Privacy Policy

Effective date: August 2, 2026

This Privacy Policy explains how Sierra Link LLC, a Florida (USA) limited liability company ("Sierra Link," "we," "us"), collects, uses, and shares personal information when you use the Livra iOS application (the "App") and the livralife.com website (the "Site").

Contact: contact@livralife.com

1. Summary

• We collect only what the App needs to work: your account details, your goals and habit data, and product analytics.
• Your Apple Health readings stay on your device; only whether a day qualified for a connected mark syncs to our servers, as a check-in.
• We do not sell your personal information, and we do not use it for third-party advertising.
• Payments are handled entirely by Apple; we never see your payment details.
• You can export your data and permanently delete your account from inside the App at any time.

2. Information we collect

2.1 Through the App

Account information. When you create an account we collect your name and email address — either entered directly (email sign-up) or provided by Apple when you use Sign in with Apple (name and email scopes). If you use Apple's "Hide My Email" private relay, we receive and support the relay address instead of your personal email.

Your content. Goals, marks (habits), notes on goals and marks, streaks, badges, daily targets, onboarding answers, and AI-generated goal plans are synced to your account so they follow you across reinstalls.

Profile picture (optional). If you choose to set one, the photo you pick (from your camera or library) is uploaded to our storage provider and stored under your account.

Apple Health data (optional). If you connect a mark to Apple Health, Livra reads your workouts, mindful sessions, steps, and sleep to automatically log check-ins for that mark and to power your weekly reflection. Connecting is optional, is part of Livra+, and always starts with the iOS permission prompt.

• Your health readings stay on your device. Livra checks each day against your mark and keeps only whether that day qualified — the underlying values, such as workout durations, step counts, sleep hours and water amounts, are discarded on your device and never sent to us.
• When a day qualifies, Livra creates a check-in for that mark. Those check-ins are synced to our servers like any other check-in, and are labeled as logged from Apple Health so you can tell them apart.
• Which marks you connected and the targets you set for them are kept on your device only.
• Our usage analytics record that a check-in was logged from Apple Health. They never carry your health readings.
• We never sell health data, and we never use it for advertising, marketing, or data mining.
• You can revoke Livra's access at any time in the iOS Health app under Sharing > Apps. Check-ins already logged stay in your history until you delete them.

AI goal generation input. When you use AI goal generation, the goal text you type and any optional context you add (up to 400 characters) are sent through our server to OpenAI to generate your plan. See Section 4.

When you create a goal from a draft, Livra saves the goal text you typed, a simplified copy of that text used to recognise repeat requests, and the generated plan, in your account on our servers. Asking for the same goal again returns that saved plan instead of calling the model a second time. A draft you discard is not saved. Database access rules limit these records to your own account.

Usage analytics. We use PostHog to understand how the App is used: events such as signing up, creating or completing a goal, logging a mark, viewing the paywall, and starting a subscription, plus screen views and error/crash reports. Analytics are tied to your account ID while you are signed in and reset when you sign out. Session recording is disabled.

Device data stored locally. The App keeps a local cache of your data on your device and stores your sign-in tokens in the iOS secure keychain. If you enable the Face ID app lock, biometric matching is performed by iOS — biometric data never leaves your device and is never available to us.

Notifications. Reminders you configure may be delivered as local notifications scheduled on your device or as remote push notifications sent through the Apple Push Notification service (APNs). To deliver remote push notifications, a device push token is processed by Apple; we do not use push tokens for any purpose other than delivering the notifications you asked for. You can turn notifications off at any time in iOS Settings.

2.2 Through the Site

• Analytics. The Site uses PostHog to measure page views, scroll depth, which sections are read, and App Store link clicks. Site analytics run in cookieless mode: no cookies or persistent identifiers are stored on your device, and measurements are not linked to you across visits. The Site sets no cookies.
• Suggestions you send us. The home page has a suggestion box. When you press send, the text you typed is sent to PostHog as an analytics event, together with its length, the time, and a label marking it as sent from the Site. The box asks for no name, email, or account, and the event carries no cookie or persistent identifier, so it is not linked to your other visits, to any other suggestion, or to a profile of you. Please leave personal information out of your suggestion; we cannot tie it back to you, but whatever you type is kept as part of the event. Suggestions are kept for the same period as our other analytics events (Section 6). If sending fails, the page offers to open an email to our support inbox with your text filled in instead; nothing is sent to PostHog in that case, and your email reaches us the way any email you send us would.
• Email verification page. If you verify your email through a link on the Site, the page reads a one-time token from the link, uses it once to mark your email verified, and never stores it.
• Server logs. Our hosting provider (Vercel) receives standard request data such as IP address and browser type in server logs.

2.3 Information we do NOT collect

We do not collect precise location, contacts, advertising identifiers, or payment card details. We do not run third-party advertising or ad SDKs of any kind.

3. How we use information

We do not use your information for third-party advertising, and we never use health data for advertising, marketing, or data mining.

4. Who we share information with

We share personal information only with service providers (processors) that help us run Livra:

We do not sell personal information and we do not share it for cross-context behavioral advertising. We may disclose information if required by law, or as part of a merger or acquisition (in which case this policy continues to apply until you are told otherwise).

5. Where the App is offered; data location

Our services are provided from the United States, and our servers are located in the United States. The App is offered in and directed to App Store markets that exclude the European Union and the United Kingdom; it is not marketed to, or intended for use by, individuals in the EU or UK, and this policy is not intended to create obligations under the EU or UK GDPR. If you use Livra from another country outside the US, your information is transferred to and processed in the US as described in this policy.

6. Retention and deletion

• Your account data and content are kept for as long as your account exists.
• Delete your account any time in the App: Settings → Delete Account. Deletion is immediate and permanent — your account and all associated data (goals, marks, notes, streaks, badges, AI packages, profile) are removed from our database by cascading deletion.
• Residual copies in encrypted backups are purged on a rolling basis.
• Analytics data, including suggestions you send through the Site, is retained only as long as needed for the purposes described in Section 3.
• You can also remove your saved AI goal drafts at any time without deleting your account, from Settings › Data › Delete Saved AI Drafts in the App. This removes every saved goal text from your account and does not affect the goals or marks you have already created. Deleting a goal on its own does not remove the saved text.

7. Your rights

7.1 Everyone

You can access and export your data (CSV export in the App), correct your profile, and delete your account in-app. For anything else, email us.

7.2 California residents (CCPA/CPRA)

In the last 12 months we collected these categories of personal information: identifiers (name, email, account ID, device push token), internet/electronic activity (analytics events, server logs, and any suggestion text you send through the Site), audio/visual (profile photo, if you add one), and inferences limited to product usage (e.g., momentum/streak statistics). Sources: you, your device, and Apple (Sign in with Apple). Purposes: as described in Section 3. We disclose these categories to the service providers in Section 4 for business purposes only. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months; we therefore do not offer a "Do Not Sell or Share" link. We do not knowingly collect personal information of consumers under 16. You have the rights to know, access, correct, delete, and to not be discriminated against for exercising them. Submit requests in-app (export/delete) or by email; we will verify requests using your account email. You may use an authorized agent with written permission.

7.3 Other US states

Residents of states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Texas, and others) have similar rights of access, correction, deletion, and portability, exercisable the same ways.

8. Children

Livra is a general-audience productivity app for tracking personal goals and habits; it is not directed to children under 13, and we do not knowingly collect personal information from children under 13. Creating a Livra account requires agreeing to our Terms of Use, which require you to be at least 13 years old (or older where your state's law sets a higher minimum for consenting to data processing). If we learn we have collected personal information from a child under 13, we will delete it. If you believe a child has created an account, contact us at contact@livralife.com.

9. Security

Data in transit is encrypted (TLS). Sign-in tokens are stored in the iOS secure keychain. Subscription receipts are verified server-side against Apple's signed payloads. Database access is protected by row-level security so each user can only reach their own rows. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

10. Changes to this policy

We will post any changes on this page and update the date above. For material changes we will notify you in the App or by email before they take effect.

11. Contact

Sierra Link LLC
Email: contact@livralife.com