Account and household access
Life Admin requires a signed-in account for private reminders, documents, profiles, birthdays, events and household sharing. Access rules separate households and require a user to be an authorised household member before shared information can be read or changed.
Household invitations use a high-entropy invite token and require the signed-in account email to match the invited email. Destructive shared-household actions are restricted to the household owner.
Documents and uploads
Uploaded household files are protected by authenticated storage rules. Uploads are limited to 10 MB and an allowlist of supported document and image formats. Executable web content, SVG, audio, video and unsupported file types are blocked.
Users should keep independent copies of important records. Life Admin should not be the only copy of an important document.
Payments and Apple subscriptions
Stripe webhook signatures are verified before subscription access is changed. Apple purchase transactions and App Store Server Notifications are cryptographically verified before entitlement or subscription lifecycle updates are applied.
Life Admin does not store payment card details. Payment and App Store purchase information is processed by the relevant payment platform.
Transport and platform security
Life Admin uses standard HTTPS and the security capabilities provided by Apple, Firebase, Google Cloud, Vercel, Stripe and related infrastructure. We do not claim to use proprietary encryption algorithms.
Account deletion
Users can request account deletion from within Life Admin. The deletion process removes the authentication account, related profile and household-owned data, uploaded household files and linked support records, subject to limited legal, payment, security and backup retention requirements described in the Privacy Policy.
What users can do
- Use a strong, unique password.
- Keep devices, browsers and operating systems updated.
- Do not share sign-in credentials.
- Review household membership and invitations carefully.
- Keep backup copies of critical documents.
- Contact us promptly if account access looks unfamiliar.
Report a security issue
Email info@uxel.org with the subject “Security report”. Include the affected page or feature, clear reproduction steps and the potential impact. Do not access another person's account, download private data, disrupt the service or publicly disclose an unresolved issue.