Privacy Policy

Controller and contact

The controller responsible for Livona is Cod3.io GmbH, Hegiweg 2, 4457 Diegten, Switzerland. This policy applies to the Livona mobile apps, the Livona website, account services, family sync, backups, and related support.

Information we process

The information processed depends on which Livona features you choose. You can use core tracking locally without creating an account.

• Family and child information you enter, such as display name, date and time of birth, time zone, and unit preferences.
• Tracking information such as sleep, feeding, diapers, growth, health observations, medication notes, routines, timestamps, and free-text notes.
• Account and family-sync information such as email address or sign-in provider identifier, user ID, household membership, invitations, permissions, sessions, and device identifiers.
• Subscription information such as product, store transaction identifier, entitlement status, renewal or expiry date, and refunds. We do not receive your full payment-card details.
• Technical information required to operate and secure online services, including IP address, timestamps, request metadata, error and security logs.
• Messages and attachments you choose to send when contacting support.

Local-first storage and optional sync

Core records are created and stored on your device. They remain there until you delete them, reset the app, or remove the app, subject to your device and operating-system backup settings.

If you enable an account, backup, or Family Sync, the information needed for that feature is encrypted in transit and synchronised to Livona's cloud infrastructure. Household permissions determine which invited caregivers can access shared records.

Purposes and legal bases

We process information to provide the features you request, maintain your account and subscription, synchronise authorised family members, answer support requests, protect the service, meet legal duties, and improve reliability.

• Performance of a contract or steps requested before entering a contract, including providing tracking, Premium, backup, and sync.
• Your consent where required, particularly for optional processing of sensitive information or optional device permissions. You may withdraw consent at any time for future processing.
• Our legitimate interests in operating a secure, reliable, and privacy-preserving service, provided those interests do not override your rights.
• Compliance with legal obligations, including accounting, tax, fraud prevention, and valid authority requests.

Children and sensitive family information

Livona is designed for parents and authorised caregivers, not for use by children themselves. By entering information about a child, you confirm that you are legally permitted to do so and to share it with the household members you invite.

Health and development observations can be sensitive personal data. Livona processes them only to provide the features you select. Livona does not use child or health information for advertising.

Livona Intelligence and AI

Livona prioritises analysis on the device where supported. Unless a feature clearly tells you otherwise and asks for the required choice or consent, child tracking content is not sent to a third-party generative-AI service.

Insights identify patterns and provide informational summaries. They are not medical diagnoses, automated decisions with legal effects, or a substitute for professional care.

Processors and recipients

We disclose information only where needed to provide the service, comply with law, protect rights, or follow your instructions. Current service categories include:

• Supabase for authentication, database, encrypted synchronisation, and related infrastructure, with the production project planned in the Frankfurt, EU region.
• Amazon Web Services, including Amazon SES in the Frankfurt region, for transactional email delivery.
• Apple and Google for sign-in, app distribution, subscription billing, purchase validation, and platform services.
• Hosting, security, and professional service providers acting under appropriate confidentiality and data-protection obligations.
• Other household members whom you explicitly invite and authorise.

International transfers

Some providers, particularly Apple and Google, may process information outside Switzerland or the EEA. Where required, transfers rely on adequacy decisions, approved contractual safeguards, or another lawful mechanism. Provider-specific processing is also governed by the privacy terms shown by the relevant platform.

Retention and deletion

We retain personal data only for as long as required for the purposes described above. The period depends on whether data remains only on your device, whether cloud sync is enabled, whether an account remains active, and whether statutory retention duties apply.

Deleting the app does not necessarily delete cloud data or cancel a store subscription. Account deletion can be initiated inside the app. You may also request account and associated-data deletion using the protected contact option below. Some transaction, security, or accounting records may be retained where legally required, then deleted or anonymised.

Security

We use measures appropriate to the sensitivity of family information, including encryption in transit, access controls, household-level permissions, row-level security, limited service access, secure development practices, and monitoring. No system can guarantee absolute security; please protect your device and sign-in methods and tell us promptly about suspected misuse.

Your privacy rights

Depending on your location, you may request information and access, correction, deletion, restriction, objection, and portability, and may withdraw consent for future processing. We may need to verify your identity and protect the rights of other household members before fulfilling a request.

You may complain to the Swiss Federal Data Protection and Information Commissioner (FDPIC) or, where the GDPR applies, your local supervisory authority.

Website and device permissions

The current Livona marketing and legal website does not use advertising trackers. It stores only your light or dark theme preference locally and standard server logs may be created for security and delivery.

Mobile permissions are requested only when a feature needs them. You can change permissions in your device settings, although disabling one may limit the related feature.

Changes to this policy

We may update this policy when Livona, its providers, or legal requirements change. Material changes will be communicated in an appropriate way before they take effect where required. The effective date and version at the top identify the current policy.