Privacy Policy

Lively ("Lively", "we", "us") makes a daily routine and habit-tracking app for iOS. This policy explains what information Lively collects, how it's used, and the choices you have. It also covers our website, livelyapp.co. If anything here is unclear, email us at hello@livelyapp.co and we'll explain it properly.

Information we collect

Lively collects information you give us directly, and information created as you use the app:

• Account information: email address, username, name and display name, plus anything you choose to add to your profile: a profile photo, date of birth, phone number and postal address.
• Content you create: routines, tasks, habits, categories, completions, annual goals, shopping lists, meal plans and recipes (including any recipe photos you add), and entries you add for people in your life, such as their names, photos, birthdays, addresses and important dates (including any supplement or medication information you choose to record for yourself or a dependant).
• Social activity: friend connections, points, and leaderboard/newsfeed activity, only for the social features you choose to use.
• Calendar data, only if you choose to connect Apple, Google, or Outlook calendar. See the dedicated section below.
• Apple Health step count, only if you choose to connect Apple Health. This stays on your device. See the dedicated section below.
• Purchase information: if you subscribe, Apple's App Store handles billing directly. Lively never sees or stores your payment card details, only the subscription status Apple reports back.
• Recipe text you paste in: if you use Paste Recipes, the text you paste is sorted into recipes on your iPhone, using Apple Intelligence where your device supports it. That processing happens entirely on your device and the pasted text is never sent to us or anyone else. Only the recipes you choose to save are stored in your account.
• Crash reports: the Lively app doesn't use any third-party analytics or crash-reporting tools. If you've chosen to share analytics with app developers in your device's settings, Apple may send us anonymous crash reports, which we use only to fix problems.

Calendar access, specifically

Calendar integration is entirely optional and off by default. If you connect a calendar, Lively reads (never edits, deletes, or creates) event titles, dates, and times so they can appear alongside your routines in My Day. Nothing is added back to your calendar, and calendar data is never sold, never used for advertising, and never shared with anyone except as strictly necessary to show it back to you inside the app.

• Apple Calendar is accessed on-device via Apple's EventKit framework, using the permission you grant directly to Lively in iOS Settings. Lively never receives an Apple account credential. Access is entirely local to your device.
• Google Calendar is accessed via Google's Calendar API using a read-only scope (calendar.readonly), after you sign in and grant consent through Google's own sign-in screen. You can revoke this at any time from your Google Account's connected apps settings, or by disconnecting the calendar inside Lively.
• Outlook / Microsoft 365 Calendar is accessed via Microsoft Graph using a read-only scope (Calendars.Read), after you sign in and grant consent through Microsoft's own sign-in screen. You can revoke this at any time from your Microsoft account's app permissions, or by disconnecting the calendar inside Lively.

Apple Health (HealthKit)

Connecting Apple Health is entirely optional and off by default. If you connect it, Lively uses Apple's HealthKit framework to read your daily step count (including steps recorded by Apple Watch) so it can track your progress against your daily step goal in My Day. Lively reads step count only: it never reads any other Health data, and never writes anything to Apple Health.

• Stays on your device. Step data read from Apple Health is stored only on your device. It is not uploaded to our servers or stored in iCloud.
• Never used for advertising. Health data is never used for advertising, marketing, or profiling, and is never sold or shared with third parties, including other Lively users.
• You're in control. You can stop Lively reading your steps at any time in Settings → Apple Health inside Lively, or remove access entirely in the Health app → Sharing → Apps → Lively.

How we use information

• To provide the app itself, and keep your data in sync across your devices.
• To power features you opt into, like reporting, annual goal progress, and the friends leaderboard.
• To send occasional service emails, such as a welcome email when you sign up, or a notification when you win the weekly leaderboard, but never marketing emails without your consent.
• To keep the app secure and diagnose problems when something breaks.

Who we share information with

Lively does not sell your data. Information is shared only with the service providers that make the app work:

• Google Firebase: authentication, database storage, and push notifications.
• Google Calendar API / Microsoft Graph API: only for accounts that connect those calendars, as described above.
• Resend: delivery of transactional emails (e.g. the welcome email).
• Apple: subscription billing via the App Store, on-device calendar access via EventKit, and on-device step count access via HealthKit.
• Meta Platforms: to measure our Facebook and Instagram ads. On our website, only if you accept advertising cookies (see Cookies on our website). In the app, only the limited ad-measurement events described in Ad measurement in the app. Your routines, tasks, health data and anything else you create in Lively are never shared with Meta.
• Formspree: receives what you enter into the forms on our website (the waitlist, contact and support forms), such as your name, email address, company and message, and passes it on to us by email. We use it only to reply to you or, for the waitlist, to tell you about the launch. When you create a Lively account in the app, Formspree also passes us a one-off sign-up notification containing your name, email address, phone number, age and, if you share them, your reasons for using Lively, so we can welcome new members and understand who Lively is for. Formspree is based in the US, so this information may be processed outside the UK.

Some information is visible to other Lively users by design: your username, display name, profile photo and points appear on the leaderboard. If you use the friends features, your friends also see in their News Feed when you complete a task or hit a streak, but never what the task was. The names and details of your routines, tasks, health entries and anything else you create are private to your account.

Cookies on our website

Our website, livelyapp.co, uses the Meta Pixel, an advertising tool from Meta Platforms Ireland Limited (the company behind Facebook and Instagram). We use it to measure how well our Facebook and Instagram ads work, for example how many people visit our site after seeing an ad, and to show our ads to people who may be interested in Lively.

• Only with your consent. The Meta Pixel doesn't run until you choose Accept on the cookie banner. If you choose Reject, or ignore the banner, it never loads and no advertising cookies are set.
• What it collects. If you accept, Meta receives the pages you visit on our site, your IP address, basic browser and device information, and cookie identifiers (such as the _fbp cookie, which lasts up to 90 days). If you're logged in to Facebook or Instagram, Meta may link this to your account. Meta uses this information under its own Privacy Policy, and may process it outside the UK.
• Changing your mind. You can withdraw or give consent at any time using Cookie settings, also linked at the bottom of every page. You can also manage how Meta uses your information for ads in your Facebook or Instagram ad preferences.
• Remembering your choice. We store your cookie choice in your browser's local storage so we don't ask again on every visit. This is strictly necessary and isn't used for tracking.

Ad measurement in the app

From version 1.2, the Lively app includes Meta's software development kit (the Meta SDK) so we can tell whether our Facebook and Instagram ads lead to people downloading Lively, creating an account and subscribing. This helps us stop paying for ads that don't work.

• What Meta receives. That the app was installed and opened, that an account was created, and when someone subscribes, which plan they chose and its price. Along with these events the SDK sends basic device information (such as device model, iOS version, language and IP address). It never sends your name, email address, routines, tasks, health data, calendar events, photos or anything else you create in Lively.
• Your choice on tracking. After you create an account, iOS asks whether Lively may track your activity. Only if you choose Allow does Meta receive your device's advertising identifier, which lets it match the app to an ad you saw. If you choose Ask App Not to Track, Meta receives no advertising identifier and only counts results in aggregate. You can change this any time in Settings > Privacy & Security > Tracking.
• How Meta uses it. Meta processes this information under its own Privacy Policy and may process it outside the UK. We don't sell your data, and we don't use it for anything other than measuring and improving our own ads.

Data retention and deletion

We keep your information for as long as your account is active. You can delete your account and the data associated with it at any time inside the app, from your Profile → Delete Account. You can also email hello@livelyapp.co from the address on your account and we'll action it promptly.

How we protect your data

Sensitive information, including calendar data and any health or medication entries you choose to record, is protected using the following safeguards:

• Encryption in transit. All data sent between the app and our servers travels over TLS-encrypted (HTTPS) connections, including calendar data retrieved from Google, Microsoft, or Apple.
• Encryption at rest. Data stored in our database (Google Cloud Firestore) is encrypted at rest by Google Cloud's infrastructure.
• Access controls. Server-side security rules are enforced on every single request, so an account can only ever read or write its own data. This isn't just hidden in the app's interface, it's enforced independently of it. Fields needed for social features (like your username and points) are the only parts of your account visible to other signed-in users.
• Authentication. Access to your account requires signing in through Firebase Authentication. Connecting a calendar additionally requires you to separately authenticate and grant consent through Google's, Microsoft's, or Apple's own sign-in screen. Lively never receives or stores your Google, Microsoft, or Apple account password.
• Minimal use. Calendar data is used only to display your events inside the app, is never used for advertising or profiling, and is never sold or shared with third parties beyond the calendar providers themselves.

Children's privacy

Lively is not directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes in a meaningful way, we'll update the effective date above. Continued use of Lively after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Email hello@livelyapp.co.