Privacy Policy for Lifevate

Last Updated: November 24, 2025

Thank you for choosing Lifevate ("we," "us," or "our"). This Privacy Policy explains how we collect, use, protect, and share your personal and non-personal information when you use our AI-powered habit-tracking application and website located at https://lifevate.top (collectively, the "Service").

By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree with the practices described in this policy, please do not use the Service.

1. Information We Collect

1.1 Personal Data

We collect the following personal information from you:

Account Information:
- Name: To personalize your experience and identify you within the app
- Email: To send important notifications, reminders, and account updates
- Profile Photo (optional): To personalize your profile and display in social features

Payment Information:
- We collect payment details to process your subscription securely through Stripe
- We do not store your full payment information on our servers
- Only Stripe stores your payment card details in compliance with PCI-DSS standards

1.2 Habit & Activity Data

To provide our core service, we collect:

Habit Tracking Data:
- Habits you create, track, and complete
- Habit completion history, streaks, and progress
- Notes and custom fields you add to habits
- Timestamps of when you log habits

Optional Calendar Integration:
- If you choose to connect your calendar, we access calendar events to provide personalized habit recommendations
- Calendar data is processed locally on your device by default
- Calendar data is only synced to our servers if you enable cloud sync

Optional Location Data:
- If you enable location-based reminders, we collect location data when you arrive/leave specified places
- Location data is processed locally on your device
- We never share your location with third parties

Device & Activity Information:
- Focus mode status (to respect Do Not Disturb settings)
- Device timezone and language preferences
- Activity patterns to optimize reminder timing

1.3 Social Features Data

If you participate in social features:

Challenge Data:
- Challenges you create or join
- Your challenge progress and leaderboard standings
- Messages you send in challenge group chats
- Reactions and interactions with other users

Friend Connections:
- Users you connect with for challenges
- Your visibility preferences for sharing progress
- Public habit completions you choose to share

1.4 AI & Personalization Data

To provide personalized recommendations:
- Your interaction with Life Feed content (swipes, taps)
- Topics and content types you engage with
- AI-generated habit recommendations you accept or decline
- Smart reminder effectiveness patterns

1.5 Non-Personal Data

We collect non-personal data including:
- IP address, browser type, and device information
- Web cookies for authentication and preferences
- Analytics data about app usage and feature adoption
- Crash reports and error logs

2. How We Use Your Data

We use your information to:

Provide Core Services:
- Track your habits and calculate streaks
- Send smart reminders at optimal times
- Generate AI-powered habit recommendations
- Sync your data across devices

Improve Our Service:
- Analyze usage patterns to improve features
- Train AI models to provide better recommendations
- Identify and fix technical issues
- Develop new features based on user behavior

Communication:
- Send habit reminders and notifications
- Provide customer support
- Send important account updates
- Share product updates and tips (you can opt out)

Social Features:
- Enable challenges with friends
- Display leaderboards and progress sharing
- Facilitate group chat within challenges

Payment Processing:
- Process subscription payments
- Manage billing and invoicing
- Handle refunds and cancellations

3. Data Sharing & Third Parties

We share your data only in these limited circumstances:

Essential Service Providers:
- Stripe: For payment processing
- MongoDB Atlas: For secure data storage
- Resend: For transactional email delivery
- OpenAI: For AI-powered features (only if you use AI features)

These providers are contractually obligated to protect your data and use it only for providing services to us.

Social Features (With Your Consent):
- When you join a challenge, your name and progress are visible to other participants
- You control what habit data you share through visibility settings
- We never share your private habits without explicit permission

Legal Requirements:
- We may disclose your information if required by law, court order, or governmental authority
- We may share data to protect our rights, property, or safety

We do not:
- Sell your personal data to anyone
- Share your data with advertisers
- Use your data for purposes other than providing our service

4. Your Data Rights & Control

You have complete control over your data:

Access & Export:
- Download all your habit data in CSV or JSON format anytime
- Export data to Notion with one-click integration
- Request a copy of all data we hold about you

Deletion Rights:
- Delete individual habits or challenge history
- Delete your entire account from Settings
- Upon account deletion, all your data is permanently deleted within 30 days
- Anonymized usage statistics may be retained for service improvement

Privacy Modes:
- Local-Only Mode: All data stays on your device, no cloud sync
- End-to-End Encryption: Optional encryption for synced data
- Selective Sharing: Control exactly what data is visible to friends

Data Portability:
- Export your data in standard formats
- Take your data to another service anytime

Opt-Out Options:
- Disable AI features completely
- Turn off all reminders
- Opt out of marketing emails
- Disable social features

5. Data Security

We take security seriously:

Technical Measures:
- All data transmitted using TLS/SSL encryption
- Database encryption at rest
- Regular security audits and penetration testing
- Secure authentication with NextAuth.js

Access Controls:
- Role-based access control for our team
- Multi-factor authentication for admin access
- Regular access reviews and logging

Data Retention:
- Active account data is retained while you use the service
- Deleted data is permanently removed within 30 days
- Backup data is retained for 90 days for disaster recovery

6. Children's Privacy

Lifevate is not intended for children under the age of 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us immediately at bartzalewskidev@gmail.com, and we will delete such information from our systems.

7. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable laws.

8. Cookies & Tracking Technologies

We use cookies and similar technologies to:
- Keep you logged in
- Remember your preferences
- Analyze how you use our service
- Improve performance and user experience

You can control cookies through your browser settings. Disabling cookies may limit some functionality of the Service.

9. Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other operational factors.

When we make significant changes:
- We will notify you via email at least 30 days before changes take effect
- We will display a prominent notice in the app
- The "Last Updated" date at the top of this policy will be revised

Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

10. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights:
- Right to know what personal data we collect and how it's used
- Right to delete your personal data
- Right to opt-out of the sale of personal data (note: we do not sell personal data)
- Right to non-discrimination for exercising your privacy rights

To exercise these rights, contact us at bartzalewskidev@gmail.com.

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have rights under GDPR:
- Right to access your personal data
- Right to rectification of incorrect data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent

To exercise these rights, contact us at bartzalewskidev@gmail.com.

12. Contact Information

If you have any questions, concerns, or requests related to this Privacy Policy or your data:

Email: bartzalewskidev@gmail.com
Website: https://lifevate.top
Support: Available through in-app chat or email

Data Protection Officer: For privacy-related inquiries, contact bartzalewskidev@gmail.com

Response Time: We aim to respond to all privacy inquiries within 72 hours.

By using Lifevate, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.