Privacy Policy

Lively ("Lively", "we", "us") makes a daily routine and habit-tracking app for iOS. This policy explains what information Lively collects, how it's used, and the choices you have. If anything here is unclear, email us at hello@livelyapp.co and we'll explain it properly.

Information we collect

Lively collects information you give us directly, and information created as you use the app:

• Account information — email address, username, display name, and an optional profile photo.
• Content you create — routines, tasks, habits, categories, completions, annual goals, shopping lists, and entries you add for people in your life (including any supplement or medication information you choose to record for yourself or a dependant).
• Social activity — friend connections, points, and leaderboard/newsfeed activity, only for the social features you choose to use.
• Calendar data, only if you choose to connect Apple, Google, or Outlook calendar — see the dedicated section below.
• Purchase information — if you subscribe, Apple's App Store handles billing directly. Lively never sees or stores your payment card details, only the subscription status Apple reports back.
• Basic technical information — standard crash and performance diagnostics used to keep the app working reliably.

Calendar access, specifically

Calendar integration is entirely optional and off by default. If you connect a calendar, Lively reads (never edits, deletes, or creates) event titles, dates, and times so they can appear alongside your routines in My Day. Nothing is added back to your calendar, and calendar data is never sold, never used for advertising, and never shared with anyone except as strictly necessary to show it back to you inside the app.

• Apple Calendar is accessed on-device via Apple's EventKit framework, using the permission you grant directly to Lively in iOS Settings. Lively never receives an Apple account credential — access is entirely local to your device.
• Google Calendar is accessed via Google's Calendar API using a read-only scope (calendar.readonly), after you sign in and grant consent through Google's own sign-in screen. You can revoke this at any time from your Google Account's connected apps settings, or by disconnecting the calendar inside Lively.
• Outlook / Microsoft 365 Calendar is accessed via Microsoft Graph using a read-only scope (Calendars.Read), after you sign in and grant consent through Microsoft's own sign-in screen. You can revoke this at any time from your Microsoft account's app permissions, or by disconnecting the calendar inside Lively.

How we use information

• To provide the app itself, and keep your data in sync across your devices.
• To power features you opt into, like reporting, annual goal progress, and the friends leaderboard.
• To send occasional service emails, such as a welcome email when you sign up, or a notification when you win the weekly leaderboard — never marketing emails without your consent.
• To keep the app secure and diagnose problems when something breaks.

Who we share information with

Lively does not sell your data. Information is shared only with the service providers that make the app work:

• Google Firebase — authentication, database storage, and push notifications.
• Google Calendar API / Microsoft Graph API — only for accounts that connect those calendars, as described above.
• Resend — delivery of transactional emails (e.g. the welcome email).
• Apple — subscription billing via the App Store, and on-device calendar access via EventKit.

Some information you add is visible to other Lively users by design — for example your username and points appear on the leaderboard, and friends can see the details you'd expect a friend to see. Anything else you create (routines, tasks, health entries, etc.) is private to your account.

Data retention and deletion

We keep your information for as long as your account is active. To delete your account and the data associated with it, email hello@livelyapp.co from the address on your account and we'll action it promptly.

How we protect your data

Sensitive information — including calendar data and any health or medication entries you choose to record — is protected using the following safeguards:

• Encryption in transit. All data sent between the app and our servers travels over TLS-encrypted (HTTPS) connections, including calendar data retrieved from Google, Microsoft, or Apple.
• Encryption at rest. Data stored in our database (Google Cloud Firestore) is encrypted at rest by Google Cloud's infrastructure.
• Access controls. Server-side security rules are enforced on every single request, so an account can only ever read or write its own data — this isn't just hidden in the app's interface, it's enforced independently of it. Fields needed for social features (like your username and points) are the only parts of your account visible to other signed-in users.
• Authentication. Access to your account requires signing in through Firebase Authentication. Connecting a calendar additionally requires you to separately authenticate and grant consent through Google's, Microsoft's, or Apple's own sign-in screen — Lively never receives or stores your Google, Microsoft, or Apple account password.
• Minimal use. Calendar data is used only to display your events inside the app, is never used for advertising or profiling, and is never sold or shared with third parties beyond the calendar providers themselves.

Children's privacy

Lively is not directed at children under 13, and we don't knowingly collect information from them.

Changes to this policy

If this policy changes in a meaningful way, we'll update the effective date above. Continued use of Lively after a change means you accept the updated policy.

Contact us

Questions about this policy or your data? Email hello@livelyapp.co.