Privacy Policy
Effective from October 11, 2026
1. Who we are
Livuss (livuss.com) is an AI training and nutrition service. The controller of your personal data is SIA "Latvijas Zaļais Dārzs", reg. no. 40103817996, registered address Zīļu iela 12/47, Kandava, Kandava Municipality, LV-3120, Latvia. You can contact us at support@livuss.com.
2. What data we collect
| Type of data | Examples | Source |
|---|---|---|
| Account data | name, email, password (stored only in encrypted form), language, time zone | from you when you sign up |
| Profile data | age, sex, height, weight, goal, equipment, training days, eating style | from you in the questionnaire |
| Health data | PAR-Q+ answers, injuries, pregnancy or postpartum period, sleep, readiness score, weight changes | from you |
| Photos | meal, activity and progress photos | from you |
| Training and nutrition data | completed workouts, weights, reps, meals, water, activities | from you and the app |
| Payment data | plan, payment history, last 4 digits of your card | from Stripe. We never see or store your full card number. |
| Technical data | device type, browser, IP address, error logs | automatically |
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Creating your account, preparing your training and nutrition plan | performance of a contract (6(1)(b)) |
| Using health data to build a safe plan | your explicit consent (9(2)(a)). You can withdraw it at any time. |
| Recognising meals and activities from photos | your explicit consent (9(2)(a)) |
| Payment processing and accounting | performance of a contract and legal obligation (6(1)(b), 6(1)(c)) |
| Weekly report emails | legitimate interests (6(1)(f)). You can opt out with one click. |
| Service security and fixing errors | legitimate interests (6(1)(f)) |
We do not sell your data. If you agree to analytics and advertising cookies (6(1)(a), consent), we measure how the site is used and how our ads perform. We never use health data, photos, workout and meal records or children’s data for advertising.
4. Artificial intelligence
Training plans, weekly reports and meal photo recognition are produced by an AI model provided by Anthropic. We send the model only what is needed for the specific task, without your name or email. Anthropic processes this data on our behalf and, under contract, does not use it to train its models.
AI recommendations are not a medical decision. They have no legal effect on you (Article 22 GDPR), and you can always change your plan yourself.
5. Children on the Family plan
Only a parent on the Family plan can create a child profile. The parent confirms that they are the child’s legal representative and consents to the processing of the child’s data. In Latvia this is mandatory for children under 13.
Children never see calories. Parents see the child’s workouts and meals and can edit or delete the child’s profile. We do not use children’s data for marketing.
6. Who we share data with
Only with service providers (processors) that help Livuss run. We have a data processing agreement with each of them.
| Provider | What it does | Where |
|---|---|---|
| Supabase | database, accounts, photo storage | EU (Frankfurt, Germany) |
| Vercel | website and app hosting | USA / EU |
| Stripe | payments | Ireland / USA |
| Anthropic | AI plans, reports, photo recognition | USA |
| Resend | sending emails | USA |
| Paddle | payments for customers in India | United Kingdom |
If you accept cookies, analytics and advertising providers (Google, Meta, TikTok) receive device and page visit data. Read more in the Cookie Notice. Data may also be disclosed to authorities where required by law.
7. Transfers outside the EU
Some providers process data in the USA. In such cases we rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
8. How long we keep data
| Data | Retention period |
|---|---|
| Account, profile and training data | while your account is active + 12 months after your subscription ends, so you don’t have to fill anything in again if you come back |
| Meal and activity photos | 90 days, after which only the recognised numbers remain |
| Progress photos | until you delete them or delete your account |
| Payment records | 5 years (Latvian Accounting Law) |
When you delete your account, we delete your data within 30 days, except data we must keep by law.
9. Your rights
You have the right to:
- receive a copy of your data
- correct inaccurate data
- delete your data and account (you can do this yourself in your account settings)
- restrict or object to processing
- receive your data in a machine-readable format (data portability)
- withdraw your consent at any time. This does not affect processing carried out before the withdrawal.
Send requests to support@livuss.com. We reply within one month. You have the right to lodge a complaint with the Data State Inspectorate of Latvia (dvi.gov.lv) or the supervisory authority in your country.
10. Security
Data is transmitted encrypted (HTTPS). We store photos in private storage that only you, and on the Family plan your parent, can access. Each user can access only their own data.
11. Changes
We will notify you by email of any material changes at least 30 days in advance.
Cookie Notice
Livuss uses three types of cookies. Necessary cookies are always on. Analytics and advertising cookies are switched on only if you agree.
| Type | Purpose | Examples | Consent needed |
|---|---|---|---|
| Necessary | logging in, language choice, payment security | Supabase (sb-...), language, Stripe | no |
| Analytics | understanding how the site is used and improving it | Google Analytics, Vercel Analytics | yes |
| Advertising | measuring the results of our ads and showing Livuss ads on other websites | Meta Pixel (Facebook, Instagram), Google Ads, TikTok Pixel | yes |
Analytics and advertising cookies never receive your health data, photos, workout or meal records. They only see which pages you opened and whether you signed up.
You can change your choice at any time via the "Cookie settings" link at the bottom of the page. We keep your consent for 12 months, after which we will ask again.