Privacy Policy
YouLMK is an inbox you let things interrupt you through. This policy says what Live Better Platforms, Inc. ("we", "us") stores when you use YouLMK at youlmk.com, in the YouLMK apps and through its API, why we store it, how long we keep it, and who handles it on our behalf. We store what the product needs to work and nothing for advertising. We do not sell personal data and we do not track you across other apps or sites.
1. What we store, and why
Your account. When you sign in with Apple, Google, GitHub or an email code, our sign-in provider (Clerk) gives us an identifier, your email address and, when the provider shares it, your name. We use them to know which inbox is yours, to send you account email such as a deletion undo link, and to reach you about the service. Sign-in through Apple can hide your address; we then store the relay address Apple gives us. Signing a phone in from the web app's code or emailed link uses a one-time token that lives ten minutes and is stored hashed.
What you send yourself. A source is a key with a name and rules. Everything sent to a key is stored in your inbox: the title, the body, the priority, the links, the fields and the image address the sender included, and when it arrived. We store it to show it to you and to deliver it to your destinations. What a sender puts in a notification is the sender's content; if you point a third party's webhook at a key, that service's payloads are stored the same way.
Watches. A watch is a sentence you type or a guided choice: the address to watch, the condition, the interval. We store the watch, what each check found, and, for a page watch that is about to fire or a page you pick a region on, a picture of the page, so the notification can show what changed and you can point at the part to watch. A picture is kept at an address that is not guessable and is not listed anywhere. If you give a watch a header for a private endpoint, it is stored with the watch, encrypted at rest, sent only to that endpoint, and never shown again. Our servers fetch the addresses you name; the site you watch sees our request, not you.
Destinations. To reach you we store what each destination needs: a push token for each phone and browser, the email addresses you add, the Slack workspace and channel you connect together with the credential Slack issues to us for it, and the webhook addresses you own together with the secret we sign requests with. A destination can be paused or removed at any time.
Icons. An icon you type, pick or upload for a source or a watch is stored as a small image and travels with its notifications to your own destinations, so a phone, a browser, Slack or an email can show it.
Billing. Purchases on the web are handled by Stripe; we store a customer identifier and the subscription's status and renewal date, never a card number. Purchases in the iOS app are handled by Apple and in the Android app by Google; we store the transaction identifiers they give us so the plan follows your account onto every device. Prices are shown before you buy.
Keys and tokens. A source's key and bearer token are shown to you once and stored hashed, so they cannot be read back. Rotating a key retires the old one within 24 hours.
Service records. Our servers keep short-lived logs of requests, including IP addresses and timing, to keep the service running, to enforce rate limits and to investigate abuse. The daily counts we keep of sends, checks and deliveries are numbers per account, not content.
Support. If you write to hello@youlmk.com we keep the correspondence to answer you.
Usage and crash reports. To see which parts of YouLMK are used and where it breaks, the apps and the web app send PostHog a short record of product events: that you signed in, made a source, copied a key, started a watch, opened the plan screen, changed a setting, and which tab or screen you were on, together with crash reports and error traces. These records carry your account id and the words that name the event, never the content of a notification, a source's name, a key, a watch's sentence, your email or your name. The website youlmk.com sends PostHog page views, clicks and the campaign a link carried, without a cookie and without identifying you.
2. What we do not do
We do not show advertising, we do not sell or share personal data for advertising, we do not build profiles of you from your notifications, and we do not track you across other sites or apps. The product analytics in section 1 are ours, on our own account, and are never sold or shared for advertising. Cookies on youlmk.com and app.youlmk.com are the ones sign-in needs to keep you signed in; youlmk.com itself sets none.
3. The watch parser
When you type a sentence to create a watch, the sentence, and only the sentence, is sent to a language model at Anthropic and, if that fails, at OpenAI, to turn it into a watch you then confirm line by line. Neither provider receives your name, your email address, your inbox or your other watches, and we use these providers under terms that do not permit them to train on what we send. A watch started from a guided choice never leaves our servers.
4. Who handles data on our behalf
We run YouLMK on providers who process data under our instructions: Convex (the database and the functions that run the service), Amazon Web Services (hosting, the page renderer, the pictures of watched pages, and email delivery through Amazon SES), Clerk (sign-in), Stripe (web billing), Apple (App Store billing and push notifications to iPhone and Apple Watch), Google (Play billing and push notifications to Android through Firebase Cloud Messaging), Slack (only for channels you connect), PostHog (usage and crash reports, section 1), and Anthropic and OpenAI (the watch parser, section 3). Delivery to a destination you configure, such as your own webhook address, sends the notification to the place you named.
5. Where data lives
Data is stored in the United States. If you use YouLMK from elsewhere, your data is transferred to and processed in the United States by us and the providers above.
6. How long we keep it
On the free trial and the Send plan, notification history is kept for 90 days and then deleted. On the Watch plan, history is kept for as long as your account exists; records older than a year may move to archive storage. Keys, sources, watches and destinations stay until you delete them. A deleted source's history is kept for 30 days so an accidental deletion can be undone, then removed.
When you delete your account, your keys stop answering at once, your watches stop, and your data is purged within 24 hours and from backups within 30 days. A link sent to your email lets you undo the deletion for 24 hours. Before deleting you can export everything as one file.
7. Your choices and rights
You can read, change and delete what YouLMK holds about you from the apps and from app.youlmk.com: your sources and their rules, your watches, your destinations, your quiet hours, your plan, and the account itself. Export gives you a copy of your data as one JSON file behind a link that works for 24 hours. Depending on where you live you may have rights to access, correct, delete, restrict or port your personal data, or to object to its processing; you can exercise them in the product or by writing to hello@youlmk.com, and you may also complain to your local data protection authority.
8. Security
Data travels encrypted between you, our servers and our providers, and is stored encrypted at rest. Keys and tokens are hashed, secrets are stored only where the service needs them, and webhook requests we send are signed so you can verify their origin. No system is perfectly secure; if we learn of a breach affecting your data we will tell you as the law requires.
9. Children
YouLMK is not directed at children. You must be at least 16, or the age of digital consent where you live, to create an account. If you believe a child has created an account, write to hello@youlmk.com and we will delete it.
10. Changes to this policy
We may update this policy. Material changes will be announced by email or in the app at least 14 days before they take effect, and the date at the top will change.
11. Contact
Live Better Platforms, Inc.
251 Little Falls Drive
Wilmington, New Castle County, Delaware 19808
United States
hello@youlmk.com
youlmk.com