Terms

These terms cover quantifiedlife.io (this site), the app at my.quantifiedlife.io, and the QuantifiedLife apps for iPhone and Android. They are one service and share one datastore. “We” means QuantifiedLife; “you” means whoever is signed in to the account.

Creating an account is how you accept them. If you are using QuantifiedLife for an organisation, you are saying you are allowed to agree on its behalf.

How your data is handled is a separate document, and the more important of the two: the privacy policy is part of this agreement, and where the two overlap it is the one that governs.

You need to be at least 16 to have an account. Sign-in runs on Firebase Authentication, so keeping your password — or the Google account behind it — to yourself is the one piece of security only you can do. Anything done from your account is treated as done by you, so tell us at privacy@quantifiedlife.io the moment you think somebody else is in it.

One account per person. Sharing a login is not forbidden because we are counting seats — it is that the whole product is a single timeline of one person’s measurements, and two people in one account get a dashboard that describes neither of them.

QuantifiedLife collects the data you already generate — health, workouts, games, money — from the sources you connect, three times a day, and puts it in one store that only you can read. On top of that it draws charts, tracks goals and habits, and looks for correlations.

The product changes. Sources get added, and occasionally one has to be dropped because the service behind it closed its API or changed its rules. Features get built and, more rarely, removed. If something material goes away, we will say so rather than let you find out from an empty chart.

A correlation is a statistical observation about your own numbers, not a finding about the world and not a claim about cause. The app says so where it shows them, and it is worth saying here too.

Every source runs on a credential you supply — your own API key, or your own sign-in with that service. Collection only ever reads: nothing here writes to your accounts or moves anything on your behalf.

Those services have their own terms with you, and this agreement does not replace them. If one of them tells you a key may not be handed to a third party, that is between you and them, and connecting it here is your call to make. Their data is theirs to shape too — an upstream can rate-limit us, change a field, or go down, and when that happens the gap in your history is real rather than a display bug.

You can disconnect a source in the app at any time, which stops collection immediately, and revoke our access at the service itself. We would rather you had both routes.

You own everything you bring in and everything you type: your measurements, your journal, your goals, your dashboards. Nothing in these terms transfers any of it to us.

You give us exactly the permission the service needs to run — to store your data, process it, compute the charts and correlations you asked for, and show it back to you. That permission exists for operating the product and for nothing else. It ends when the data does.

It is never sold, never shared, and never used to train any model. That is structural rather than aspirational: subscriptions are the only money that comes in, so there is no second business here your data could be the raw material for.

You can download a complete copy of everything we hold, and you can permanently delete the account and everything under it — both from Settings in the app. The privacy policy is where both of those live, along with the timescale we commit to.

• One plan with everything in it: $7 a month, or pay what you want annually starting at $42. Every annual amount buys the identical product.
• The trial is 30 days and takes no card. When it ends, nothing is charged — you subscribe deliberately or you do not.
• Subscriptions renew automatically at the price and period you chose, until you cancel. Cancelling is a couple of clicks in the app.
• Whatever you pay when you subscribe is what you keep paying for as long as the subscription stays active. When prices rise, they rise for new subscribers.
• Payment runs on Stripe's own checkout page, so card numbers never reach our servers. Stripe's terms apply to the payment itself.
• Prices are in US dollars and exclude any tax that applies where you live.

If a payment fails, Stripe retries it and we do not delete anything in the meantime — a lapsed subscription behaves exactly as described below.

Cancel any time, with no retention dance and no phone call. The subscription then runs to the end of the period you have already paid for.

After that it lapses, and lapsing is deliberately gentle: you keep read access to everything you have already collected. What stops is the part that costs us money to run — new collection, and writing anything new. Nothing is deleted, and your history is waiting if you come back. This is not a free tier; it is the difference between leaving and being locked out.

We do not pro-rate a refund automatically. If you were charged for a renewal you did not want, or paid for a year and thought better of it early, email and ask — we would rather refund the money than keep it from somebody who feels they got nothing for it. Stripe keeps its own record of payments regardless, because tax law requires it to.

Very little is off limits, and all of it is the obvious stuff. Do not:

• Upload or collect somebody else's personal data without their knowledge and permission. Health data belonging to a person who did not agree to be here is the one thing that would genuinely hurt somebody.
• Attack the service — probe it, overload it, or try to reach another account's data. Security research is welcome; tell us first and you will get a real answer from a real person.
• Resell the service, or run it as a data pipeline for someone else's product.
• Automate the app in a way that generates load a person could not. A script that reads your own data at a sane rate is fine; a scraper is not.
• Use it for anything illegal where you are.

QuantifiedLife measures and it draws. It does not diagnose, treat, or advise, it is not a medical device, and nothing in it has been reviewed by any health regulator. A number here that worries you is a reason to talk to a doctor, not a substitute for having done so — and a number here that reassures you is not a clean bill of health.

Do not use it to make a decision about medication, treatment, or an emergency. The measurements come from consumer hardware and third-party services, and both are wrong sometimes.

This is a small, independent product. We work hard to keep it up and we do not promise a percentage: there is no uptime guarantee, maintenance happens, and so do outages.

Accuracy has an upstream limit we cannot engineer past: what a strap, a watch or a bank feed reports is what we store, gaps and all. We will not silently invent a value to fill a hole, and where a chart cannot honestly be drawn it says so instead.

The service is provided as it is, without warranties of any kind — express or implied, including merchantability, fitness for a particular purpose, and non-infringement — to the extent the law where you live allows that. Some places do not, and there your local protections still apply in full.

If we owe you something, what we owe is capped at the amount you paid us in the twelve months before it happened. For most people that is a few tens of dollars, and we would rather write that plainly than bury it in capital letters.

We are not liable for indirect or consequential losses — lost profits, lost opportunities, or a decision you made because of a number on a chart. Nothing here limits liability that the law does not let us limit, including for fraud, and nothing here takes away a consumer right you have where you live.

You can leave whenever you like: cancel the subscription, or delete the account outright. Deletion stays available even when a subscription has lapsed — holding somebody’s data hostage until they pay to remove it is not a business we are in.

We can suspend or close an account that is doing one of the things in Using it fairly, or that we are legally required to close. Except where the reason makes it impossible, you get told first, with enough notice to take a copy of your data with you.

If we ever shut the service down, you get notice well before the lights go out and a window to take everything with you — not an email on the last day.

When these terms change, the date at the top changes with them. Anything material is written here before it takes effect rather than after, and continuing to use the service once it has taken effect is how you accept it. If you would rather not, cancel — and if the change is one you object to mid-period, ask for the rest of that period back.

QuantifiedLife is operated from the United States and these terms are read under United States law.

There is deliberately no arbitration clause and no class-action waiver here. Clauses like those exist to make a dispute expensive enough not to happen, and nothing about a $7 subscription justifies putting one in front of you. Whatever rights your local consumer-protection law gives you, you keep — including the right to bring a complaint where you live.

If something goes wrong, the fastest route is almost always the first one: email privacy@quantifiedlife.io and a person will read it. If a clause here turns out to be unenforceable where you are, the rest of the agreement still stands.

One address, and a person reads it: privacy@quantifiedlife.io. Questions about anything above, a refund, a security report, or an argument with a clause — all of it goes there.

The two documents next to this one: Privacy for what happens to your data, and Security for how it is protected.