The Common Room App · Lifework Lab
Last updated: June 2026
The Common Room App is operated by Lifework Lab Limited. Dr Jonathan Collie is the data controller responsible for your personal data.
Contact: contact@lifework-lab.com
| Data | Required? | Purpose |
|---|---|---|
| Full name | Yes | Account identity |
| Email address | Yes | Authentication and account emails |
| Password | Yes | Encrypted — never stored in readable form |
| Gender | Optional | Aggregate service insight only |
| Year of birth | Optional | Aggregate service insight only |
| Home postcode | Optional | Aggregate service insight only |
| ADOPT theme selections | Activity | Core service function — up to 10 themes |
| AI Points of Reflection | Activity | Generated from theme data only — no personal details sent to the AI |
| Personal notes | Activity | Private free-text space, stored at your request |
Optional fields may be left blank. You can update or remove them at any time by contacting us.
| Purpose | Lawful basis |
|---|---|
| Account creation and authentication | Contract (Art. 6(1)(b)) — necessary to provide the service |
| ADOPT selections, dashboard, and reflections | Contract (Art. 6(1)(b)) — core service function |
| Personal notes | Contract (Art. 6(1)(b)) — stored at your explicit request |
| Optional demographic data | Consent (Art. 6(1)(a)) — entirely voluntary |
| Aggregate service analytics | Legitimate interest (Art. 6(1)(f)) — anonymised counts only, no profiling |
We do not use automated decision-making that produces legal or similarly significant effects. AI reflections are for personal reflection only — they carry no consequences for access to services, employment, healthcare, or support.
| Processor | Data shared | Safeguard |
|---|---|---|
| Supabase | All user data — stored in EU region | Row-Level Security on all tables; encrypted passwords; EU hosting; DPA in place |
| Anthropic (Claude API) | Theme names and descriptions only — no name, email, postcode, or notes | API key held server-side only, never in the browser |
| Vercel | HTTP request metadata only — no personal data stored | HTTPS enforced; DPA in place |
No personal data is transferred outside the UK/EU without adequate safeguards. Your data is never sold, shared with advertisers, or used for any third-party purpose.
All data is retained for the life of your account. If you request deletion of your account, all your data — themes, reflections, notes, and profile — is permanently removed within 14 days.
Accounts with no activity for 24 months will be flagged for review. We will contact you before taking any action.
Under UK GDPR, you have the right to:
To exercise any right, email contact@lifework-lab.com. We will acknowledge within 2 working days and respond in full within 14 days.
We may update this policy when we make material changes to how we process data. We will notify registered users by email before any significant change takes effect.
The Common Room is run by Lifework Lab · Data controller: Jonathan Collie