Privacy policy

Last updated: October 25, 2026
Contact: levelyapp@protonmail.com

This Privacy Policy describes how Levely collects, uses, shares, and protects personal information when you use the Levely mobile application on Android and iOS.

Levely is a fitness gamification app: it turns real-world activity (steps, flights climbed, and sleep) into XP, levels, unlocks, challenges, and social competition. Levely is not a medical device and does not provide medical diagnosis, treatment, or health recommendations.

By creating an account or using the App, you agree to this policy. If you do not agree, do not use the App.

1. Overview

We collect only what we need to:

• create and secure your account
• read activity data you authorize (to power XP and gameplay)
• sync progression and social features
• send optional push notifications you control
• fulfill optional Levely Premium subscriptions
• keep the App reliable and fair (security, abuse prevention, crash diagnostics, referral rewards)

We do not sell your personal data. We do not use your health or fitness data for advertising. We do not use it for medical analysis.

2. Data we collect

2.1 Account and profile data

When you create or use an account, we process:

• Email address (including a Hide My Email relay address if you choose that option with Apple)
• Authentication credentials (password is handled by our auth provider; we do not store your plaintext password). You can also sign in with Google or Apple as identity providers.
• Username (display identity in the App)
• Profile and cosmetics you choose (picture, background, emblems from our catalog)
• Timezone from your device (used for local-day windows: daily push, award windows, and monthly limits)
• Sparks balance and a ledger of earned and spent Sparks
• Unlocked shop items, and the date a bundle was unlocked
• Account flags needed to run the product (progression totals, preferences, feature eligibility)
• Optional invite / referral code entered at sign-up (so we can credit the person who invited you)

We also support email verification and password recovery (including one-time codes sent to your email). Those messages are delivered by Resend.

2.2 Health and fitness activity data

With your explicit permission, Levely reads limited fitness data from the platform health store:

On-device reads are converted into gameplay. When you are signed in, we sync day-level aggregates and related progression state to our servers so progress works across devices and in multiplayer features. We aim to exclude obviously manual samples where the platform lets us detect them. You can pick preferred data sources in Health & Metrics.

We do not sell health data, use it for ads, or provide medical advice. You can revoke health permissions in system settings at any time.

2.3 Social, competition, and user-generated content

Friends, social challenges, leaderboards and seasons, usernames and profile cards, in-app notifications related to those features, and challenge chat (text and emoji reactions only) on challenges created from Levely 1.5 or later. Chat is scoped to that challenge's roster. Levely does not support photo or GIF uploads. Links in text are tappable and open in the browser. Chat is not end-to-end encrypted. Usernames and chat messages are user-created; we apply filters and moderation tools. Messages containing blocked words are rejected. Conduct rules are in our Community guidelines.

You can block another player. We store the block list (who blocked whom, and when). Blocking ends the friendship, cancels pending friend requests and challenge invites between the two, and stops DMs, friend requests, invites, and push notifications both ways. The blocker sees the blocked player's messages collapsed in chat. The blocked player is not told. Unblocking removes the block only and does not restore the friendship.

Friend messages are 1:1 chats with people you have accepted as friends (text and emoji reactions only). They persist until the friendship ends (unfriend or block) or an account is deleted. Deleting an account deletes the DM threads for both people. A block keeps the thread as report evidence, hidden from the blocker. They are not end-to-end encrypted.

2.4 Push notifications

If you allow notifications: push tokens (FCM / APNs) and preference flags. Daily reminders use the timezone stored on your profile. Disable in Settings or the OS.

2.5 Device, diagnostics, and security data

App version, basic server/auth logs, and crash reports via Firebase Crashlytics. Crashlytics is for reliability, not advertising.

2.6 Support communications

If you email us, we process that correspondence and the address you use.

2.7 Purchases and subscriptions

Levely Premium is an optional auto-renewable subscription sold inside the App. Payments go through Apple In-App Purchase on iOS and Google Play Billing on Android. Apple or Google (the store you buy from) is the merchant of record. They handle charging, taxes, receipts, refunds, and cancellation. We do not see or store your card number, bank account, or other payment-instrument details. Renewal and receipt emails come from Apple or Google, not from Levely.

Sparks and shop items are not store purchases. No payment data is processed for them. Levely Premium is the only real-money purchase.

To unlock, restore, and turn Premium off when a subscription ends, we process:

• Your Levely user id (not your App Store or Google Play email)
• Whether Premium is currently active on that account
• Which store billed the subscription (Apple or Google)
• Product identifier and expiry / renewal timing
• Purchase / customer identifiers from our subscription processor

RevenueCat verifies store receipts and tells us when a subscription starts, renews, is refunded, or expires. It receives the Levely user id and the store purchase tokens needed for that job. It does not receive your card number.

Deleting your Levely account removes Premium from our servers for that account. It does not cancel billing with Apple or Google. Cancel in the store that charged you: in the App, Settings → Subscription, policies, delete → Manage subscription, or the Apple / Google subscription pages.

2.8 Data we do not collect (current product)

As of this policy date, Levely does not:

• show third-party advertising networks in the App
• require contacts, camera, microphone, or precise continuous background location for core play
• use App Tracking Transparency / advertising ID for cross-app tracking
• collect card numbers or bank details (those stay with Apple or Google)
• support photo or GIF uploads, or other media uploads

3. How we use data

1. Provide the App: accounts, sync, XP, awards, cosmetics, Sparks, shop unlocks, friends, challenges, challenge chat, friend messages, leaderboards.
2. Authenticate and secure accounts.
3. Power optional notifications you enable.
4. Maintain fairness and safety (abuse, reports, bans). We may use activity patterns to keep referral rewards fair.
5. Improve reliability (crash diagnostics).
6. Fulfill optional Levely Premium (unlock features you paid for, restore purchases, and remove access when a subscription ends).
7. Comply with law where required.
8. Communicate about support, security, or material policy changes.

Legal bases (EEA/UK/Switzerland, where applicable): contract, legitimate interests (security, reliability), consent (health and push permissions), and legal obligation.

4. How we share data

We do not sell, rent, or trade personal information to advertisers.

Sparks balance, the Sparks ledger, and shop unlocks are stored with Supabase. They are not sent to Apple, Google, or RevenueCat.

Other players can see username and profile presentation, accepted friends, challenge participation/scores, and leaderboard standings.

5. Retention

We retain personal data while your account is active. Challenge chat messages are deleted when a challenge is cancelled, or 24 hours after it completes. Friend messages persist until the friendship ends (unfriend or block) or an account is deleted. Deleting an account deletes the DM threads for both people. A block keeps the thread as report evidence, hidden from the blocker.

A snippet copy of a reported message is kept up to 90 days, then deleted. Report records (who reported whom) are kept until either account is deleted. We store the block list (who blocked whom, and when) until you unblock or either account is deleted.

After deletion, account-linked data is removed from our primary production database as described in section 6. Crashlytics, Resend, and Apple/Google billing records follow those vendors. Limited residual copies may remain in encrypted backups or logs until those systems rotate, or longer if the law requires it.

6. Account deletion

In the App: Profile → Settings → Subscription, policies, delete → Delete account. Confirm your password twice. Deletion starts; you are signed out. This does not cancel an Apple or Google subscription. Billing continues until you cancel with the store that charged you.

Deletion removes your profile, friend messages, reactions, blocks, reports where you are the reporter or the subject, Sparks balance and ledger, shop unlocks, achievements, metrics, friendships, and push tokens. It anonymises challenge chat messages (your name is removed; the text stays until that challenge chat is wiped), purchase-event records (the link to you is removed and the payload is redacted), and your name in finished-challenge standings. It does not cancel Apple or Google billing. Cancel Premium in the store that charged you.

By email: levelyapp@protonmail.com from (or clearly identifying) the account email.

7. Your controls and rights

Revoke Health Connect or Apple Health in system settings. Disable push in Settings or the OS. Change username/password in Settings. Cancel Premium in the store that billed you (Settings → Subscription, policies, delete → Manage subscription). Renewal and receipt emails come from that store, not from Levely. Delete the account as above.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to certain processing, and to data portability. Export / correction: email us. You may lodge a complaint with your local data protection authority.

8. Children

Levely is not directed at children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children under that age.

9. Security

HTTPS/TLS in transit, encryption at rest on our primary backend, authenticated APIs, and abuse / rate-limiting where applicable. No method is 100% secure. Use a strong unique password.

10. International transfers

We may process and store information on servers outside your country (including infrastructure operated by Supabase, Resend, RevenueCat, and Google/Firebase).

11. Store disclosures

This policy is intended to align with Google Play Data safety and Apple App Privacy nutrition labels. We do not use this data for third-party advertising. In-app purchases are processed by Apple and Google; we store entitlement status, not payment-instrument details.

12. Third-party links and OS services

The App may open system apps or links (Apple Health, Health Connect, store listings, our Terms of use, this privacy policy). Those services have their own policies.

13. Changes

We may update this policy. We will change the Last updated date and, when changes are material, take additional steps as appropriate. Continued use after an update means you accept the revised policy.

14. Contact

Operator / data controller: Carl Hardhaug, Norway
Email: levelyapp@protonmail.com
Web: https://levely-app.com

The contract for using the App is in our Terms of use.