1. A method performed under control of a life-log system, comprising: receiving, from a user account, a request to change one or more real life-log data entries relating to a real event that are stored in a first part of a database; removing the one or more real life-log data entries relating to the real event from the first part of the database; storing, in the first part of the database, one or more misleading life-log data entries relating to a false event corresponding to the real event; and storing the removed one or more real life-log data entries in a second part of the database.