Privacy Policy

This Privacy Policy explains how Leviio (“Leviio”, “we”, “us”) collects, uses, shares, and protects personal data when you use our website, dashboard, storefronts, and client portal (the “Service”).

It applies to Creators, Clients, and visitors. By using the Service, you acknowledge the practices described here. This policy should be read together with our Terms of Service.

Leviio is the data controller for personal data we process about Creators and visitors. For personal data that Creators upload about their own Clients, Leviio generally acts as a data processor on the Creator’s behalf (see “Creator & Client Data”).

You can reach us at privacy@leviio.app for any privacy questions or to exercise your rights.

Information you provide

• Account data — name, email, username, password, profile details, niche, and bio.
• Client & coaching data — names, contact details, goals, measurements, plans, sessions, and messages that Creators add.
• Content — products, programs, meal plans, images, and files you upload.
• Payment data — billing details processed by our payment provider; we receive limited information such as the last four digits and transaction status, not full card numbers.
• Communications — messages you send through the Service and to our support.

Information we collect automatically

• Usage data — pages viewed, features used, and actions taken.
• Device & log data — IP address, browser type, device identifiers, and timestamps.
• Cookies & local storage — used to keep you signed in and remember preferences.

We use personal data to:

• provide, operate, and maintain the Service and your account;
• process subscriptions, transactions, and payouts;
• enable storefronts, client portals, messaging, and bookings;
• send service, security, and transactional communications;
• provide customer support and respond to requests;
• monitor, secure, debug, and improve the Service; and
• comply with legal obligations and enforce our Terms.

Where required, our legal bases include performance of a contract, your consent, our legitimate interests in running the Service, and compliance with legal obligations. You may withdraw consent at any time where processing is based on consent.

We use strictly necessary cookies and browser local storage to keep you signed in and to operate core features, and we may use limited analytics to understand usage. You can control cookies through your browser settings; disabling necessary cookies may affect functionality.

We do not sell your personal data. We share it only as needed with:

• Service providers (sub-processors) who help us run the Service, such as hosting (Vercel), database and authentication (Supabase), payment processing (e.g. Razorpay), and email delivery (e.g. Resend);
• Creators and Clients as required to complete transactions (for example, a Creator receives the details of a Client who purchases from them);
• Authorities or third parties where required by law, to enforce our Terms, or to protect rights, safety, and security; and
• Successors in connection with a merger, acquisition, or sale of assets, subject to this policy.

When a Creator uploads or manages data about their Clients, the Creator is the controller of that data and is responsible for having a lawful basis and appropriate notices in place. Leviio processes that data on the Creator’s instructions to provide the Service. Clients who have questions about how a particular Creator uses their data should contact that Creator directly.

We retain personal data for as long as your account is active and as needed to provide the Service, then for the period required to comply with legal, tax, accounting, and dispute-resolution obligations. When data is no longer needed, we delete or anonymise it. You can request deletion as described below.

We use reasonable technical and organisational measures to protect personal data, including encryption in transit, access controls, and secure infrastructure. No method of transmission or storage is fully secure, so we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

Our service providers may process data in countries other than your own. Where we transfer personal data internationally, we take steps to ensure an adequate level of protection consistent with applicable law (for example, contractual safeguards with our providers).

Subject to applicable law (including India’s Digital Personal Data Protection Act and, where relevant, the GDPR), you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data;
• object to or restrict certain processing;
• withdraw consent where processing relies on consent;
• request a copy of your data in a portable format; and
• nominate another person to exercise your rights in case of death or incapacity.

To exercise any right, email privacy@leviio.app. We may need to verify your identity, and we will respond within the timeframes required by law.

The Service is not directed to children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, contact us and we will take appropriate steps to delete it.

In accordance with applicable Indian law, you may contact our Grievance Officer regarding any concern about your personal data at grievance@leviio.app. We will acknowledge and address complaints within the timelines prescribed by law.

We may update this Privacy Policy from time to time. Material changes will be notified through the Service or by email, and we will update the “Last updated” date above. Your continued use of the Service after changes take effect indicates acceptance of the updated policy.

For any privacy questions or requests, contact us at privacy@leviio.app.