Governance and security contact
- Life Dashboard is operated by Apex Leadership LLC.
- Security and privacy oversight currently sits with Nathan Musolff, Founder.
- Security inquiries can be sent to admin@lifedashboardapp.com.
Security and control
Designed for sensitive personal data with a narrow, reviewable product posture.
Life Dashboard handles health, financial, calendar, and communication context. That requires a serious approach to consent, access control, encryption, deletion, and reviewer clarity.
Documented policies and access governance
- Operational access to production systems is intended to be limited to authorized personnel only.
- Administrative access is expected to follow least-privilege principles.
- Security, privacy, access, and retention requirements are treated as product-operating requirements, not marketing claims.
User-controlled connections
- Connections are optional.
- Users can disconnect sources without giving up the entire product.
- Manual logging remains available where appropriate.
MFA and account protection
- Administrative access to critical systems should be protected with multi-factor authentication wherever supported.
- Consumer-facing connection flows may also involve additional verification requirements presented by the underlying provider.
- Authentication and access controls are intended to reduce unauthorized access to connected personal data.
Read-only financial posture
- Financial aggregation is intended to be read-only where supported by the connection provider.
- The product is not built to move money, initiate payments, lend money, trade assets, or act as a financial institution.
- Finance context exists for personal finance tracking, budgeting visibility, and decision quality.
Encryption and hosted infrastructure
- Data is intended to be protected in transit using modern TLS-based encryption.
- Stored consumer data is intended to reside on infrastructure that supports encryption and operational security controls appropriate for hosted software products.
- Connected-source data handling is designed around minimizing unnecessary exposure and limiting processing to product functionality.
Vulnerability management
- Security maintenance includes dependency review, patching, and software-lifecycle attention as part of normal product operations.
- Production systems and developer environments are expected to be maintained with current security updates and access protections.
- Identified issues are intended to be reviewed and remediated according to risk and operational impact.
Deletion, retention, and disconnect paths
- Users can request deletion of their account and data.
- Connections can be revoked or disconnected.
- Retention decisions are intended to balance product operations, legal obligations, fraud prevention, and user requests.
AI is not the scoring engine
- Core category scoring is deterministic rather than model-generated.
- AI is used intentionally for limited parsing and user-invoked assistance.
- Connected fitness and activity data are not used for AI or machine-learning model training.
- The product is designed so not every dashboard action requires an AI call.
What this page is for
This page exists to make the product's security and data-control posture legible to users, reviewers, and partners. It is a product-facing summary, not a certification or compliance claim.
What it does not claim
Life Dashboard does not claim HIPAA status, medical-device status, financial-advisor status, or bank/broker status. It is not presented as a payments product or financial institution.