privacy policy

last updated: 2 march 2026

plain language, no legalese. your data is yours. we use it to make liv work for you — nothing else.

who we are

liv is built by Leo Borges (leo@leo.wtf), an independent developer based in Sydney, Australia. when we say "we" or "us" in this policy, that's who we mean.

what we collect

we only collect data that's necessary to provide your personal AI assistant:

account info — your name, email address, and phone number (for messaging channels like WhatsApp or Signal).
conversation history — messages between you and your liv agent, stored to maintain context and memory across sessions.
connected service tokens — OAuth refresh tokens for services you connect (e.g. Google Calendar). we store tokens, not your passwords.
agent workspace files — notes, preferences, and memory files your agent creates to serve you better.

what we don't collect

we don't track you across the web.
we don't use cookies or analytics on this site.
we don't collect data from people you interact with through liv.
we don't store your passwords for any connected service.

how we use your data

your data is used for one purpose: making liv work for you.

conversation history — so your agent remembers context, preferences, and prior decisions.
calendar tokens — so your agent can check availability, create events, and manage your schedule.
email tokens — so your agent can read, draft, and send emails on your behalf (when you grant this).
workspace files — so your agent can maintain notes, to-dos, and long-term memory.

we do not use your data to train AI models. your conversations and files are never fed into training pipelines — not ours, not anyone else's.

third-party services

liv connects to third-party services on your behalf. when you authorise a connection, you're granting liv access within the scopes you approve:

service	data accessed	why
Google Calendar	events, availability	scheduling, reminders, invites
Google Contacts	contact names, emails	finding people for scheduling

you can revoke access to any connected service at any time through that service's settings (e.g. Google account permissions). liv will stop accessing that service immediately.

where your data lives

data is stored on secured infrastructure managed by us.
each user's agent runs in an isolated environment — your data is not shared with other users' agents.
OAuth tokens are encrypted at rest.
we use HTTPS for all data in transit.

data retention

your data is retained for as long as your account is active.
you can request full deletion of your data at any time by emailing leo@leo.wtf.
upon deletion, we remove your conversation history, agent workspace, and stored tokens within 30 days.

your rights

you have the right to:

access — ask what data we hold about you.
correct — update inaccurate information.
delete — request full removal of your data.
revoke — disconnect any third-party service at any time.
export — request a copy of your data in a portable format.

children

liv is not intended for use by anyone under 18. we do not knowingly collect data from minors.

changes to this policy

we may update this policy as the product evolves. we'll notify users of material changes. continued use after changes constitutes acceptance.

contact

questions about your data or this policy? reach out at leo@leo.wtf.