Privacy policy

Effective: 7 November 2026

1. In short

heylivo remembers your deadlines and reminds you of them. You can start right away, without a name or an email address. We only store what is needed for that: your deadlines, an email address to secure your account if you want, the address for reminders on your device and, if you buy Livo Plus, the payment details. We use no advertising, no analytics tools and no tracking cookies, and we do not sell any data. We only note through which page you first came to heylivo (see section 3). Who is responsible for your data and how to reach us is in section 18.

2. Visiting the website and the app

The website and the app are hosted on GitHub Pages (GitHub, Inc., USA). When you open a page, your browser automatically sends technical data such as your IP address, the date and time of the request, the page requested, your browser type and operating system. GitHub processes this data to deliver the pages and to protect the service against abuse, and may keep it in server logs for a limited time. We do not use this data to identify you.

Legal basis: our legitimate interest in a secure and reliable website (Art. 6(1)(f) GDPR).

Fonts, images and all program code are loaded from our own domain. Your browser does not connect to Google, font services or content delivery networks for this.

3. Your account and your deadlines

When you first open the app, it creates an anonymous account for your browser. It consists only of a random identifier, not of a name or email address. In your account we store:

your deadlines: name, date, time, repetition, reminder settings, the template, your optional notes and your device's time zone,
the start of your trial and how many deadlines you have created,
if you have bought Livo Plus: until when it is valid (see section 7),
through which page you came to heylivo when you first opened the app, as a single keyword such as “instagram”, “google” or “direkt” (direct).

The data is stored with Supabase (Supabase, Inc.), which provides our database, sign-in and server functions. The servers are located in the EU (Ireland). Each account can only see its own data. For security, Supabase also keeps technical details of sign-ins, such as the time and IP address, in logs for a limited time.

If you add deadlines for other people, for example birthdays or doctor's appointments of your children, we store the details you enter for them. Please only enter what you need for the reminder. This also applies to notes: please do not put passwords, bank details or health information in them.

Your browser recognises where you came from by the previous page or by an addition to the link, such as “?von=instagram”. Nothing is stored in your browser on our website for this: the hint is only passed on in the links to the app. We do not store the full address of the previous page. This shows us through which channels people find heylivo.

Legal basis: performance of the user agreement (Art. 6(1)(b) GDPR); for the security logs, our legitimate interest in protection against abuse, and for the source, our legitimate interest in learning which channels work (Art. 6(1)(f) GDPR).

4. Securing your account and signing in

With "Secure account" you can add an email address to your account, so that you can find your deadlines again on another device or after clearing your browser data. For this we store your email address and the language of the app, so that our emails reach you in your language. To confirm and to sign in, we send you a 6-digit code by email. We also let you know by email when your trial is ending: seven days before, on the last day and on the day after – only as long as you don't have Livo Plus. You can unsubscribe from these notices at any time; a short reply to one of these emails is enough. We send these emails via Resend (Resend, Inc., USA; sent via servers in Ireland). A code is valid for one hour.

Legal basis: performance of the user agreement (Art. 6(1)(b) GDPR). For the notices about the end of the trial, also our legitimate interest in letting you know in time that the free use is ending and about Livo Plus (Art. 6(1)(f) GDPR).

5. Reminders by push notification

If you turn on reminders and your browser allows it, we store the push address and encryption keys of this browser and the language of the app with Supabase. Reminders are delivered via the push service of your browser or operating system (for example Google, Apple, Mozilla or Microsoft). The content is encrypted, so the push service cannot read it. Via push you also get the notices about the end of your trial (seven days before, on the last day and on the day after).

You can turn notifications off at any time in your browser or device settings. If you sign out of the app on a device, we delete the entry for that device. If a push service reports an address as invalid, we delete it as well.

Legal basis: performance of the user agreement at your request (Art. 6(1)(b) GDPR). You give permission for notifications in your browser and can withdraw it there at any time.

6. Voice input "Hey Livo"

When you speak a deadline, the speech recognition of your browser or operating system turns it into text, for example Google in Chrome, Apple in Safari or Microsoft in Edge. That provider's privacy terms apply to this. You allow access to the microphone in your browser. heylivo only receives the recognised text and works out the type, date and time of the deadline directly in the app. Only the deadline you confirm is saved. You can also type the sentence instead.

7. Livo Plus and payment

You buy Livo Plus on the payment page of Stripe (Stripe Payments Europe, Ltd., Ireland). Stripe processes your payment data. We never see or store your full card number. Stripe tells us whether the payment was successful, which account it is for, the email address given with the payment and an identifier of the checkout. We store these details together with the term of Livo Plus with Supabase.

Legal basis: performance of the contract (Art. 6(1)(b) GDPR) and our tax and commercial obligations (Art. 6(1)(c) GDPR). We keep payment and accounting records for as long as Greek tax law requires.

Calendar subscription: With Livo Plus you can subscribe to your deadlines in your own calendar, for example Google Calendar, Apple Calendar or Outlook. For this we create a secret link, which we store with Supabase together with your account and the language of the app. Through this link your calendar service regularly fetches the title, date, time and reminder time of your deadlines; what it does with them is governed by its own privacy policy. You can replace the link with a new one in the app at any time, and the old one then stops working. Without an active Livo Plus the link no longer delivers any deadlines. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).

Notices before it ends: Livo Plus does not renew automatically. That is why we remind you 30 and 7 days before it ends and on the day after, by email and – if you have turned on reminders – by push notification. You can unsubscribe from these notices at any time; a short reply to one of these emails is enough. Legal basis: our legitimate interest in letting you know in time that Livo Plus is ending (Art. 6(1)(f) GDPR).

8. Contacting us by email

If you write to us, we process your email address, your name if given and your message in order to answer your request. Emails to our address are forwarded by Spaceship (Spaceship, Inc., USA) to our mailbox at Microsoft (Outlook.com). Legal basis: performance of a contract or pre-contractual steps (Art. 6(1)(b) GDPR), otherwise our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR). We delete enquiries once they have been dealt with, unless we are legally required to keep them.

9. Our profiles on Instagram, Facebook, TikTok, YouTube and Pinterest

We run profiles on Instagram and Facebook (both Meta Platforms Ireland Ltd., Ireland), on TikTok (TikTok Technology Limited, Ireland), on YouTube (Google Ireland Limited, Ireland) and on Pinterest (Pinterest Europe Limited, Ireland). On our website and in the app we link to them. These are plain links: the platform only opens, and only receives data from you, when you tap them. When you visit our profiles, the privacy notices of the respective platform apply; the platforms may also transfer data to countries outside the EU.

The platforms provide us with aggregated statistics about the use of our profiles, for example views and reach. Where we are jointly responsible for this with the platform (Art. 26 GDPR), you can exercise your rights with us and with the platform. For our Facebook Page, Meta's joint controller addendum (Page Insights) applies. Under it, Meta takes primary responsibility for these statistics, including for handling your rights. If you message us or comment there, we process this to reply. The legal basis is our legitimate interest in presenting heylivo and communicating with you (Art. 6(1)(f) GDPR).

10. Storage in your browser

We do not use cookies for tracking or advertising. The app only stores what the service needs in your browser's local storage:

the sign-in session of your account, so that the app can load your deadlines,
the language you have chosen,
which notices you have closed,
a service worker that makes the app installable and shows the reminders. It does not cache any pages or deadlines.

This storage is strictly necessary for the service you have requested and therefore does not require consent (Art. 5(3) ePrivacy Directive). If you clear your browser data, the session is gone. You can get back to a secured account with "Sign in".

11. Recipients and service providers

We only pass personal data to service providers we need to run heylivo. Where they process data on our behalf, their data processing terms apply:

GitHub, Inc. (USA): hosting of the website and the app
Supabase, Inc.: database, sign-in and server functions, servers in the EU (Ireland)
Resend, Inc. (USA): sending the emails with the codes and the notices about the end of the trial
Stripe Payments Europe, Ltd. (Ireland): payments for Livo Plus
ManyChat, Inc. (USA): automatic direct messages on Instagram during promotions, for example sending promo codes
push services of browser and operating system providers (for example Google, Apple, Mozilla, Microsoft): delivery of the encrypted reminders
Spaceship, Inc. (USA): domain and DNS of heylivo.com and forwarding of emails to our address
Microsoft Corporation (USA / EU): email mailbox

We do not sell personal data.

12. Transfers outside the EU

Some of these providers are based in the USA or may process data there. Such transfers are based on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the EU Standard Contractual Clauses (Art. 46(2)(c) GDPR).

13. Retention and deletion

We keep your deadlines until you delete them in the app or your account is deleted. You can delete deadlines yourself at any time. If you would like your whole account deleted, write to us (contact details in section 18), for a secured account from the email address stored there. Details we have to keep for tax reasons (section 7) are deleted when the retention periods end.

14. Security

All connections are encrypted (HTTPS). The database is set up so that each account can only read and change its own data. To secure your account and to sign in, we use one-time codes instead of passwords.

15. Your rights

Under the GDPR you have the right to:

access your data (Art. 15),
have incorrect data corrected (Art. 16),
have your data deleted (Art. 17),
restrict processing (Art. 18),
receive your data in a portable format (Art. 20),
object at any time to processing based on our legitimate interests (Art. 21),
withdraw a consent you have given, with effect for the future (Art. 7(3)).

To exercise your rights, write to us (contact details in section 18). Before we answer, we may need to check that the account belongs to you.

You also have the right to lodge a complaint with a supervisory authority (Art. 77 GDPR). The authority responsible for us is the Hellenic Data Protection Authority, Kifisias 1–3, 115 23 Athens, Greece, www.dpa.gr. You can also contact the supervisory authority of the EU country where you live or work.

16. Required information and automated decisions

You do not need to give any personal details to use heylivo. To secure your account we need an email address, and for Livo Plus the details on the payment page. We do not use automated decision-making or profiling.

17. Changes to this policy

We update this policy when heylivo or the legal requirements change. You will always find the current version on this page, with the effective date at the top.

18. Controller and contact

The controller for personal data on heylivo.com and in the heylivo app is heylivo (owner: George Tsiafitsas), Dimokritou 22, 85101 Rhodes, Greece. More details are in the legal notice. You can reach us at any time at hallo@heylivo.com. We have not appointed a data protection officer, as we are not legally required to.