Privacy Policy

This policy explains how Levla handles information when you use our mobile app and website. You can contact us about privacy or your data at [email protected].

Information we collect and why

Account and app data

You can create an account with email, Google, or Apple. We process your account ID, authentication information, and any email address provided to create and secure your account, help you sign in, and respond to account requests.

We store your character profile, game progress, habits, todos, todo lists, completion history, and settings to provide the app and sync supported data across devices. Habit names and descriptions, todo titles and descriptions, and list names and descriptions are encrypted in our database. Your chosen public profile information and content you share through social features are visible to the relevant users.

Reflections and information you choose to enter

Reflection text and custom prompts are stored in an encrypted database on your device. Cloud sync is optional and off by default. If you enable it, we upload reflection text, titles, prompts, related context, dates, and associated metadata, including mood scores when present, to sync your reflections across devices. Reflection text and other sensitive text fields are encrypted in our server database. This is server-side encryption, not end-to-end encryption.

Even when cloud sync is off, completing a reflection can send completion information to our servers to record progress and grant rewards. This can include the entry ID, prompt and category, related habit or todo, word count, and mood score when provided. It does not include the reflection text through that completion request.

You may choose to enter personal information about fitness, health, or wellbeing in habits, todos, or reflections. We handle that information according to the storage and sync choices described above. The app does not access step counts or other records from Android Health Connect, Apple Health, or your phone's physical activity sensors.

Purchases, notifications, and support

The app stores process payments. We use purchase and subscription information to provide paid features and restore access. We do not receive your full payment-card details. If you enable notifications, we use notification tokens and reminder settings to send them. When you contact support, we receive the information you include in your message.

Analytics, diagnostics, and attribution

We collect app usage events and diagnostic information to understand feature use, improve reliability, investigate errors, and measure how people discover Levla. This may include device and app information, identifiers, network information such as an IP address, and error details.

Analytics can be linked to your account ID and character username, together with information such as subscription status, onboarding progress, and sign-in provider. These records are not fully anonymous. Where attribution is enabled, install source, campaign information, and selected registration and onboarding events help us measure marketing performance.

Services that process information

We use service providers to operate Levla, including:

• Hosting and infrastructure providers: Store and deliver app data and help operate the website, account services, and notifications.
• Google and Apple: Provide optional sign-in and app store services.
• RevenueCat: Manages subscription and purchase access. Attribution identifiers may be linked to purchase information to measure marketing performance.
• PostHog: Processes usage events, account-linked properties, and experiment information for product analytics.
• Sentry: Processes crash reports, error details, and device or network information to diagnose problems.
• AppsFlyer: Where enabled, processes install attribution, device and app identifiers, account IDs, and selected app events to measure marketing performance.

We do not sell your personal data to data brokers. We do not use the contents of your habits, todos, or reflections for personalized advertising.

Data retention

We retain account information, saved content, and game progress for as long as your account exists. Inactivity alone does not trigger automatic account deletion. When a verified account deletion succeeds, we delete your account and its associated profile, habits, todos, and game progress from our active database. The exceptions below explain which records can remain. Signing out or uninstalling the app does not delete your server account.

Device data remains in the app's local storage until it is removed through the app, account deletion cleanup, or clearing the app's data. Signing out alone does not erase every local record. Reflection files that you export or share outside Levla remain wherever you save or send them; deleting your account does not delete those copies.

If you enable reflection cloud sync, server copies are retained to support that sync. Turning cloud sync off removes the synced reflection content and custom prompts from our active database while keeping your device copies. Deleting individual entries can leave deletion records needed to sync the change across devices; disabling cloud sync or deleting your account removes the associated server content.

Where adventure recommendations are enabled, the supporting adventure records are scheduled for cleanup once they are older than 180 days, and recommendation interaction records once they are older than 90 days. These limits apply to the records used for recommendations, not your overall game history or records held by analytics providers.

Moderation reports and some audit records can remain after account deletion to preserve report and review history. These records may include usernames, reported content, and review notes. They do not currently have a fixed automatic expiry period. You can contact us to request a review of retained information or its deletion.

Analytics, diagnostics, attribution, and purchase records are held in separate services and follow the retention settings for each service and record type. We do not apply a single fixed retention period to all of these records. Deleting your Levla account does not automatically erase RevenueCat customer records or existing PostHog analytics history; those records require a separate deletion process. Account deletion also does not guarantee immediate removal from other service providers, operational logs, or backup copies. Contact us to request deletion or information about these records and their retention.

Your choices and deletion requests

You can manage your content and settings in the app, turn reflection cloud sync off, and control notifications in your device settings. You can request account deletion from the Levla app settings. We may ask you to verify ownership before deleting the account. Account deletion is permanent and does not cancel an App Store or Google Play subscription; manage subscriptions through the store where you purchased them.

To request deletion without opening the app, email [email protected] with an account deletion request. Include enough information to identify your account, but do not send passwords or sign-in codes. You can also contact us to request access to or correction of your information, or to ask about any privacy rights available to you.

Security

Our production app APIs use HTTPS to protect information in transit. We use authentication, access controls, and encryption for the sensitive text fields described above. These safeguards reduce risk, but no storage or transmission system is completely secure.

Contact and policy updates

We update this policy when our data practices change. The date above identifies this version. For privacy questions or requests, contact [email protected] or visit Levla support.