what personal information is collected, request deletion, opt out of sale (we do not sell personal information), and non-discrimination for exercising privacy rights.

Account Deletion

You can delete your account at any time from Settings within the App, or by contacting us at carbajo.dev@gmail.com. Upon deletion, your account data, email preferences, and communication history will be permanently removed. Payment records will be retained only as required by law.

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including encryption in transit (TLS/HTTPS), secure credential storage (platform keychain/keystore), JWT-based authentication with token expiration, and rate limiting on our API.

7. Children's Privacy

Agent Life is not intended for children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe your child has provided us with personal information, please contact us and we will delete it.

8. International Data Transfers

Our servers are hosted in the European Union (DigitalOcean, Amsterdam). Some third-party services may process data in the United States under Standard Contractual Clauses or equivalent safeguards as required by GDPR.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, for significant changes, via email or in-app notification.

10. Contact Us

Email: carbajo.dev@gmail.com
Website: agentlife.app
Data Controller: Alejandro Carbajo, Spain