PRIVACY

Privacy Policy

Last updated: September 27, 2026 · Applies to the LVEL app and lvel.app

1. The short version

We store your challenges, check-ins and journal on our servers so they stay in sync and survive a new phone. Your journal is private to you.
Timelapse videos, share images and your reminders are made and kept on your phone.
In a challenge you share with other people, they see your name, your picture, your days, and the daily photo you add while photo sharing is on. Nobody outside that challenge can.
We show no advertising, we sell no data, and we do not track you across other companies' apps or websites.
You can delete your account and everything on our servers from inside the app.

This policy covers the LVEL iPhone app and the website lvel.app. LVEL is made by LVL Digital Ventures Ltd, a company registered in England and Wales (number 17436151), which is responsible for your data as the “controller”. “We” and “us” in this policy mean that company. Contact: contact@lvel.app.

2. Your account

When you first open LVEL, the app creates an account with a random user id. It holds no name or email. Until you sign in, that account lives on this installation: if you delete the app first, the progress cannot be restored.

Sign in with Apple or Sign in with Google links that account so your challenges come back on a new phone. We receive an account identifier from Apple or Google and, where you allow it, an email address and a name. With Apple's Hide My Email we receive a relay address instead of your real one. We never receive your password.

3. What we store on our servers

Data	Why
Account: your user id, and the email and name from Apple or Google if you signed in	To keep your progress attached to you
Profile, all optional: the display name you choose, a profile picture, your year of birth, your gender and your accent colour	To show your profile to you, and your name, picture and colour to people in a shared challenge
Challenges: the daily action you typed, task titles, the length, start date and your time zone	To show Day X of Y, the grid, checkpoints and stats
Check-ins: which days and tasks you completed, and your streak freezes	Streaks, completion, Insights and history
Daily goals, timer and counters: a goal you set (minutes, or a count and the unit you name), the length and end time of each timer session, and each day's count	To show your progress towards the goal, and check the day in when you meet it. Only you can see it
Journal: the note and photo you add to a day of a challenge	So your journal comes back after a reinstall or on a new phone. Only you can see it
Shared challenges: the group, its kind (partner, buddy or group), name, invite code, members, join requests, and each member's notification and share card settings	So people doing a challenge together see each other's progress
Shared photos: the daily photo you add while photo sharing is on, and a copy of your profile picture for that group	So the group sees them in the app, on their widgets and in their notifications
Reports and blocks: which photo was reported, the reason and who reported it; who you blocked	To take down content that breaks the rules and keep people apart who asked to be
Feedback: the message you send from Profile, with your app version, iOS version and account	To read and answer it, and to improve LVEL
Push token: the address Apple gives your phone for notifications	To tell you when someone in your challenge checks in, and keep Together widgets current
Subscription status: your plan, trial and renewal dates, from Apple through RevenueCat	To unlock the app for subscribers
Product analytics: event names with ids, counts, lengths, choices from fixed lists, and app version	To see which features are used and where the app fails
Crash reports: the error, the app version and the device model, without your IP address or identity	To fix crashes

Analytics and crash reports never include what you write or photograph: no challenge or task titles, names, notes or photos. Analytics do not record your screen or your taps.

Uploaded pictures are kept in private storage. Nobody can open them from a public web address; the app fetches them through links that expire.

4. What stays on your phone

A copy of your journal, so it opens quickly, works offline and can make a timelapse. The account copy is described above.
Timelapse videos, made on the device. They exist only where you save or share them.
Share images, made on the device. Nothing is published unless you share the image yourself.
Reminders, including the reminder before a free trial ends, scheduled as local notifications by your phone. We are not told when they fire.
Widget data, shared with LVEL's widgets through Apple's app group on your device.
Preferences, such as your app icon. Your accent colour is also kept with your account, as described above.

Deleting the app removes all of this from your phone. Your journal stays with your account, and comes back on a new phone if you signed in with Apple or Google. Ending a challenge early deletes that challenge's journal from the phone and from our servers.

5. Camera, photos and notifications

LVEL asks for the camera or your photo library only when you add a photo, and for permission to save to Photos only when you save a timelapse. It asks to send notifications when you set a reminder or turn on check-in alerts, never at launch. If you say no, everything else keeps working. You can change each permission in iOS Settings.

6. What other people can see

LVEL has no public profiles and no feed. Other people see you only inside a challenge you share with them.

People in your shared challenge see

Your display name, profile picture and accent colour
Which days you checked in, your days done, your streak, and whether you have checked in today
The daily photo you add, while photo sharing is on for that challenge, in the app, on their Home Screen widgets and in their notifications
The challenge title and its task list

They never see your email, your user id, your other challenges, your journal notes, the journal photos you do not share, your year of birth or your gender.

Photo sharing

Photo sharing is on when you create or join a shared challenge, and the invite and join screens say so. You can turn it off for that challenge at any time in its Together settings; turning it off removes every photo you shared with that group. Removing today's photo removes the group's copy too. A photo appears on other people's widgets only on the day it was taken.

Share cards

Anyone in a shared challenge can make an image of it on their phone and share it wherever they choose. If you are shown on those cards, they can include your first name and your photo from that day; if not, you appear as your mascot with your initial. Buddy and partner challenges show you until you turn it off; groups do not until you turn it on. Change it with Show me on shared cards in the challenge's Together settings.

Invite codes

Anyone holding an invite code can see the challenge name, its length, how many people are in it and the name of the person who created it. A group can require the creator's approval before anyone joins; a request shows the creator only your display name.

Reports and blocks

If someone reports your photo, it is hidden from the group at once and we review it. The person you report is not told who reported them. Blocking works both ways: neither of you can join a group the other is in, and you stop getting notifications about each other.

7. Check-in notifications

When someone in a shared challenge checks in or shares a photo, the others get a notification, if they have alerts on. We send it through Expo's push service and Apple's push notification service. The notification text contains the person's display name and the challenge or group name. The rest of the message carries only ids and a link to the photo that expires after ten minutes. Unsent notifications are discarded after six hours.

8. Subscriptions and payments

Apple takes your payment. We never see your card details, your billing address or your Apple Account password. RevenueCat receives the purchase receipt from Apple and your LVEL user id, so it can tell the app whether your subscription is active. Deleting your LVEL account does not cancel a subscription; cancel it in your Apple settings.

9. The website

lvel.app has no accounts, no forms and no advertising. Cloudflare hosts it and handles the technical data every web request carries, such as your IP address, to deliver the pages and protect them from abuse.

The site sets no cookies of its own. If we ever turn on Google Analytics to count visits, this section will say so before it runs. The app does not use Google Analytics.

We no longer run an early access list. Email addresses collected for it have been deleted.

10. Service providers

Supabase: database, sign-in, file storage and server functions for your account, challenges and shared photos.
RevenueCat: subscription status.
Apple: sign-in, payments and push notifications.
Google: sign-in, when you choose it.
Expo: delivery of push notifications.
PostHog: product analytics, stored in the EU.
Sentry: crash and error reports.
Resend: emails to our own team when a photo is reported or feedback is sent. A report email contains the reason, ids and a link to the photo that expires after 24 hours. A feedback email contains the message and, if you signed in, your email address so we can reply.
Cloudflare: hosting for lvel.app.

They process data on our instructions and for no purpose of their own. Some of them are in the United States or process data there. Where data leaves the UK or the European Economic Area, we rely on safeguards such as the European Commission's standard contractual clauses.

We do not sell or rent your data, and we do not “share” it for cross-context behavioural advertising as California law defines it. We run no advertising and no ad networks, and we do not use data for tracking, so LVEL never shows Apple's App Tracking Transparency prompt.

We may disclose data if the law requires it, or to protect people from harm.

11. Why we are allowed to use it

If you are in the UK or the European Economic Area, these are our legal bases:

To provide LVEL to you (contract): your account, challenges, check-ins, journal, shared challenges and subscription.
Your consent: photo sharing, notifications, camera and photo library access, and the optional profile details. You can withdraw it at any time in the app or in iOS Settings.
Our legitimate interests: analytics without your content, crash reports, reading your feedback, keeping the service secure, and acting on reports and blocks.
Legal obligations: for example, tax records kept by Apple and responses to lawful requests.

12. How long we keep it

Your account, profile, challenges and check-ins: until you delete them or delete your account.
Journal notes and photos: until you clear the day, end the challenge early, or delete your account.
Shared photos: until you remove them, turn off sharing, or delete your account.
Feedback: until we no longer need it to improve LVEL, and at most until you delete your account.
Reports: until they are reviewed and, where needed, to keep someone who broke the rules from returning. A report about you is deleted with your account.
Analytics and crash reports: up to 12 months.
Queued notifications: up to six hours.

13. Your choices and rights

Delete everything: in the app, open Profile, then Delete account. Your account, profile, challenges, check-ins, journals, group memberships, feedback and uploaded pictures are removed from our servers, and if you signed in with Apple, we revoke LVEL's access to your Apple ID. The copy on that phone goes with them.
Delete one challenge: end it early, and its journal is deleted too, on the phone and on our servers.
Stop sharing photos: turn off photo sharing in that challenge's Together settings.
Leave a shared challenge: from its Together settings. Your challenge carries on alone.
Turn notifications off: per challenge in the app, or for all of LVEL in iOS Settings.
Ask us: write to contact@lvel.app for a copy of your data, a correction, or deletion. We answer within 30 days.

Depending on where you live, you may also have the right to object to processing, to restrict it, to take your data elsewhere, and to complain to the data protection authority where you live. We would like the chance to put things right first, so please write to us before you complain. We will not treat you differently for using any of these rights.

14. Children

LVEL is not for children under 13, or under the age of digital consent where you live if that is higher. We do not knowingly collect their data. If you believe a child is using LVEL, write to us and we will delete the account.

15. Security

Row-level security in the database means one account cannot read another's data, and shared data is reachable only by the members of that challenge. Traffic is encrypted in transit, and your session is kept in the iPhone keychain. No system is perfect, so we keep the data we hold small on purpose. If a breach affects you, we will tell you and the authorities as the law requires.

16. Changes

We update this policy as LVEL changes. The date at the top always shows the current version, and we will tell you in the app before a material change takes effect.

17. Contact

Questions, requests, or anything that looks wrong:

LVL Digital Ventures Ltd
71–75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom
Company number 17436151, registered in England and Wales
Email: contact@lvel.app
Web: https://lvel.app

See also the terms of use and the support page.