Privacy Policy

LeeviiOS is the service described on this site, operated from Bangladesh. Where the law uses the word, we are the controller of the information described below: we decide what is collected and why, and we are the ones to hold to it.

This policy covers the LeeviiOS website and the application you sign in to. It does not cover any site we link out to, which will have a policy of its own.

Almost all of it is what you typed in. LeeviiOS is a place to keep the parts of your life you want organised, so the honest summary is that it stores those parts, and little else.

Your account

Your email address, your name, the avatar you picked, your timezone and your appearance setting. Your password is never stored as a password — our authentication provider keeps a one-way hash, and neither we nor it can read the original.

Your work and your week

Tasks, what makes them urgent, goals, milestones, goal measurements, habits, and which days you completed them.

Your money

Transactions you record — amount, direction, category, date and any note you add — along with your currency and the budgets you set. LeeviiOS is not connected to any bank and cannot read your accounts. Every figure in it is a figure you typed.

Your body measurements, if you add them

Date of birth, height, and any weight readings you log. This whole section is optional, is never asked for during sign-up, and can be left empty forever without affecting anything else.

Leevii's working notes

Conversations with the assistant, anything you explicitly approved it to remember, actions it proposed, and the sentence it last wrote for your dashboard.

Reminders and notifications

What you asked to be reminded about, and when.

Your subscription

Which plan you are on, whether it is active, when the period ends, and an identifier from the payment processor. No card details — see below.

A record of changes

An audit log of changes made to your own data, so that if something ever looks wrong there is a way to see what happened. It is readable by you and by nothing else.

This list matters more than the one above, and each line is something you can check rather than something you have to take our word for.

• No card details, ever. Payment happens on Paddle.com Market Ltd’s own checkout. Your card number never reaches our servers, and we could not produce it if we were asked to.
• No analytics, no tracking pixels, no advertising. There is no analytics package in this application. We do not know which pages you visited, how long you stayed, or where you came from. We have never sold data, and there is nothing here to sell. We do watch for crashes — see Sentry below — but that only ever fires when something has broken, and it is sent without anything that identifies you.
• No location. There is no location column anywhere in the database. If you press Show me on a map on your dashboard, your browser asks your permission first, the coordinate is rounded to about a kilometre before it leaves our server, it is used once to name the city, and it is then forgotten. Close the panel and it is gone.
• No log of who visited. To stop someone hammering the sign-in or reset forms, we count recent attempts. What is stored is not your address: it is a keyed one-way fingerprint of it, which cannot be turned back into an address or matched to your account, and which is deleted within the hour. It exists to recognise a machine trying passwords, and it cannot tell us you were here.
• No reading your email, calendar, bank or files. LeeviiOS connects to no external account of yours, so there is nothing for it to read.
• No training on your data. Nothing you put into LeeviiOS is used to train a model, ours or anybody else’s.

LeeviiOS sets two things, both necessary, neither used to follow you anywhere.

A session cookie

Set when you sign in, so that the next page you open knows it is still you. Signing out clears it. Without it there is no way to stay signed in.

A theme preference

Whether you chose light or dark, kept in your browser's own storage so the page does not flash the wrong colour while it loads. It never leaves your device.

There is no third-party cookie, no advertising cookie and no cross-site tracker, which is why you have never seen a cookie banner here. We did not hide it — there is nothing to ask you about.

Leevii is the assistant inside LeeviiOS. It writes the sentence at the top of your dashboard, and it is given far less than people expect.

What it receives instead is a short, plain-text summary assembled fresh for that one request: the greeting, the one-line summary your own figures already produced, the titles of today’s priorities, and how many habits you have completed. Every number in it was calculated by ordinary tested code before the model was involved. Leevii is asked to put those facts into two sentences, and its answer is checked against the facts before you see it — if it states a number it was not given, the answer is thrown away and you get the sentence the product computed.

That request is carried by OpenRouter to a Google Gemini model. Your name, your email and your account identifier are not part of it. We do not train anything on it, and we have not given it to anybody to train on; what those two providers may do with a prompt is set by their own terms, which we do not control and will not speak for.

Running a service means using other companies for the parts we do not build ourselves. This is all of them. There is no ninth one we have not mentioned, and none of them receive your data for their own purposes.

Supabase

Hosts the database and handles sign-in. This is where your data lives.

Vercel

Hosts and serves the application itself. Like any web host, it processes the requests your browser makes.

Paddle.com Market Ltd

Takes the payment and is the seller of record for your subscription. They hold your billing details; we hold an identifier that points at your subscription with them.

OpenRouter and Google

Receive the short summary described above when Leevii writes your dashboard sentence, and nothing else.

Resend

Delivers the email LeeviiOS sends you: the message to confirm your address, the one to reset a password, a welcome, and a notice when your password changes. They receive your email address and the message itself, because that is what sending an email is. They are not given your data, and we do not send marketing.

Sentry

Receives a report when something breaks: the route, the method, the browser, and the stack trace. Deliberately not the rest -- no session cookie, no request body, no query string, no name, no email, no account identifier and no IP address. It does not record your screen and does not watch pages that are working. Every report is filtered on the way out, and that filter is tested rather than trusted.

ExchangeRate-API

Publishes the daily exchange rates used to estimate a combined total when you record money in more than one currency. Listed for completeness rather than because it learns anything: our server asks it for the day's rates and it is told nothing at all -- not who asked, not what you hold, not how much. Your amounts never leave our server, and no converted figure is ever stored.

BigDataCloud

Receives a coordinate rounded to about a kilometre, and only in the moment you press the button asking to be shown on a map. The request is made by our server rather than by your browser, so they do not see your IP address either.

Beyond these, we disclose data only where the law requires it of us. We do not sell it, rent it, or share it with advertisers, data brokers or partners, and we have no plans that would involve doing so.

Where a lawful basis has to be named, ours are these. Most of what LeeviiOS holds falls under the first.

• To provide the service — performing the contract you entered into when you created an account. Your tasks, money, goals and habits are held because the product does not exist without them.
• Because you asked — consent, for anything optional: body measurements, letting Leevii remember something, finding where you are on a map. Each can be withdrawn by deleting the entry or declining the prompt, with no effect on the rest.
• To keep the service working and paid for — our legitimate interest in security, in preventing abuse, and in keeping accurate records of subscriptions.
• Because we must — legal obligation, for the tax and accounting records that relate to payments.

For as long as your account exists. LeeviiOS is built to hold a record over years — a habit streak or a spending pattern is worth nothing if it is quietly trimmed after ninety days — so nothing expires on its own.

When you delete your account, everything you own is removed from the database in the same operation. Not marked as deleted, not archived: removed. A copy may survive briefly in our host’s routine backups, which age out on their own cycle; nothing in LeeviiOS can read those, and we do not restore from them to recover a deleted account.

Records of payments are kept by the payment processor for as long as tax law requires, independently of your account. That is their obligation and ours, and deleting your LeeviiOS account does not undo it.

Two of these are buttons rather than requests, which we think is the only honest way to offer them.

Take a copy

Settings has an export that hands you every row LeeviiOS holds about you, as one file, immediately — no request, no waiting. It is read through your own permissions, so it cannot contain anybody else’s data.

Delete everything

Settings has a delete that removes your account and everything belonging to it. It is immediate and it is irreversible. Take the export first if you want one.

Correct it

Every piece of data in LeeviiOS is editable in the screen that shows it. Nothing needs to go through us.

Make Leevii forget something

Anything the assistant remembered is listed in Settings and can be removed one item at a time.

Object, restrict, or complain

Write to hello@leeviios.com. Depending on where you live you may also have the right to complain to a data protection authority, and you do not have to come to us first.

Every table that belongs to a person is protected at the database level, keyed to that person, rather than by the application remembering to filter. This is the difference that matters: a mistake in our own code cannot show you somebody else’s data, because the database itself will not return it.

• All traffic is encrypted in transit.
• Keys that can bypass those protections exist only on the server and are never sent to your browser.
• The change log is written by the database rather than by the client, so it cannot be forged from a browser.
• Payment credentials are never in our possession, so they cannot be taken from us.

No service can promise it will never be breached. If one ever affects your data, we will tell you what happened and what was involved, without waiting to be asked.

LeeviiOS is not intended for children. You need to be at least 16 to create an account, or older if that is the age of digital consent where you live. If you believe a child has created an account, write to hello@leeviios.com and we will remove it.

The date at the top is the date this document last changed. If a change materially affects what we do with your data, we will tell you by email before it takes effect, rather than quietly editing this page and relying on you to notice.

One address for privacy, support, refunds and anything legal: hello@leeviios.com. A person reads it.

For what you are agreeing to when you use LeeviiOS — including the plans, billing and where refunds stand — see the Terms of Service.