Effective date: April 25, 2026
Last updated: September 23, 2026
This Privacy Policy explains how LevelUp Life ("we", "us", or "our") collects, stores, uses, and protects your personal data. We believe in transparency and keeping things simple. This policy applies to the LevelUp Life web app, iOS and Android apps, and all related services.
The data controller responsible for your personal data is:
If you have questions about how we process your data, contact us at the email above. We will respond within 30 days.
If you choose to create an account and sign in:
Your journey data is stored to provide and improve the service:
If you upgrade to LevelUp Life Pro:
If you use AI Coach or AI-assisted mission features:
Your coach messages are sent to our AI providers only to generate a reply. They are not used to train those providers' foundation models under our API terms. Reports are for human review of that reply, not for training.
On a hard mission you can attach a note or a photo. That proof is stored on your device. If you are signed in, it is also saved to Supabase and can appear on the community proof feed to other signed-in players, together with your display name.
Stats and missions can reflect sleep, exercise, mood, or money because you log them as part of the game. We do not read Apple Health, Google Fit, or medical records. Do not put diagnoses or other people's private information in notes or proof posts.
If you opt in to social features:
When you use the app, we automatically collect:
This data is stored only on your device (localStorage) and synced to Supabase only if you sign in. We also store anonymous first-party marketing events locally (e.g. button clicks, onboarding completion) to improve the product — never sold or used for ads.
Data we do NOT collect:
Under GDPR (Article 6), we process your data only when we have a lawful basis:
Performance of a Contract
Storing and syncing your game progress to provide the LevelUp Life service you requested.
Legitimate Interest
Maintaining app functionality, preventing data loss, and providing a consistent user experience across devices.
Consent
Signing in is how you ask us to sync. Posting proof, joining a leaderboard, and the first AI Coach reply happen only after you take that step. You can stop by signing out, deleting the post where the app allows it, or deleting your account.
By default, all your data is stored locally in your browser (localStorage and IndexedDB). This means your progress is private to your device and browser. Clearing your browser data will remove this information.
If you create an account and sign in, your data syncs to Supabase (a secure cloud database hosted on AWS). This lets you access your progress across devices. See Section 5 for details.
We use the following third-party processors who may have access to your data:
Purpose: Authentication, cloud database storage, and data sync
Data accessed: Email, password (hashed), game progress, social data, and proof notes or photos you post while signed in
Location: AWS EU-West (Ireland) by default
Compliance: GDPR-compliant, SOC 2 Type II certified. Data processed under a Data Processing Agreement (DPA).
Privacy policy: supabase.com/privacy
Purpose: Managing in-app subscriptions and validating purchase receipts
Data accessed: Anonymous app user ID, subscription/entitlement status, purchase receipts
Privacy policy: revenuecat.com/privacy
Purpose: Processing App Store purchases and subscriptions on iOS
Data accessed: Payment details are handled entirely by Apple; we never see your card details
Privacy policy: apple.com/legal/privacy
Purpose: Processing Google Play Store purchases and subscriptions on Android; Google Sign-In account authentication when you choose that option
Data accessed: Payment details are handled entirely by Google; for Sign-In we receive email and a stable Google user id via Supabase Auth — never your Google password
Privacy policy: policies.google.com/privacy
Purpose: Processing web-based Pro checkout and billing (leveluplife.app only, not used in the native iOS/Android apps)
Data accessed: Email address and payment details needed to complete checkout
Privacy policy: stripe.com/privacy
Purpose: Primary provider for AI Coach chat and mission suggestions
Data accessed: Your AI Coach messages and relevant progress context sent to generate a reply. Not used to train Groq's models under our API terms.
Privacy policy: groq.com/privacy-policy
Purpose: Fallback provider for AI Coach chat and mission suggestions when Groq is unavailable
Data accessed: Your AI Coach messages and relevant progress context sent to generate a reply. Not used to train Anthropic's models.
Privacy policy: anthropic.com/privacy
Purpose: Sending transactional and optional reminder emails (e.g. onboarding tips, streak reminders) when email delivery is enabled
Data accessed: Your email address and the content of the email we send you
Privacy policy: resend.com/legal/privacy-policy
Purpose: Crash and error reports, only when crash reporting is turned on for that build
Data accessed: Error details, device/app version, and — if you are signed in — your account id. Not your mission text or payment details.
Privacy policy: sentry.io/privacy
Purpose: Cookieless page and event counts on the website when analytics is enabled
Data accessed: Page URL, referrer, browser type, and coarse location derived from IP. Not your mission text. No advertising profile.
Privacy policy: plausible.io/privacy
Purpose: Hosting the website and legal pages
Data accessed: IP address and request logs needed to deliver the site
Privacy policy: vercel.com/legal/privacy-policy
Purpose: Loading the typefaces used on the site and in the app shell
Data accessed: Your IP address may be processed by Google when the font file is requested
Privacy policy: policies.google.com/privacy
Purpose: Delivering open-source JavaScript libraries (Tailwind CSS, Lucide Icons)
Data accessed: IP address may be logged transiently for CDN delivery. No personal data is shared.
We only share data with the processors listed above, each bound by their own privacy policy and (where applicable) a Data Processing Agreement. We never sell your data.
Under GDPR Article 28, when a data controller (LevelUp Life) uses a data processor (Supabase Inc.) to handle personal data on its behalf, a Data Processing Agreement (DPA) must be in place.
The same pattern applies to the other processors in Section 5. We use them under their published data-processing terms. Questions: realleveluplife@gmail.com.
Account and game data stored in Supabase is hosted in the EU (AWS Ireland), unless the project region is changed.
Some providers process data in the United States or other countries: Groq, Anthropic, RevenueCat, Resend, Stripe, Apple, Google, Sentry, Plausible, and Vercel. When that happens, the transfer rests on the safeguards in that provider's data-processing terms, including Standard Contractual Clauses where the provider offers them.
If you never sign in and never open AI Coach, progress stays on your device and those cloud providers do not receive it. Font and website hosting requests can still send your IP address to Google Fonts or Vercel.
We never sell, rent, or share your data with third parties for their own purposes. We don't use your data for advertising. We only access your data when you request support or when required by law.
| Data Type | Retention Period |
|---|---|
| Account data (email, auth) | Until you delete your account |
| Game progress & stats | Until you delete your account or clear local data |
| Subscription data (tier, dates) | Until you delete your account or subscription expires |
| Social data (friends, leaderboards) | Until you delete your account or opt out of social features |
| Community proof posts | Until you delete your account, or we remove a post after a report |
| AI Coach messages & related logs | Until you delete your account; operational logs may be retained briefly for reliability |
| Local-only data (no account) | Until you clear browser data or use "Reset All Data" |
| Data after account deletion | Deleted within 30 days from all systems |
We do not retain your personal data longer than necessary. Once you delete your account, all associated data is permanently removed within 30 days.
We implement appropriate technical and organizational measures to protect your data:
While we strive to protect your data, no system is 100% secure. We recommend using a strong, unique password for your account.
| Type | Purpose | Duration |
|---|---|---|
| Authentication cookies | Maintain your signed-in session (Supabase Auth) | Session / 7 days |
| localStorage data | Store game progress and preferences locally | Until manually cleared |
We do not use advertising cookies, Google Analytics, or Facebook Pixel. The iOS and Android apps do not show a cookie banner, because they do not set browser cookies.
On the website, Supabase may set a sign-in cookie if you log in. Plausible, when enabled, counts pages without a tracking cookie. The website banner covers that choice. First-party event counts may also stay in your browser until you clear site data.
Depending on your location, you have the following rights:
Right to Lodge a Complaint: If you believe we have mishandled your data, you have the right to complain to your local supervisory authority. EEA residents can find their authority at edpb.europa.eu. California residents can contact the California Attorney General.
To exercise any of these rights, use the in-app settings or contact us at realleveluplife@gmail.com. We will respond within 30 days (or 45 days for CCPA requests).
If you no longer have the app installed, use Delete your LevelUp Life account. That page lets you email a deletion request without signing in again. We process it within 30 days.
Open the app → More → your profile → tap "Reset All Data". This removes progress stored on the device. It does not delete a cloud account.
To delete your account and all cloud data from inside the app:
Cancel an App Store, Google Play, or Stripe subscription yourself first. Deleting the account removes our copy of your data; the store may keep its own payment record where the law requires it.
Before deletion, open More → your profile and tap Export My Data. This gives you a JSON file with your progress, stats, and history.
Important: Account deletion is permanent and irreversible. All game progress, achievements, and social connections will be permanently removed within 30 days. We cannot recover your data once deleted.
LevelUp Life is only for people who are 16 or older. It is not directed at children. There is no parent-consent path for anyone younger.
If we learn that someone under 16 has an account or has posted personal data, we delete it. Parents can email realleveluplife@gmail.com.
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms:
For local-only users (no account), a breach of cloud data would not affect you since your data never leaves your device.
We do not use automated decision-making or profiling that produces legal or similarly significant effects concerning you.
The app uses algorithmic features (adaptive difficulty, mission recommendations, AI coaching tips) to personalize your experience. These are purely for game enjoyment and do not make decisions that affect your legal rights, credit, employment, or similar matters. Stop opening AI Coach if you do not want those replies. Deleting the account removes the saved coach history.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
Previous versions of this policy are available upon request by emailing realleveluplife@gmail.com.
Questions, concerns, or data requests? Reach out to Martynas Samauskas (LevelUp Life):
We will respond to all data subject requests within 30 days (GDPR) or 45 days (CCPA). For verification, we may ask you to confirm your identity before processing your request.
LevelUp Life is committed to protecting your privacy and data rights.
This policy is effective as of April 25, 2026.