Privacy Policy
Version 1.0 · Effective 30 October 2026Previous versions
This policy is available in English and Slovak.
1. Who we are
1.1. FilFar Development s. r. o., Sibírska 7087/8, 080 01 Prešov, Slovakia, company ID (IČO) 56922639, registered in the Commercial Register of the Okresný súd Prešov, section Sro, insert No. 49820/P ("Livuria", "we", "us"), is the controller of the personal data described in this policy. For the content you keep in your organizer, we act on your behalf (section 6.1).
1.2. Contact for privacy questions and requests: support@livuria.com, in English or Slovak. You can also call us on +421 914 284 915.
1.3. We have not appointed a data protection officer.
2. In short
- Livuria is a personal life organizer. We process your data to run your account and the organizer, and only for the purposes in section 3.
- No advertising, no analytics, no tracking, no AI training on your content, and we never sell your data.
- Your content is yours. Private Content is an optional setting. Without it, your content is stored readable on our servers. With Private Content on, it is encrypted on your device before it reaches us, in a way designed so that we can't read it (section 5).
- Our administration tools show our staff account details, never your Areas or entries. Without Private Content your content is readable on our servers; we access it only when needed to keep the Service running or secure, to answer your request, or because the law requires it.
- Some features invite sensitive information, such as health details or the religious holidays you show. We ask for your explicit consent first (section 4). Don't record another adult's health information: Livuria doesn't yet offer a way to ask for their agreement (section 6.6).
- Paid plans are sold by Paddle, our Merchant of Record, which handles your payment details itself (section 7.2).
- You can export your data and delete your account at any time in Settings. Deletion is immediate. Our backups keep deleted data for a limited time (section 9).
3. What we process, why, and on what legal basis
3.1. Your account
| Data | Name, email address, password (stored only as a secure hash), profile photo (optional; Private Content doesn't cover it), language, country, time zone, date and time formats, dashboard preferences, when you verified your email and last signed in. Records of your acceptance of our Terms of Service and Subscription, Cancellation and Refund Policy (which version, and when): at sign-up, with your confirmation that you're 18 or older, and when you subscribe to a plan. |
| Why | To create and run your account, to show Livuria in your language and time zone, and to be able to show what you agreed to |
| Legal basis | Performance of our contract with you (GDPR Art. 6(1)(b)); for the acceptance records, also our legitimate interest in being able to show what was agreed, including after your account is deleted (Art. 6(1)(f)) |
| How long | Until you delete your account. The acceptance records: while your account exists and for 3 years after it ends or your plan ends, whichever is later (section 9) |
3.2. Sign-in and security
| Data | Two-factor authentication settings and recovery codes; passkeys (public keys only); trusted devices (as hashed tokens); the devices you sign in from, as a hashed identifier with browser and operating-system names; your sessions, with the last IP address and time of activity; password-reset requests (your email address, a hashed token and the time). A device record from before we introduced the device-recognition cookie keeps its earlier, readable identifier until that browser next signs in, or until your account is deleted. |
| Why | To sign you in securely, let you see and sign out your devices and sessions, let you reset your password, and warn you of sign-ins from new devices. A new-device alert email shows the browser, operating system, IP address and time of that sign-in. |
| Legal basis | Performance of our contract (Art. 6(1)(b)), and our legitimate interest in keeping accounts and the Service secure (Art. 6(1)(f)) |
| How long | Until you delete your account, except as follows. Your sign-in ends after 120 minutes of inactivity, or when you sign out. The record of a session (its last IP address and time) is deleted when you sign out or sign that device out, and otherwise with your account. Device records are kept until you delete your account. A "trust this device" choice expires after 30 days; expired ones are deleted when next checked, and with your account. A password-reset request is kept until you make a new one, or your account is deleted. The device-recognition cookie lasts 400 days (Cookie Policy). |
3.3. Your organizer content
| Data | What you put into Livuria: Areas, entries (titles, notes, dates, repeat rules, reminder settings, priority, photos, subscription amounts, name days), to-dos, challenges, finance goals, the public, cultural and religious holidays you choose to follow, and the history of changes to your own items. It may include sensitive information (section 4) and information about other people (section 6). |
| Why | To provide the organizer: store, sync and show your content on your devices, compute dates and the reminders shown in the app, show you the history of your items (for example when you last completed something), and let you undo a completion for 7 days and restore a deleted entry for 30 days |
| Legal basis | We keep and process your organizer content on your behalf, as you instruct us by using Livuria, under the data processing terms in our Terms of Service (section 6A). You decide what to keep, about whom and for how long. For your own information, this is also part of our contract with you (Art. 6(1)(b)). For sensitive information, see section 4. |
| How long | Until you delete it, or your account. Deleted entries can be restored for 30 days, then they are erased with their files. The history is kept for 36 months, also for entries you've since deleted; it records what changed and when (for example a completion or a date), never titles or notes. |
3.4. Plans, payments and billing
| Data | Your trial dates; a random billing reference; Paddle's customer and subscription identifiers; your plan, its status and renewal date; records of transactions, plan changes, refunds and disputes (amounts, identifiers and times). If you cancel or withdraw on our public pages "Cancel contracts here" and "Withdraw from contract here" (on every page of livuria.com, and in the app's footer and Plan & billing): what you enter there (your name, the email address you used for the purchase, the order number if you give it, for a cancellation your choice with its date or reason, and the email address for our confirmation), when it arrived and its reference, and how we handled it. We don't keep your IP address with it. We never receive your full card or bank details: Paddle collects them. |
| Why | To give you the access your plan or trial includes, show your billing status, carry out plan changes, cancellations, withdrawals and refunds and confirm them to you, and detect billing errors |
| Legal basis | Performance of our contract (Art. 6(1)(b)); our legitimate interest in preventing billing errors and fraud and in handling disputes (Art. 6(1)(f)); for keeping a cancellation or withdrawal notice after we've handled it, our legitimate interest in being able to show what was sent and what we did (Art. 6(1)(f)) |
| How long | Until you delete your account. Paddle's notifications to us about your plan are kept in full for 30 days. After a deletion we keep only what is needed to finish open billing work, under the account's random reference and Paddle's customer identifier: cancellation and refund records until completed plus 90 days; records of billing anomalies 180 days after their last report (records about money, 180 days after they are resolved); and event records without personal data for 180 days. The record of a payment collected during a dispute (an identifier only) is kept without a set end, so that it isn't reported twice. The notices sent on our public cancellation and withdrawal pages, with our record of how we handled them: until we've handled them, then 3 years, as evidence of what was sent and done should there be a claim, for the general limitation period. They are kept apart from any account, also after it is deleted. |
Paddle processes your payment and checkout data as an independent controller (section 7.2).
3.5. Shared plans and invitations
| Data | For Duo and Family & Friends plans: the email addresses the payer invites, a hashed invitation token, and who holds a seat on which plan |
| Why | To send invitations, let only the invited address join, and show the payer who is on the plan and members whose plan it is |
| Legal basis | Performance of our contract with the payer and the members (Art. 6(1)(b)); for invitees who haven't joined, our legitimate interest in delivering the payer's invitation (Art. 6(1)(f)) |
| How long | An invitation can be used for 14 days. An invitation that expires or is withdrawn is deleted, with the invitee's email address, 30 days later. An accepted invitation is kept until the member's account is deleted. |
The payer sees the names and email addresses of the people on the plan, when they joined, and the email addresses of pending invitations. Members see the payer's name and the plan. Nobody on a plan can see anyone else's content.
3.6. Emails and notifications
| Data | Your email address, and the event the message is about |
| Why | Messages you need to use the Service: email verification and a welcome message when you confirm your address, password reset and change, new-device sign-ins, changes to two-factor authentication and Private Content, recovery codes, plan invitations and plan membership changes, an acknowledgement of each message you send us in the app (section 3.7), trial reminders (7, 3 and 1 days before your trial ends), billing messages (renewal reminders 35 and 20 days before each renewal, price-change notices, and confirmations of cancellations and withdrawals: section 3.4), and notices of changes to the Service, our terms or our prices; in-app notifications about your account, security and billing |
| Legal basis | Performance of our contract (Art. 6(1)(b)); our legitimate interest in account security (Art. 6(1)(f)) |
| How long | In-app notifications: until you delete your account. Emails: our provider WEDOS, which sends them for us, keeps the logs of our email traffic for up to 6 months. |
No email ever contains the content of your Areas. We send no newsletters or marketing emails. We don't yet send reminders for your entries by email or push notification: Livuria shows them in the app, for example how early an entry appears and what's coming up.
3.7. Support and feedback
| Data | What you send us: emails to support@livuria.com, and the messages and feedback you send in the app (Contact support, Contact about privacy, Send feedback and Report a problem: subject, message, category). A bug report adds the page you were on and your browser details. |
| Why | To answer you and improve Livuria |
| Legal basis | Our legitimate interest in answering requests and improving the Service (Art. 6(1)(f)); performance of our contract where your request concerns your account (Art. 6(1)(b)) |
| How long | Messages and feedback sent in the app: 12 months. Support emails: up to 12 months after your request is resolved, unless the law requires us to keep them longer. A deleted support email can remain for up to 180 days in the backups that WEDOS makes of our mailbox at least once a week (section 9). |
3.8. Visiting our websites, and server logs
| Data | When you visit livuria.com or app.livuria.com, our servers log your IP address, the page requested and the page you came from, the time and your browser details. Our application logs record errors and operational events; they're designed not to contain your content. Background tasks that fail keep their data for 30 days, so that they can be retried or investigated. |
| Why | To deliver the websites, keep them secure, and diagnose problems |
| Legal basis | Our legitimate interest in running a secure, working service (Art. 6(1)(f)) |
| How long | 30 days. Security and audit records, such as the actions our staff take in our administration tools, which can concern your account: 90 days. |
Our checkout page loads Paddle's script (Paddle.js) when you start a purchase or update your payment method. Your browser then connects directly to Paddle, which receives your IP address and browser details, as any website your browser connects to does. Paddle handles them, and what you enter in its checkout, as an independent controller, under its own privacy notice (section 7.2). Our other pages don't load Paddle.js: the prices on our homepage come from our own server, for the country you choose, and nothing about you is sent to Paddle for them.
3.9. Backups, and keeping deletions deleted
| Data | Copies of our database and uploaded files, made every night |
| Why | To recover the Service after a failure or an attack |
| Legal basis | Our legitimate interest, and our duty, to keep your data available and secure (Art. 6(1)(f), Art. 32) |
| How long | See section 9. |
When you delete your account, we keep a short deletion record: an internal account number, when the account was created, and when it was deleted, with no name and no email address. If we ever had to restore a backup taken before your deletion, this record makes sure your account is deleted again before the Service is available. We keep it for 120 days, longer than any of the backups we make can bring data back. Its legal basis is our duty to keep your data erased (Art. 6(1)(c), with Art. 17) and our legitimate interest in being able to show that we did (Art. 6(1)(f)).
When you withdraw a consent for sensitive information (section 4.4), we keep a similar record for 120 days: the internal account number, when the account was created, the time, an internal reference to the consent and the internal numbers of the deleted entries and holidays, with none of their content. Its purpose is that the information stays deleted: if we ever had to restore a backup taken before your withdrawal, this record makes sure that information is deleted again before the Service is available. Its legal basis is our duty to erase the information once you withdraw your consent (Art. 17(1)(b), with Art. 6(1)(c)), and our legitimate interest in being able to show that we did (Art. 6(1)(f)). The record holds no health or religious information itself, but it shows that a consent for such information was withdrawn.
3.10. Legal obligations and claims
We may process the data above where the law requires it (Art. 6(1)(c)), for example to answer a lawful request from an authority, or where it's needed to establish, exercise or defend legal claims (Art. 6(1)(f)).
4. Sensitive information (special categories of data)
4.1. What counts. Some information you can keep in Livuria is, or can be treated as, a special category of personal data under GDPR Art. 9:
- health information: everything in a Health area; entries made from our health suggestions (doctor visit, dentist, gynecology, eye examination, blood test, vaccination, X-ray, MRI, medication), including the Vaccination and Doctor Visit suggestions for a child; and health details you write or photograph anywhere else in Livuria;
- religious holidays you show: the Hindu, Islamic, Jewish, Buddhist, Sikh and Orthodox Christian holidays you choose from the "Cultural & religious observances" list. The law can treat a religious calendar as sensitive. We don't assume anything about your beliefs from it.
You might also write other sensitive details anywhere in Livuria, for example about your beliefs or your own health. We don't read or scan what you write, so we don't know when you do. We keep it only to provide your organizer, like everything else, and Private Content can encrypt it on your device (section 5). Other people's health information has its own rules (section 4.5).
Public holidays (India's included), cultural festivals (Lunar New Year, the Mid-Autumn Festival, Nowruz and Losar), general days such as Valentine's Day, birthdays, name days and ordinary entries about your children, such as school events, aren't in this category and need no consent.
4.2. Your explicit consent. We ask for your explicit consent (GDPR Art. 9(2)(a)) once for each of these: before you first add an entry to your Health area; before you first use the Vaccination or Doctor Visit suggestion for a child, when you consent as their parent or legal guardian; and before you first show a holiday of a named religion from the "Cultural & religious observances" list. One consent covers what you add later for the same purpose. It is also your instruction to us to keep this information for you (section 6.1). You don't have to give it: everything else in Livuria works without it. Your consent doesn't cover another adult's health information (section 6.6). We keep a record of your choice, the text you were shown, what prompted it and when, while your account exists and for 3 years after it ends or your plan ends, whichever is later (section 9).
4.3. What we use it for. Only to store it, show it to you, work out its dates and the reminders shown in the app, back it up and protect it. We never share or sell it, never use it for advertising, profiling or training AI, and never send it by email. Our hosting and backup providers store it for us under contract (section 7.1). If you live in the United States, our Consumer Health Data Privacy Policy also applies to your health information.
4.4. Withdrawing consent. You can withdraw it at any time in Settings → Privacy & Data → Sensitive information, as easily as you gave it. This doesn't affect what we did before. We then delete the information concerned: the entries in your Health area and those made from health suggestions, including the Vaccination and Doctor Visit entries in Child areas (birthdays, school events and other entries stay); or the religious holidays you show. We offer you an export first. Health details you wrote elsewhere, such as in other notes, stay until you delete them: we don't read or scan what you write. Backups keep deleted data for a limited time (section 9). A short record of the deletion, with none of the content, stays for 120 days (section 3.9).
4.5. Other people's health information. Record a child's health information only as their parent or legal guardian. Don't record another adult's health information (section 6.6). We don't read or scan what you write, so this is your responsibility.
4.6. Private Content encrypts the names of these areas, and the titles, notes, photos and chosen health suggestion of their entries, on your device (section 5). Their dates, times and repeat rules stay readable on our servers. Without Private Content, all of it is readable on our servers. The holidays you show stay readable on our servers even with Private Content on, because our servers work out their dates.
5. Private Content
5.1. Private Content is optional and off by default, and applies to your whole account. You can turn it on in Settings → Privacy & Data, and turn it off again there: your content is then decrypted on your device and stored readable on our servers again. When it is on, the following is encrypted on your device before it is sent to us, and our servers then hold only encrypted data for these items. It is designed so that we can't read it: we don't have the keys to decrypt it. The encryption runs in the Livuria app in your browser, and the app's code comes from our servers.
| Item | Encrypted on your device |
|---|---|
| Areas | name, template, icon and colour |
| Entries | title, notes, the suggestion you picked, original date, subscription amount and billing cycle, and the entry's photo |
| To-dos | title |
| Challenges | title |
| Finance goals | title, current and target amounts, quick-add amount |
| Area groups | template and colour |
| Holidays you follow | their photos |
Your profile photo isn't covered by Private Content: it stays readable on our servers.
5.2. Still readable on our servers, because the Service needs it to work:
- Areas: their status, order and times, an opaque grouping token, two technical settings derived from the area's template, and whether an Area is example content;
- Entries: due dates, repeat rules, reminder settings, how early an entry appears, appointment times, how and when it is completed, priority, pinning and display order, name-day settings (whether one is on, its date and its years), whether the entry has a photo, when it was deleted, and its times;
- Photos: the size of each encrypted photo;
- To-dos: completion and order;
- Challenges: frequency, target, tracking mode, progress and dates;
- Holidays you follow: which country, region or tradition, and whether each is on;
- Consents: which consents you've given or withdrawn, and when (section 4.2);
- the history of changes (section 3.3), and everything about your account (your profile photo included), devices, sessions, plan and notifications.
This means that the number and timing of entries, for example a recurring appointment, stay visible to our servers even when their content is encrypted. A name-day setting is a date; where a country has a name-day calendar, that date can point to a first name.
5.3. You set up Private Content with a Privacy Passphrase and a Recovery Key. We can't recover encrypted content for you: if you lose both, it can't be decrypted, unless a device you chose to remember can still unlock it.
6. Information about other people
6.1. What you may keep, and our role. You may keep information about other people in Livuria, such as your children, family or friends: for example names, birthdays, school events or appointments. You decide what to keep, about whom and for how long. We store and process it on your behalf, only to provide your organizer, under the data processing terms in our Terms of Service (section 6A), and for nothing else. Keep only what you need for your own personal or household purposes. Don't record another adult's health information (section 6.6), and record a child's only as their parent or legal guardian (section 4). We don't read or scan what you write, so this is your responsibility. When your child comes of age, their information is theirs to decide about.
6.2. If a Livuria user has written about you. The information is in that user's private organizer. We store it, back it up and protect it for that user, and we show it only to them. We don't use it for anything else, don't sell it, don't share it apart from our service providers (section 7.1), and don't contact you, except with a plan invitation (section 6.5). It is deleted when the user deletes it (a deleted entry can first be restored for 30 days) or deletes their account (section 9 explains backups). If the user turns on Private Content, it is encrypted on their device. We don't tell you individually: we don't know who you are, and we don't read users' content to find out. This section is how we inform you.
6.3. Why the user, not us, decides. Data protection law doesn't apply to a person keeping information for purely personal or household purposes (GDPR Art. 2(2)(c)). It does apply to us as the provider: we act only on the user's instructions, keep the information confidential and secure, and delete it when the user does.
6.4. How to ask us. Write to support@livuria.com. Tell us which user you believe holds information about you, and what it is: we can't search users' content without that, and we can't read content protected by Private Content. If you tell us that a user keeps your health information without your agreement, or you object to what they keep, we ask the user to review and remove it, and we remove it ourselves where we can identify it and the user doesn't. We tell you what we did. You can also complain to a supervisory authority (section 13).
6.5. Plan invitations. When a payer invites someone to a shared plan, we email that person once, on the payer's behalf. The invitation names the payer and links to this policy. If it isn't accepted, we delete it, with the email address, 30 days after it expires or is withdrawn.
6.6. Another adult's health information
Livuria doesn't yet offer a way to ask another adult for their agreement to keeping information about their health. Until it does, don't record another adult's health information in Livuria, such as their appointments, tests or medication. If you believe a user keeps information about your health, section 6.4 explains how to ask us. Before we add a way to ask for your agreement, we'll update this policy and tell users about it (section 16).
7. Who receives your data
7.1. Service providers (processors). They process data only on our instructions, under a data processing agreement:
| Provider | What it does for us | Where |
|---|---|---|
| WEDOS, a.s., Hluboká nad Vltavou, Czech Republic (IČO 28115694) | Hosting of our servers, which hold all the data in this policy | Czech Republic (EU) |
| WEDOS group, Hluboká nad Vltavou, Czech Republic (the WEDOS company that invoices our mailhosting) | Our email: sending our emails, and our support mailbox | Czech Republic (EU) |
| Amazon Web Services EMEA SARL, Luxembourg | Storage of our encrypted offsite backups, and of the deletion records (section 3.9). The backups are encrypted on our server before they are sent, and Amazon Web Services doesn't have the key to decrypt them. | EU: Stockholm, Sweden |
7.2. Paddle. Paddle.com is our reseller and Merchant of Record: Paddle sells you your plan and processes your payment. The Paddle company that sells to you depends on where you buy from: Paddle.com Inc. in the United States, Paddle.com (Canada) Ltd. in Canada, and Paddle.com Market Limited (United Kingdom) everywhere else, including the EU. When you buy, change or cancel a plan, or ask for a refund, we exchange with Paddle what's needed: your email address, country and (in some countries) postal code, our random billing reference for your account, the plan, and Paddle's identifiers. When you open Plan & billing without having chosen a country, our server asks Paddle for the prices for your IP address; once you've chosen a country, only the country is sent. If a payment is collected after you've asked to delete your account, we ask Paddle to refund it, and that request tells Paddle that you deleted your account. Paddle collects your payment details, billing address and IP address itself and uses them as an independent controller, under its own privacy notice: Paddle's privacy notice. Paddle also sends you its own emails about your purchases, such as receipts. Paddle keeps its own records as Merchant of Record, including after you delete your Livuria account; you can ask Paddle about them directly.
7.3. Authorities and advisers. We disclose data to courts, authorities or law enforcement only where the law requires it, and to our professional advisers (such as lawyers and accountants) where needed, under a duty of confidentiality.
7.4. A successor. If Livuria's business is transferred, your data would pass to the new owner, who would have to honour this policy. We would tell you in advance.
7.5. Nobody else. We don't sell your data, share it for advertising, or use third-party analytics or tracking.
8. International transfers
8.1. Our servers and our email are in the European Union, hosted by WEDOS in the Czech Republic (section 7.1). Our offsite backups are stored in Sweden, also in the EU.
8.2. Paddle.com Market Limited, which sells our plans in the EU and everywhere else except the United States and Canada, is based in the United Kingdom, which the European Commission recognises as providing adequate protection (an adequacy decision, renewed until 27 December 2031). In the United States and Canada, Paddle sells through Paddle.com Inc. (United States) and Paddle.com (Canada) Ltd. (Canada). Where data we exchange with Paddle goes to a Paddle company outside the EU and the UK, the European Commission's standard contractual clauses apply, under our data sharing agreement with Paddle.
8.3. Amazon Web Services is part of a group based in the United States. Our contract is with its European company in Luxembourg (section 7.1), and our backups stay in Sweden, encrypted before they leave our server.
9. How long we keep data
| Data | How long |
|---|---|
| Your account and content | Until you delete them or your account |
| Records of your consents (section 4) and of the terms you accepted (section 3.1) | While your account exists, and for 3 years after it ends or your plan ends, whichever is later, also after you delete your account, so that we can show what was agreed (GDPR Art. 5(2) and 7(1)) and as some US auto-renewal laws require. After a deletion we keep only an internal account number with these records: for a consent, its type, the version and language of the text you were shown, what prompted it, your choice, when you made it, and when and how it ended; for the terms, the version you accepted and its language, your confirmation that you're 18 or older, where you accepted them (at sign-up or on the acceptance screen) and when. |
| Deleted entries | Restorable for 30 days, then erased with their files |
| History of changes to your items | 36 months, also for entries you've since deleted |
| Sessions | The sign-in: until you sign out, or after 120 minutes of inactivity. The session's record (last IP address and time): until you sign out or sign that device out, otherwise until your account is deleted (section 3.2) |
| Devices | Until you delete your account (section 3.2) |
| Password-reset requests | Until you make a new one, or your account is deleted (section 3.2) |
| Failed background tasks | 30 days |
| "Trust this device" | 30 days |
| Device-recognition cookie | 400 days |
| Invitations | Valid for 14 days; deleted, with the invitee's email address, 30 days after they expire or are withdrawn |
| Billing records after account deletion | See section 3.4 (90 and 180 days) |
| Cancellation and withdrawal notices sent on our public pages (section 3.4) | Until we've handled them, then 3 years |
| Messages and feedback sent in the app | 12 months |
| Support emails | Up to 12 months after your request is resolved, unless the law requires longer |
| Server and application logs | 30 days |
| Security and audit records (our staff's actions in our administration tools) | 90 days |
| Backups | Deleted data disappears from the backups we make within about three months. Our hosting provider WEDOS also keeps its own backups of our server, including a weekly image of its whole disk, and backups of our mailbox, which it makes at least once a week. It deletes each of them on a regular cycle, at the latest 180 days after making it, so deleted data disappears from them within 180 days. If WEDOS ever restores our server from one of them, the deletion records make sure that deleted accounts, and information deleted after a consent was withdrawn, are deleted again (section 3.9). |
| Deletion records (account deletions and consent withdrawals, section 3.9) | 120 days |
We don't delete accounts just because they are not used.
10. Your rights, and how to use them
10.1. Under the GDPR you have the right to:
- access your data, and receive a copy;
- rectify inaccurate data;
- erase your data;
- restrict our processing in certain cases;
- data portability: receive your data in a machine-readable format;
- object to processing based on our legitimate interests (section 10.2);
- withdraw consent at any time, where we rely on consent (section 4), without affecting what was done before;
- lodge a complaint with a supervisory authority (section 13).
10.2. Your right to object. Where we rely on our legitimate interests (Art. 6(1)(f): see the legal basis in each part of section 3), you can object at any time, on grounds relating to your particular situation, by writing to support@livuria.com. We then stop, unless we have compelling legitimate grounds that override your interests, rights and freedoms, or need the data for legal claims.
10.3. Most of this is in Settings, at any time, even after your trial has ended:
- Export: download a ZIP file with your account details, content, history, feedback, billing records, consent records and acceptances of the Terms (
data.json), the photos of your entries and followed holidays, and your profile photo, with a short description of the files (README.txt). Not included: your devices and sessions; your security settings (two-factor authentication, passkeys and trusted devices); your notifications and notification preferences; a few account settings: whether your Life Areas are grouped by category and Pinned Areas are on, when you last signed in, and when you finished the first setup and the quick guide; invitations you received; the deletion records of consents you withdrew (section 3.9); and the page and browser details stored with a bug report. Ask us for them (section 10.4). - Correct: edit your account details directly, and your content while your trial or a plan is active; otherwise write to us (section 10.4);
- Delete: delete your account, which is immediate and permanent (section 9 for backups). If you bought a plan, we cancel it at Paddle. Paddle keeps the records it must keep as the seller, such as those tax law requires, under its own privacy notice; you can ask Paddle about them directly.
You can't change your email address in Settings yet: write to us and we'll do it.
10.4. For anything else, write to support@livuria.com. We answer within one month, which we can extend by two further months for complex requests (we'll tell you if so). We may ask you to confirm your identity, for example from your account's email address.
10.5. With Private Content on, the export includes your encrypted content exactly as we store it, encrypted: the encrypted fields (titles, notes, amounts and the others listed in section 5) and your encrypted photos, with what decrypting them needs besides your Privacy Passphrase or Recovery Key. They can be decrypted with your Privacy Passphrase or Recovery Key, which we don't have, so we can't decrypt them for the export. To read that content, unlock it in the app, which decrypts it on your device.
11. How we protect your data
We protect your data with measures that include:
- encryption in transit (TLS) on every connection to our websites and apps;
- passwords stored only as secure hashes; two-factor authentication, passkeys, new-device alerts and trusted devices;
- Private Content, optional encryption on your device (section 5);
- administration tools that show account details only, never content;
- photos you add to entries and holidays, served only to your signed-in account;
- database access limited to what the application needs;
- encrypted offsite backups, kept for a limited time (section 9) and tested by regular restores;
- logs designed to leave out your content, and kept for 30 days (section 3.8).
No system is completely secure. If a personal data breach happens, we notify the authorities and you where the law requires it.
12. Cookies
We use only technologies that are strictly necessary for the service you ask for, that only remember what you're doing on a page, or that you switch on yourself where you make the choice, such as your language or "Trust this device". We don't use analytics, advertising or tracking cookies. When you use our checkout, Paddle sets its own cookies. Because we don't track you over time or across other websites, "Do Not Track" and Global Privacy Control signals change nothing on our websites. Details are in our Cookie Policy.
13. Questions and complaints
13.1. Please contact us first at support@livuria.com. We confirm receipt in writing and answer within 30 days; requests to use your rights are answered as section 10.4 describes.
13.2. You can also complain to a data protection authority, in particular in the EU country where you live or work, or where you think the infringement happened. In Slovakia, that is the Úrad na ochranu osobných údajov Slovenskej republiky (Office for Personal Data Protection of the Slovak Republic), Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk.
14. Children
Livuria is for adults: you must be at least 18 to create an account, and you confirm it when you sign up. If you believe a child has created an account, please tell us and we'll delete it. Information about children that adults record in their own organizer is covered in sections 4 and 6.
15. Automated decisions
We don't make decisions about you based solely on automated processing that have legal or similarly significant effects. When your trial ends without a plan, your account is limited until you choose one, as our Terms of Service describe (section 9.3): this follows from the contract, not from an evaluation of you. You can still sign in, export your data, manage your privacy and security settings, get help and delete your account; your content stays stored until you delete it. If you think your account was limited in error, write to us and a person will review it.
16. Changes to this policy
We may update this policy, for example when we add a feature or a service provider. We'll tell you about material changes by email at least 30 days before they take effect. If a change needs your consent, we'll ask for it, and the change applies to you only once you've given it. Each version shows its effective date, and earlier versions stay available in our version archive.
17. Notices for specific regions
United Kingdom. You can complain to us at support@livuria.com or with the in-app form (Settings → Privacy & Data → Contact about privacy): we acknowledge your complaint within 30 days and tell you the outcome. You can also complain to the Information Commissioner's Office (ico.org.uk).
Switzerland. We disclose personal data abroad to the Czech Republic and Sweden (hosting and encrypted backups) and, for purchases, to Paddle in the United Kingdom, countries the Federal Council recognises as providing adequate protection. You can also complain to the Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.
Canada. The person accountable for our compliance with Canadian privacy law is our managing director, whom you can reach at support@livuria.com. We ask for your express consent before you first add an entry to your Health area or use a child's health suggestion, and before you first show a religious holiday (section 4.2). We don't read or scan what you write, so we don't ask about health details you write elsewhere (section 4.1). We report breaches to the Privacy Commissioner and notify you where Canadian law requires it (section 11). You can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
Australia. If you live in Australia, we handle your personal information under the Privacy Act 1988 and its Australian Privacy Principles:
- what we collect and hold: the kinds of information in section 3, including health information and the religious holidays you choose to show; we ask your consent at the points in section 4.2;
- how: we collect it from you, when you use Livuria and our websites, and, for a plan invitation, from the person who invites you (section 6.5); we hold it on our servers in the Czech Republic, with encrypted backups in Sweden (section 8);
- why: for the purposes in section 3;
- access and correction: in the app, or by writing to support@livuria.com (section 10);
- complaints: write to us first. We confirm receipt in writing and answer within 30 days. If you aren't satisfied, you can complain to the Office of the Australian Information Commissioner (oaic.gov.au);
- overseas disclosure: we are based in Slovakia, and your information is held in the Czech Republic and Sweden. Paddle, which sells our plans to buyers in Australia, receives what it needs in the United Kingdom (section 7.2);
- automated decisions: when your trial ends, your account is limited automatically (section 15); a person reviews this if you ask.
New Zealand. Our privacy officer is our managing director, whom you can reach at support@livuria.com. You can ask us for access to and correction of your personal information, and complain to the Office of the Privacy Commissioner (privacy.org.nz). We notify the Privacy Commissioner and you of a privacy breach where the law requires it (section 11).
United States. Our Consumer Health Data Privacy Policy explains how we handle consumer health data under Washington, Nevada and Connecticut law, and how to exercise and appeal your rights. Users may not keep another adult's health information in Livuria (section 6.6); we don't read or scan what users write, so we can't check what they write elsewhere. Connecticut residents: you can access, correct, delete and port your data, and appeal our decision (we answer appeals within 60 days and, if we deny one, tell you how to contact the Attorney General). We don't sell personal data, use it for targeted advertising or profile you. We don't allow third parties to collect information about your activities over time and across other websites through our sites; on our checkout page, Paddle collects payment information under its own privacy notice. We tell you about material changes to this policy by email.
18. Contact
FilFar Development s. r. o., Sibírska 7087/8, 080 01 Prešov, Slovakia. Email: support@livuria.com. Telephone: +421 914 284 915. We answer in English and Slovak. Company details: Legal Notice.