Privacy Policy

This Privacy Policy explains how PAM Financial LLC ("PAM Financial," "Lifecycle Ready," "we," "us," or "our") collects, uses, discloses, and protects information in connection with the Lifecycle Ready web application available at lifecycleready.com (the "Service").

Lifecycle Ready is a personal-preparedness and life-organization platform that helps you organize important information across four areas: Life, People, Plans, and Legacy. Lifecycle Ready is not a law firm, financial advisory firm, insurance agency, or estate-planning service, and this Privacy Policy should be read together with our Terms of Service, which describes the scope and limitations of the Service in more detail.

This Policy is written for users located in the United States. By using the Service, you agree to the collection and use of information as described here.

We collect the following categories of information in connection with the Service.

When you create an account, we collect your formal name, optional display name, email address, and password. We use the display name you choose on invitations and ordinary product surfaces while retaining your formal name for legal documents, billing, and account records. Your password is never stored in plain text — it is hashed using industry-standard bcrypt-family hashing through our authentication system (Better Auth) before it is stored. We do not have access to your actual password after you set it. We use your email address to verify your account, send password-reset links, and deliver other account-related communications.

Information you choose to store about yourself, including:

• Documents: title, category (e.g., ID, deed, title, will, contract, other), relevant dates, free-text notes, and optional file attachments
• Insurance policies: provider name, policy number, policy type, premium amount and frequency, renewal date, contact phone number, and notes
• Financial/account records: institution name, account type, and only the last 4 digits of any account number. We never ask for, and our forms do not accept, full account numbers or account passwords.
• Property records: property name/address, type, estimated value, and purchase date
• Employment records: employer name, position, HR contact information, retirement account information, and benefits notes
• Password/credential entries: a label, a username, and a secret value (e.g., a password). The secret value is encrypted using AES-256-GCM encryption at the application layer before it is ever written to our database. We never store this secret in plain text, and, as described in Section 5 below, this encryption is designed so that even our own staff cannot view your decrypted secrets.
• File attachments: files you upload in connection with Documents, Insurance, Property, or Keepsakes are stored in a private, non-public cloud storage bucket (Amazon S3), up to 15MB per file.

The People pillar lets you store information about other individuals in your life — family members, contacts, advisors, executors, and caregivers — including their name, relationship to you, category, phone number, email address, mailing address, notes, and whether they are designated as an emergency contact.

Important: This information is provided by you, the account holder, about someone else — it is not collected directly from that person. Section 6 below explains this in more detail, and our Terms of Service describe your responsibility as the account holder for having an appropriate basis to store another person's information in the Service.

Emergency, financial, and household plans you create, including the steps within each plan, review-frequency scheduling you set, and records needed to send you reminder emails when a plan review is due.

Section 7 below explains important limitations on how message-delivery triggers currently work.

• Personal wishes: funeral, medical, estate, and property preferences you record
• Messages and letters: content you write addressed to specific named people, which may include a delivery trigger you select (such as "on death," "on a specific date," or "on a milestone event")
• Keepsake/memory archive entries: photos, stories, and other memory content you choose to store, with optional file attachments

If you invite another person to access some or all of your data (a "Grant"), we collect and store the invited person's email address, the scope of access you grant (whole account, a single pillar, or a single item), and the status of that invitation (pending, accepted, or revoked). See Section 8 for a full explanation of how sharing works.

When a user invites someone to try Lifecycle Ready, we store the inviter's identity, the recipient's email address, any optional personal message, delivery and visit status, and whether the recipient later creates and verifies an account. We use this information to deliver the invitation, prevent abuse, attribute referrals, and support any future referral-reward program. A referral invitation does not subscribe the recipient to marketing email.

We use Stripe, Inc. as our payment processor. When you subscribe to a paid plan, payment collection (including your card details) happens directly through Stripe's own hosted Checkout and Customer Portal — Lifecycle Ready never receives or stores your full card number. We store only your Stripe customer ID and your subscription ID/status for our own billing records.

When enabled (see Section 9, Cookies), we use Google Analytics (GA4) to collect aggregate information about how the Service is used, such as pages visited and general usage patterns. Google Analytics is not active in our development environment and is only enabled in production when explicitly configured.

We do not collect biometric data, precise geolocation, Social Security numbers, full financial account numbers, or full account passwords for third-party services. We do not use advertising trackers, advertising cookies, or third-party data brokers, and we do not sell your personal information to anyone.

We use the information described above to:

• Create and secure your account, and authenticate your logins
• Provide the core functionality of the Life, People, Plans, and Legacy pillars
• Send transactional emails: account verification, password reset, sharing invitations, referral invitations, and plan-review reminders (all sent via Amazon Simple Email Service (SES))
• Process subscription billing through Stripe and maintain your subscription status
• Provide customer support (see Section 5 regarding what our support staff can and cannot see)
• Monitor, maintain, and improve the Service, including through aggregate usage analytics
• Detect, investigate, and prevent fraud, abuse, or security incidents
• Comply with legal obligations

Because the People pillar is designed to hold information about people in your life, Lifecycle Ready processes personal data about individuals who are not our users and who have not created an account or agreed to this Privacy Policy. This data is provided to us by you, the account holder — we do not collect it directly from the individuals it describes, and in most cases those individuals will not know that their information has been stored in the Service unless you tell them or they later become a Grantee (see Section 8).

If you are an account holder, our Terms of Service require you to have an appropriate basis (such as a personal or family relationship, consent, or another lawful reason) to add another person's information to the Service, and you are responsible for the accuracy of that information and for responding to any request that person makes to access, correct, or remove it. If a person who is the subject of People pillar data wishes to make a request regarding their information, they may contact us at privacy@lifecycleready.com, and we will work with the relevant account holder as appropriate.

You and your Grantees. Your data is visible to you, and to anyone you have explicitly invited and who has accepted a Grant, to the extent of the access level you granted (see Section 8).

Our support/administrative staff. Authorized Lifecycle Ready personnel have access to an internal support tool that allows them to view most account content (across all four pillars) for the purpose of providing customer support, troubleshooting, and maintaining the Service. Access is limited to staff who need it to do their jobs.

Password vault secrets are the one exception. Password/credential entry secrets (Section 2.2) are encrypted at the application layer (AES-256-GCM) before storage, and our internal admin tool has no mechanism to decrypt or display them. This is a technical guarantee built into the product, not a policy promise: no one at Lifecycle Ready — including engineering, support, and administrative staff — can view your decrypted password-vault secrets. Only you, and anyone you explicitly item-share a specific credential entry with (see Section 8), can access that secret.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

We share limited information with the following service providers, each of which processes data on our behalf solely to help us operate the Service:

The Legacy pillar allows you to write messages or letters to specific people and associate a delivery intent with them (for example, "on death," "on a specific date," or "on a milestone event"). Please understand the current, real limits of this feature: delivery of these messages today is handled manually/administratively by our team, not by an automated or independently verified process. We do not currently have a verified death-detection or automated triggering system. If timed or posthumous delivery of a message is important to you, do not rely on Lifecycle Ready as your sole method of ensuring delivery — consider it a supplementary tool, and see our Terms of Service (Section 11) for more on what happens to your account and data if you die or become unable to access your account.

Lifecycle Ready allows an account holder to invite another person to view some or all of their data by creating a "Grant." Grants can be scoped to:

• Whole account: the grantee can view all pillars
• One pillar: the grantee can view only Life, People, Plans, or Legacy data
• A single item: the grantee can view one specific record

To accept a Grant, the invited person must create a Lifecycle Ready account (or log into an existing one) using the exact email address the invitation was sent to, and must affirmatively accept the invitation before any access is granted. The account holder can revoke a Grant at any time, which immediately ends the grantee's access.

Password vault secrets are never exposed through account-level or pillar-level Grants. A credential entry's secret is only ever viewable by a grantee if that specific item has been individually shared with them, and even then it remains subject to the same encryption described in Section 2.2 and Section 5.

Because this feature causes one user's information to become visible to another person, you should carefully consider who you invite and at what level before creating a Grant. See our Terms of Service for the account holder's responsibilities regarding sharing.

Lifecycle Ready uses a small number of cookies:

• Strictly necessary cookies: session and authentication cookies required for you to log in and use the Service. These cannot be disabled without breaking core functionality.
• Analytics cookies: when Google Analytics is enabled in production, GA4 may set cookies to distinguish users and measure aggregate usage. You can opt out of Google Analytics tracking using a browser extension such as the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie/privacy settings.

We do not use advertising cookies, and we do not currently operate a cookie-consent banner because we do not use non-essential cookies beyond analytics.

We retain your information for as long as your account is active and as needed to provide the Service. You may request deletion of your account and associated data at any time by contacting privacy@lifecycleready.com (or, where self-service account deletion is available in your account settings, through that flow). When an account is deleted:

• Substantially all of your account's records across the Life, People, Plans, and Legacy pillars are permanently deleted from our database
• Your file attachments are permanently deleted from our storage
• Limited billing records (such as those retained by Stripe) may be kept as required for tax, accounting, fraud-prevention, or other legal obligations, independent of your Lifecycle Ready account

Deletion is generally not reversible. If you share your account or specific items with others via a Grant, deleting your account also removes their access.

Lifecycle Ready is not directed to, and is not intended for use by, children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us at privacy@lifecycleready.com and we will take steps to delete it.

Depending on your state of residence, you may have rights under state privacy laws (such as the California Consumer Privacy Act/California Privacy Rights Act and similar laws in other states), including the right to:

• Know/access: the categories and specific pieces of personal information we hold about you
• Correct: inaccurate personal information
• Delete: your personal information (see Section 10)
• Data portability: receive a copy of your data in a portable format
• Opt out of the sale or "sharing" of personal information: Lifecycle Ready does not sell or share your personal information with third parties for cross-context behavioral advertising, so there is nothing to opt out of, but you may still submit a request for confirmation
• Non-discrimination: for exercising any of these rights

To exercise any of these rights, contact us at privacy@lifecycleready.com. We will verify your request (typically by confirming your account email) before acting on it, and we will respond within the time required by applicable law.

We maintain a number of technical measures designed to protect your information, including:

• Encryption of data in transit using TLS
• AES-256-GCM application-layer encryption at rest for password-vault secrets specifically
• Storage of uploaded files in a private, non-publicly-accessible cloud storage bucket
• Role-based access control governing what internal staff and grantees can see

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security. We do not claim, and this Policy should not be read to imply, compliance with any particular security certification or framework (such as SOC 2, HIPAA, or ISO 27001) — the statements above describe our actual technical measures, not a certified compliance status.

The Service is currently offered only to users located in the United States, and your information is processed and stored in the United States. This Policy does not address international transfers because the Service is not currently offered outside the U.S.

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email and/or by posting a notice within the Service prior to the change becoming effective. The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Service after a change takes effect constitutes acceptance of the revised Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, contact us at:

PAM Financial LLC

Email: privacy@lifecycleready.com