LIV Privacy Policy

About this policy

LIV is a private wellness, reflection, and life-planning app operated by Martin Jenssen in Norway. This policy explains what LIV processes, why it is needed, and the choices available to you. LIV is not a medical service and does not provide diagnosis, treatment, or emergency support.

Information LIV processes

• Account information: Clerk processes the name, email address, sign-in provider details, and account identifier needed to authenticate you.
• LIV records: Convex stores owner-scoped routines, completions, step and sleep records, journal entries, Life Receipts, protected-time plans, Tomorrow Tray items, settings, Coach conversations, approved Coach memories, and related source/provenance metadata.
• Optional Apple Health information: LIV requests read-only access only to the types you select: steps, resting heart rate, and body mass. Steps and resting heart rate are reduced on the iPhone to one value for LIV’s Europe/Oslo 04:00–04:00 routine day. Individual resting-heart-rate samples are not uploaded. Body-mass entries retain their observation times. Missing or declined values remain unknown.
• Coach information: After you expressly allow OpenAI access, LIV may send the message you submit and a compact set of relevant LIV context to OpenAI to generate a Coach response. Context can include selected recent records, profile preferences, memories you explicitly approved, and Health values only when you separately enabled Coach use for that metric. LIV’s server requests store: false; OpenAI’s applicable API data-processing and abuse-monitoring terms still govern its processing.
• Voice drafts: Apple Speech may process microphone audio to create an editable text draft. LIV does not save the recording and never auto-sends the transcript. Only text you choose to send becomes a Coach message.

Why LIV uses information

LIV uses these categories only for app functionality: authenticating and securing the account, syncing your private records, computing Today and History, showing truthful trends, providing the Coach response you requested, exporting your data, and deleting your account. LIV does not use personal information for advertising, marketing profiles, cross-app tracking, or data brokerage, and it does not sell personal information.

Apple Health choices

Apple Health access is optional and read-only. Selecting a type in Apple’s permission sheet does not automatically send it off the device. For each type, private LIV sync is a separate setting that begins off. OpenAI Coach use is another separate setting that begins off and can be enabled only for a value that is allowed to sync to LIV.

Turning sync off stops future uploads but does not automatically erase values already stored in LIV. You can export your data or delete the LIV account copy. Revoking or deleting LIV data never deletes the source record in Apple Health.

LIV does not use Apple Health information for advertising, marketing, tracking, eligibility decisions, data brokerage, or unrelated profiling.

Service providers and transfers

LIV relies on the providers below to operate the app. These providers may process information in countries outside your own under their applicable terms, safeguards, and subprocessors.

• Clerk for authentication and account identity.
• Convex for the private application database, server functions, and scheduled work.
• OpenAI for optional Coach responses after consent.
• Apple Health and Apple Speech for optional on-device health access and voice transcription.

Retention and deletion

Owner-scoped LIV records remain in Convex until you edit or delete them, or until the service’s documented retention process removes them. Coach conversation history is part of those LIV records. Authentication information remains with Clerk according to the account lifecycle and Clerk’s terms. OpenAI processing follows the applicable API data controls even when response storage is disabled.

Settings provides an authenticated JSON export and in-app account deletion. Account deletion first removes the owner’s Convex records and then the Clerk identity; a recovery screen safely retries if only one step finishes. Temporary export files use complete file protection, unique names, and cleanup after sharing or when stale.

Deleting the LIV account does not delete source information held by Apple Health. Information may persist briefly in provider backups or security logs where required for security, legal compliance, or disaster recovery.

Your choices

• Use LIV manually without Apple Health or OpenAI Coach.
• Review or add selected Apple Health types in LIV and revoke access in iPhone Settings or Health.
• Separately control private sync and Coach use for each Health type.
• Allow, decline, or later revoke OpenAI Coach access.
• Edit or exclude approved Coach memories.
• Export all owner-scoped LIV data.
• Permanently delete the LIV account from Settings.

Depending on where you live, you may also have legal rights to access, correct, restrict, object to, or receive a copy of personal information. Contact martinkontakter@gmail.com to make a request.

Children

LIV is not directed to children and is not designed for a child to create an account. Household-care entries describe outcomes in the adult owner’s private record.

Changes

This policy may be updated when LIV’s features or service providers change. The effective date above will be updated, and material changes will be explained in the app or release notes when appropriate.

Contact

Privacy questions or requests: martinkontakter@gmail.com

Operator: Martin Jenssen, Norway