LifeHub Security Statement
Last updated: July 16, 2026
Overview
LifeHub is committed to protecting the fitness, finance, habits, goals, and connected financial data you trust us with. This page explains the security measures we use to help keep your account and data safe.
Securing your data in transit
Communication between your browser and LifeHub is protected using HTTPS/TLS when you access LifeHub through the live website.
Securing your data at rest
Sensitive account data and Plaid access tokens are encrypted at rest on LifeHub's server before storage. LifeHub also uses server-side secrets, secure cookies on HTTPS, CSRF checks for sensitive actions, and account-specific access controls.
Sign-in and multi-factor authentication
LifeHub requires multi-factor authentication for account access. After password sign-in, you must confirm access with a one-time security code sent by email, or by text message when SMS security codes are enabled and a phone number is saved to your profile, before saved dashboard data or connected financial data is unlocked.
Bank data via Plaid
LifeHub uses Plaid to securely connect supported bank, brokerage, retirement, and financial institution accounts. LifeHub does not store your bank username or bank password. Plaid handles the secure connection flow and provides LifeHub with read-only financial data needed to display balances, transactions, holdings, and refresh status.
Your data, your control
You can disconnect financial accounts from the Profile section. You can also permanently delete your LifeHub account from Profile settings. Account deletion removes active profile data, dashboard data, login sessions, and saved Plaid connection data, and attempts to revoke Plaid access. Backup copies, if any, may take up to 30 days to age out of backup systems.
Current limitations
LifeHub is an early-stage product. LifeHub does not currently claim SOC 2, PCI DSS, HIPAA, or other independent security certifications. Authenticator-app MFA, formal security audits, login alerts, and expanded data export tools are planned improvements as the product grows.
Ongoing commitment
We will continue improving LifeHub's security practices as the product matures. This page will be updated as security controls, vendors, and practices evolve.
Questions or security concerns
If you have questions about LifeHub security practices or want to report a potential issue, contact Justin Burns, the LifeHub website owner, at security@lifehubbapp.com. This inbox is monitored for security questions, privacy requests, account deletion requests, and website-owner contact.