← Dahlia

Privacy Policy

Last updated: August 2026

The short version

Dahlia is operated by LifePath (“we,” “us”). Dahlia is built so that what you write stays yours. There is no account, no email sign-up, and no profile. Your entries are encrypted on your device before they are stored, and we cannot read them. We do not use third-party analytics, advertising trackers, or generative AI on your content.

No account, no email

Your vault has no username, email address, or phone number attached to it. It is protected by a PIN that you choose, and your vault ID is stored only on your device. If someone finds your phone, they cannot open your vault without your PIN.

Your entries are encrypted on your device

Every entry is encrypted in your browser with AES-GCM before it is sent anywhere. Our servers store only the encrypted result — ciphertext we cannot decrypt. Media attachments (photos, audio, video) are also encrypted on your device.

When you save an entry, your browser also computes a SHA-256 content hash — a mathematical fingerprint that can later prove the entry was not altered. The hash is computed on your device; your plaintext never touches our servers.

Trusted contacts and SOS alerts

If you add trusted contacts, we store their names and contact details (phone number, and optionally email and mobile carrier) so that alerts can reach them. That is the only reason this information exists in Dahlia.

Your location is never tracked in the background. Location is shared only while an SOS alert that you activated is running, and only with the contacts you designated, through a link that expires. Alerts are delivered by email (via Resend), SMS (via carrier email gateways), and optional browser push notifications.

Attorney portals and exports

You can create time-limited, read-only portal links for an attorney or advocate, and revoke them at any time. Export packages are generated at your request and contain only what you choose to include.

What we do not do

  • No third-party analytics or advertising trackers.
  • No sale or sharing of your data with anyone, for any reason.
  • No generative AI is used to create or analyze your private content.
  • No background location tracking — ever.

Crisis resources

Dahlia includes a directory of crisis and support resources. This directory is informational only; viewing it sends nothing to anyone.

Contact

Questions about this policy? Email privacy@golifepath.com.