Privacy Notice (Draft)

Status: DRAFT — prepared by an AI coding assistant, not a lawyer.
This describes what the app's code actually does today, verified against
the source in index.html. Have counsel review before publishing this as
a binding privacy policy, and update it immediately if the architecture
changes (e.g., if a backend is added later).

Last verified 2026-07-17, updated for the paid export (Stripe) and Cloudflare Web Analytics.

Short version

Life Tunnel processes your photos, videos, and music entirely in your browser — they are never uploaded anywhere. The only things that leave your device are (a) a payment you choose to make, handled by Stripe on Stripe's own pages, and (b) anonymous, cookieless page-view metrics (Cloudflare Web Analytics). There are no accounts, no advertising trackers, and no personal-data cookies.

What the app does with your content

When you use "Add photos," "Full life" media upload, or "Upload music":

• Each file you choose is read locally by the browser using

URL.createObjectURL() and shown directly on the page (as a 3D texture or an audio track).

• The file is never uploaded, transmitted, or copied to any server.

We verified the app's only network requests are: loading its own code, fonts, and bundled assets; and — only when you start or finish a purchase — two calls to our payment endpoints (/api/checkout, /api/verify), which carry no media and no personal data beyond the Stripe checkout-session reference.

• The file only exists in your browser's memory for the current tab. It is

released when you remove it, replace it, or close/reload the page.

• We do not see, store, or have access to anything you load into the app.

What the app does NOT do

• No account creation, login, or identity collection.
• No cookies or local storage of personal data.
• No advertising trackers, fingerprinting, or cross-site tracking scripts.
• No sharing of any uploaded content with any third party, because it is

never transmitted anywhere.

Payments (Stripe)

Unlocking the paid export happens on a checkout page hosted by Stripe, Inc. — you leave the app for Stripe's page and return afterwards.

• Your card number, name, and billing details are entered on Stripe's

page and go only to Stripe. We never receive, see, or store them.

• What our payment endpoint receives from Stripe is: whether a given

checkout session was paid, and which tier was bought. From that it issues an "unlock" that is stored in your own browser (see below). We keep no customer database.

• Stripe processes your payment data as an independent business;

see Stripe's privacy policy. Your Stripe receipt email comes from Stripe.

Analytics (Cloudflare Web Analytics)

The site uses Cloudflare Web Analytics, a privacy-first measurement tool that is cookieless: it sets no cookies, stores nothing on your device, and does not fingerprint or track you across sites. It gives us only aggregate counts (page views, country-level origin, browser type) so we can tell how many people use the app. See Cloudflare's description for details.

Local storage of preferences

The app stores three non-personal items in the browser's localStorage, used only to remember settings on your next visit:

• life4d-lang — your chosen interface language (English or Spanish).
• life4d-onboarded — a flag so the first-visit welcome tour is not shown

again.

• life4d-unlock — present only after a purchase: the tier you bought,

its expiry date, and an opaque signed token. It contains no name, email, or payment details.

None of these is personal data. The video export feature creates the video file entirely in your browser and hands it to you as a download; the file is never uploaded anywhere.

Bundled demo content

The app ships with a default 85-image demo set (mateo-life-photos/) and music tracks (vision-4d-life-audio/) depicting a fictional person ("Mateo"). These are AI-generated assets bundled with the app itself, not data collected from any real user. See THIRD_PARTY_NOTICES.md for their licensing status.

Children's data

If a user uploads photos, videos, or audio involving children, that content is handled the same way as any other upload: it stays local to the browser and is never transmitted. The user uploading such content is responsible for having the right to do so (see TERMS.md).

Changes to this notice

Because this describes actual, verifiable code behavior rather than a policy choice, this notice must be re-reviewed any time the app's architecture changes — for example, if a backend, sync feature, cloud save, or analytics SDK is added. Counsel should treat this document as tied to a specific version of the code, not evergreen.

Contact

This app is operated by m8apps (mefit.app).

• Email: [email protected]
• Address: 539 Q Commerce St, #835

This notice is governed by the laws of the State of Delaware, United States. Where the mandatory data-protection law of your own country gives you rights that cannot be contracted away — for example under the GDPR or the UK GDPR — those rights continue to apply.