Privacy Policy

What we collect

We collect three kinds of data, and nothing beyond what the product needs to work.

• Account data — your name, email address, password hash, and profile picture if you upload one. This is what identifies your account.
• Content you create — tasks, projects, areas, habits, goals, notes and workspaces. This is yours. We store it so we can show it back to you and sync it across your devices.
• Connected service data — if you connect Google Calendar, Outlook or an email account, we access only the scopes you approve, and only to power the features you turned on.

What we do not do

• We do not sell your personal data. Not to anyone, at any price.
• We do not use the content of your tasks, notes or emails to train general-purpose AI models.
• We do not show third-party advertising, and we do not share your data with ad networks.

How Lima AI uses your data

When you ask Lima AI to plan your day or answer a question, the relevant parts of your workspace are sent to our AI provider so a response can be generated. That request is processed to produce your answer and is not used to train the provider's models. If you never use an AI feature, none of your content is sent to an AI provider.

Connected accounts

Calendar and email connections use OAuth. We never see or store your password for those services, and you can revoke access at any time from Lima's settings or from the provider's own security page. Revoking access stops future syncing immediately.

Where your data lives

Data is stored on servers in the European Union. It is encrypted in transit using TLS and encrypted at rest. Access by our team is limited to the people who need it to operate and support the service, and is logged.

How long we keep it

We keep your data for as long as your account is open. If you delete your account, your content is removed from our production systems within 30 days and from encrypted backups within 90 days. Some records — invoices, for example — are kept longer where the law requires it.

Your rights

Wherever you live, you can ask us to give you a copy of your data, correct it, or delete it. If you are in the EEA or UK, you also have the right to object to processing, to restrict it, and to lodge a complaint with your local data protection authority. Export is available directly in the app; for anything else, email us and we will action it within 30 days.

Cookies

We use a small number of cookies, described on our Cookie Policy page. None of them are advertising cookies.

Children

Lima is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

If we make a material change, we will email account holders before it takes effect. The date at the top of this page always reflects the current version.

Contact

Questions about privacy, or a request about your data: privacy@lima.app.