Privacy Policy

• Account details - your email address and a securely hashed password.
• Your content - the documents, files, photos, links, and messages you add to a session, and the answers generated for you.
• Voice - if you use the microphone, the recording of what you say, and if you use read-aloud or the daily brief, the spoken audio we generate for you.
• WhatsApp - if you connect WhatsApp, your WhatsApp phone number and the messages, voice notes, photos and files you send to Thelivi there.
• Billing - if you buy a paid plan, the plan, its status and renewal date. Your card or other payment details go straight to our payment provider (below) and never reach us.
• How you found us - on your first visit to our website we set one cookie of our own that notes the campaign tags in the link you followed, the site that sent you and the first page you saw. If you create an account, we save these with it so we can count which channels bring people to Thelivi. The cookie lasts 90 days and is never shared, and we use no third-party analytics or advertising trackers.
• Usage data - basic records of activity (e.g. sessions created, features used, token usage) needed to run and improve the service.

We use your data only to provide the service: to store your sessions, answer your questions, show your usage, and keep your account secure. We do not sell your data, and we do not use it to advertise to you.

When you send feedback on a reply, that feedback, the reply and the question before it are emailed to our support inbox so a person can look at what went wrong. Nothing else from the conversation is sent.

We do not run our own foundation AI models. To deliver the service we send data to the providers below, each of which processes it on our behalf only to return a result to us. None of them may use it to train or improve their AI models: for each one this is either their standing policy for the service we use or a setting we have turned off in our account with them.

• Ollama (Ollama Cloud, United States) - the large language models that write answers, summaries and daily briefs. It receives your message, the conversation so far and the parts of your sources the assistant needs. Ollama states that prompts and responses are processed transiently, never logged and never used for training, and it requires the same of the NVIDIA cloud partners that host its models in the United States (and, for extra capacity, Europe).
• Fireworks AI (United States) - turns the text of your documents and of pages read for you into search vectors so the assistant can find the right passage. It keeps the text only in memory for the duration of the request and does not store or train on it. If it is unavailable this step runs on our own servers instead, and nothing is sent to anyone.
• TypeSafe AI (United States) - for scheduled tasks only: decides whether a run's result meets the condition you set for being notified. It receives your task instruction and the run's result, and does not train or fine-tune any model on it.
• Sarvam AI (India) - speech: it turns your voice recordings into text, and turns text into speech for read-aloud and the spoken daily brief. Training on our data is turned off in our account.
• Polar (polar.sh) - payments: Polar is the merchant of record for paid plans, so it sells the subscription to you, takes the payment through its payment processor, issues invoices and handles sales tax. You give your payment details, name, email and billing address to Polar directly at checkout. We send Polar only your Thelivi account id, so the purchase is linked to your account, and Polar tells us your plan, its status and renewal date. Polar handles that data under its own privacy policy.
• Infrastructure - Hetzner (servers in Germany, European Union) runs the service and stores your data; Cloudflare carries traffic to the service and stores our encrypted backups. Apple, Google and your browser's push service deliver the notifications you turn on, and Meta delivers WhatsApp messages if you link WhatsApp.

We do not share your data with anyone else except when the law requires it.

If you connect your Google account under Settings → Connections, you choose which products Thelivi may use, and we ask Google only for the access those products need:

• Google Calendar - your list of calendars and the events on them, so the assistant can tell you what is on, find free time, and create, change or delete events when you ask it to.
• Google Tasks - your task lists and tasks, so it can list your to-dos, add tasks and mark them done when you ask it to.
• Google Contacts - read-only access to the names, email addresses, phone numbers and organisations in your contacts, so it can find the person you mean.
• Google Drive, Docs and Sheets - only the files you pick for Thelivi in Google's file picker and the files Thelivi creates for you, never the rest of your Drive, so the assistant can read them, add them to a conversation's sources, and create Google Docs and Sheets when you ask it to.
• Your Google account email - to show which account is connected.

We use this data only to answer your requests, to run the scheduled tasks you set up, and for the reminders you turn on (such as a heads-up before a meeting, which reads your upcoming events every few minutes and sends you a notification). The parts the assistant reads to answer a request are saved in that conversation's history like the rest of the conversation, until you delete it. A Drive file you add to a conversation's sources is stored as that source until you delete it. We do not otherwise copy your calendar, tasks, contacts or files into our systems. The access token Google gives us is stored encrypted and never shown to anyone, including the assistant.

Who receives Google user data. We share, transfer or disclose Google user data only with the service providers below, only to do what you asked, and never for any other purpose:

• Ollama (Ollama Cloud) - the events, tasks, contacts or file contents the assistant reads for a request are sent with that request to the language model that writes the answer (including scheduled tasks, reminders and the daily brief).
• Fireworks AI - the text of a Drive file you add to a conversation's sources, to make it searchable.
• TypeSafe AI - the result of a scheduled task that used Google data, to decide whether to notify you.
• Sarvam AI - the text of a daily brief or an answer you choose to hear read aloud, which may mention your events, to turn it into speech.
• DuckDuckGo - when you ask the assistant to search the web, the search words it chooses are sent to the DuckDuckGo search engine. They can mention details from your Google data, for example a meeting topic you asked it to look up.
• Delivery and hosting - Hetzner and Cloudflare (hosting, network and encrypted backups); Apple, Google and browser push services for notifications you turn on, such as a meeting heads-up; Meta when you use Thelivi on WhatsApp.

AI models and Google user data. Thelivi does not use Google user data obtained through Google Workspace APIs, whether raw, aggregated, anonymized or derived, to develop, improve or train generalized or non-personalized AI or machine-learning models. We do not transfer it to anyone who would, and we do not sell it. Each AI provider above processes it only to return a result for your request, and none of them may keep it or train on it: Ollama, Fireworks AI and TypeSafe AI do not train on customer data under their own policies, and training is turned off in our Sarvam AI account. We do not fine-tune or train any model of our own on it.

Self-hosted processing. If Fireworks AI is unavailable, the text of a Drive file you added is turned into search vectors by a self-hosted copy of the same open model (nomic-embed-text) running on our own servers in Germany. In that case your Google user data is processed locally and is never sent to the model's provider or to anyone else, for training or for any other purpose.

We do not sell Google user data, use it for advertising, or use it to develop, improve or train AI or machine-learning models, and conversations that used Google data are left out of the analysis we use to improve the assistant. No person at Thelivi reads it unless you ask us to for support, it is needed for security, or the law requires it.

You can pause a product at any time to stop the assistant using it, or choose Disconnect to revoke Thelivi's access at Google and delete the stored token. Deleting your account does the same. You can also remove access from your Google Account settings.

Thelivi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Photos you take in the app (for example of a bill, a prescription or a notice) and files you upload are stored as sources of that conversation so the assistant can read them and point you back to them, until you delete the conversation or your account. Conversations that include a document you uploaded are left out of the analysis we use to improve the assistant. Reminders you ask for from a document are saved as scheduled tasks you can pause or delete at any time.

Recordings you make with the microphone are sent to our speech provider to be turned into text, and the text is placed in your message box for you to check before sending. We do not keep the recording. Audio we generate when you use read-aloud or the daily brief is stored with that conversation or brief so it can be replayed, and is removed when you delete your account. Voice use is metered against your account's monthly allowance.

If you turn on the daily brief, each morning Thelivi reads today's events from your Google Calendar (only if you connected it) and what your watches found, and writes a short brief that is stored in your account. Turn it off at any time in Settings.

You can link a WhatsApp number to your account with a one-time code from Settings. Messages you send to Thelivi on WhatsApp, and our replies, pass through Meta, which provides the WhatsApp service and processes them under its own terms. In Thelivi they are handled like any other conversation and appear in your chats. Voice notes are transcribed by our speech provider; photos and files are stored as sources of that conversation. We keep a record of each WhatsApp message's delivery id for up to seven days so a message is never answered twice.

Alerts on WhatsApp are off unless you turn them on. Send STOP to stop them and unlink your number, or unlink it in Settings. Deleting your account removes the link.

Your data is stored on our infrastructure hosted in Germany (European Union). We keep it for as long as your account is active. Deleting a session removes its messages and sources; deleting your account removes your data. Backups may persist for a short period before being overwritten.

Data is transmitted over encrypted connections (HTTPS) and access is protected by authentication. No system is perfectly secure, but we take reasonable measures to protect your information.

You can access and delete your data at any time from within the app (delete sessions, or your account). For any request - including a full export or deletion - email us and we'll help.

The service is not directed to children under 16, and we don't knowingly collect their data.

We may update this policy as the product evolves; material changes will be reflected by the “last updated” date above. Questions? Email [email protected].