Privacy Policy

Liv+ is a personal health companion. To work, it handles some of the most sensitive information there is: what you tell it about your body, your symptoms, and how you feel. We treat that as special category personal data under the GDPR and process it only with your explicit consent.

• We do not sell your data, and we never use health data for advertising.
• Data read from Apple Health is used only inside the app to show and interpret your own activity. It is never shared with data brokers or advertisers.
• You can delete your account, and everything in it, from inside the app at any time.

Liv+ is operated by Bag of Marshmallows AB, a company registered in Sweden (“Liv+”, “we”, “us”). We are the data controller for the personal data described in this policy.

Registered address: Huvudstagatan 27, 171 58 Solna, Sweden
Company registration number: 559320-6294
Contact for privacy matters: privacy@forevigt.com

a) Account data.When you create an account we collect your email address and, if you provide it, your name. If you sign in with Apple and choose to hide your email, we receive only Apple’s private relay address. Authentication is handled by our identity provider; we do not store your password.

b) Health and wellbeing data you give us. This is the core of the app. Most of what you record falls into: symptoms, including their type, intensity, duration and the area of the body they affect; food and diet; exercise and movement; sleep; weight and other measurements; emotional states and their intensity; conditions you choose to track, including mental health conditions; life events and circumstances you mention, such as work, relationships or a difficult period; and the goals and preferences you set during onboarding.

You are not limited to those. Because you record by talking, you can log anything you want to follow over time, which means you may tell Liv+ about treatment, diagnoses or circumstances we never ask about. Whatever you choose to say is stored and protected in exactly the same way as the rest of your record, under the terms set out below.

c) Voice conversations. Liv+ lets you speak with a voice companion. When you take a call, the audio is streamed so that it can be understood and answered in real time. We do not keep a recording of your voice. The audio is processed as it arrives and is not retained after the call ends. What is kept is the written transcript, from which we derive structured entries such as the symptoms or events you mentioned, along with a summary of the call. Speech recognition may also run on your device to convert speech to text.

d) Apple Health data. If you grant permission, Liv+ reads two things and only two things from Apple Health: your step count and your workouts. Nothing else in your Apple Health record is read. Everything described in (b) above is information you entered yourself; none of it comes from Apple Health. See section 4.

e) Location. If you grant permission, Liv+ uses your location while the app is in use to add context to check-ins and to recognise activity such as walks. Liv+ does not track your location in the background.

f) Subscription data. If you subscribe, the purchase is made through Apple. We receive your subscription status and the identifiers needed to validate it. We never see or store your card details.

g) Device and usage data. Device model, operating system version, app version, language and timezone, push notification tokens, and a record of how often features are used so we can keep the app working and improve it.

We process your health and wellbeing data, your voice conversations and your Apple Health data on the basis of your explicit consent under Article 9(2)(a) GDPR. You give that consent when you first enable each feature, and you can withdraw it at any time by turning the feature off or deleting your account. Withdrawing consent does not affect processing that already took place.

We process account data, subscription data and essential device data to perform our contract with you under Article 6(1)(b) GDPR, and we process limited usage and diagnostic data on the basis of our legitimate interest under Article 6(1)(f) in keeping the service secure, reliable and functioning.

The purposes are:

• To run the app and keep your record available across sessions.
• To turn what you tell us, in writing or by voice, into structured entries you can review, search and see trends in.
• To generate summaries, check-in questions, meal suggestions and activity suggestions using AI models.
• To send you reminders and notifications you have asked for.
• To manage subscriptions, prevent abuse, and keep the service secure.

If you allow it, Liv+ reads your step count and workouts from Apple Health, so that your activity appears alongside the rest of your record without you having to enter it by hand. That is the complete list. We do not read any other Apple Health category, and Liv+ does not write any data back into Apple Health.

Everything else in your Liv+ record is self-logged: the symptoms, conditions, emotions, events and measurements described in section 2. You typed it or said it. None of it comes from Apple Health, and none of it is shared back into it.

We want to be unambiguous about the limits on this data:

• It is never used for advertising, marketing or any similar purpose.
• It is never sold, and never shared with data brokers or information resellers.
• It is never disclosed to third parties for their own purposes, and is shared with our processors only to the extent needed to operate features you have switched on.
• It is never used for any purpose other than improving your health and fitness, or for health research with your separate express permission.

You can revoke Liv+ access to Apple Health at any time in the Health app, under Sharing, or in iOS Settings under Privacy & Security.

We use a small number of service providers. They act as our processors, are bound by contract to use the data only on our instructions, and may not use it for their own purposes.

• Clerk — account creation, sign-in and session management.
• Convex — our application backend and database, where your record is stored. Hosted in the United States.
• Google (Gemini) — the AI models behind Liv. They power the live conversation on calls (what you say is transcribed and answered by Gemini, via Precession), read your entries and transcripts to produce summaries, extract structured symptoms and events, generate meal and workout suggestions, and create the embeddings that make your history searchable. Google processes this only to return a response to Liv+, under contractual terms that forbid using it for its own purposes or to train its models.
• Apple — sign-in with Apple, push and VoIP notifications, and all subscription billing.
• Expo — application delivery, updates and push notification routing.

Voice conversations run on Precession, which is our own product, operated by Bag of Marshmallows AB — the same company that operates Liv+. During a call your audio is streamed to Precession so the companion can hear and respond to you; Precession relies on Google's Gemini models (above) to understand and answer. Precession does not store recordings; it retains the written transcript of the conversation, and returns that transcript to Liv+. Because Precession is ours, this is not a disclosure of your data to an outside company, and transcripts held there are deleted when you delete your account.

We do not sell personal data, we do not share it for cross-context behavioural advertising, and we do not use it to train third-party AI models beyond what is necessary to return a response to you.

Our backend and several of our processors are located in the United States, so your data is transferred outside the EU/EEA. Where that happens we rely on the European Commission’s Standard Contractual Clauses, or on an adequacy decision such as the EU–US Data Privacy Framework where the provider is certified under it, together with additional technical and organisational safeguards.

We keep your record for as long as your account exists, because the value of the app comes from being able to look back over time. Some short-lived operational data, such as caches and temporary processing records, expires automatically within days.

When you delete your account, we delete your personal data from our production systems without undue delay and within 30 days, except where we are required to keep something to comply with a legal obligation. Encrypted backups are overwritten on a rolling cycle.

Under the GDPR you have the right to:

• Access the personal data we hold about you, and receive a copy.
• Have inaccurate data corrected.
• Have your data erased.
• Restrict or object to processing.
• Receive your data in a portable, machine-readable format.
• Withdraw consent at any time, without affecting processing already carried out.

Deleting your account. You can delete your account and all associated data from inside the app, under Settings. You do not need to contact us, and you do not need to give a reason. For anything else, write to privacy@forevigt.com and we will respond within one month.

If you think we have handled your data badly, you can complain to your local supervisory authority. In Sweden that is Integritetsskyddsmyndigheten (IMY), imy.se.

Data is encrypted in transit and at rest. Access to production systems is restricted to those who need it, and authentication tokens are held in the secure storage provided by your device’s operating system. No system is perfectly secure, and we will notify you and the supervisory authority as required if a breach affects your personal data.

This website uses no cookies, no analytics and no tracking pixels. Nothing about your visit is recorded or sent to a third party, and there is no consent banner because there is nothing to consent to. Fonts are served from our own domain rather than fetched from a third party as you browse.

Inside the app, Liv+ uses AI to interpret what you record and to generate summaries and suggestions. The app tells you what is sent and to whom, and asks for your permission, before anything you share reaches the AI service. These are informational only. No automated process produces a decision that has legal effects for you or that similarly significantly affects you within the meaning of Article 22 GDPR, and nothing in Liv+ decides anything about your care, your eligibility for anything, or your access to any service.

Liv+ is for adults. It is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe someone under 18 has created an account, contact us and we will delete it.

Liv+ is a wellbeing and self-tracking tool. It does not diagnose, treat, cure or prevent any medical condition, and nothing it shows you is medical advice. Always speak to a qualified healthcare professional about your health, and never delay seeking care because of something the app has told you. In an emergency, contact your local emergency services.

If we change how we handle your data we will update this page and change the date at the top. If the change is significant, we will tell you in the app before it takes effect.

Bag of Marshmallows AB (org. nr 559320-6294)
Huvudstagatan 27, 171 58 Solna, Sweden
privacy@forevigt.com