---

name: data-portability description: Data import/export and GDPR compliance. Use when working with user data export, import, or privacy features.

Data Portability Skill

Overview

LifeOS provides data portability for backup/migration and external imports. GDPR compliant.

Core Requirements

Export Types

Type	Format	Contents
Full	JSON/ZIP	All user data
Partial	JSON	Selected data types
Wealth	CSV	Transactions, accounts
Health	CSV	Health metrics

Import Sources

Source	Format	Target
LifeOS Backup	JSON	Full restore
Financial CSV	CSV	Transactions
Health CSV	CSV	Health metrics
Plaid	API	Bank transactions

GDPR Rights

• Access: Full data export on request
• Erasure: Account deletion with 14-day cooling-off
• Portability: Structured JSON/CSV exports
• Rectification: All personal data editable

API Endpoints

Method	Endpoint	Purpose
POST	/api/export/full	Request full export
POST	/api/export/partial	Partial export
GET	/api/export/download/{id}	Download export
POST	/api/import/upload	Upload file
POST	/api/import/process	Process import
POST	/api/plaid/link-token	Get Plaid token
POST	/api/plaid/sync	Sync transactions

User Flows

Export Data

1. Navigate to /settings/data
2. Select export type (full or partial)
3. Choose format and options
4. Export queued → Email when ready
5. Download link (expires 24h)

Import Data

1. Navigate to /settings/data → Import
2. Upload file (CSV or JSON)
3. Preview data and confirm mapping
4. Process import
5. View results

Plaid Connection

1. Click "Connect Bank" → Plaid Link opens
2. Authenticate with bank
3. Select accounts
4. Transactions sync automatically (daily thereafter)

Export Format (JSON)

{
  "exportVersion": "1.0",
  "exportDate": "2026-01-23T10:00:00Z",
  "user": { "profile": {}, "settings": {} },
  "wealth": { "accounts": [], "transactions": [] },
  "health": { "metrics": [], "entries": [] },
  "dimensions": [], "tasks": [], "reviews": []
}

Account Deletion

1. User requests deletion
2. 14-day cooling-off (can export first)
3. Hard delete all data after 14 days
4. Confirmation email sent

Security Requirements

• Exports require recent authentication
• Optional password encryption
• Export links expire 24h
• Import file validation (100MB max)
• Transactional import (rollback on error)
• Plaid tokens encrypted at rest, never sent to frontend

Testing (Playwright MCP)

• Test export wizard at /settings/data
• Verify CSV import with preview
• Test column mapping flow
• Verify Plaid Link modal
• Test account deletion flow

Design Doc References

• Security: .gaia/designs/security.md - Data protection
• API: .gaia/designs/api.md - Export/import endpoints

When to Invoke

Use when: adding export formats, import sources, Plaid integration, GDPR features, account deletion.