Privacy Policy
1. Who We Are
Lyve is a product of AISmart (ai-smart.ca). References to "we", "us", or "our" in this policy refer to AISmart. For privacy enquiries, contact privacy@ai-smart.ca.
2. What Data We Collect
2.1 Account and Profile Data
- Email address, first name, last name
- Username (handle) and display name
- Avatar / profile image URL
- Timezone and companion tone preference
2.2 Waitlist Data
If you sign up on our website before downloading the app, we collect your email address to notify you when early access is available.
2.3 Sensor and Context Data (App Only)
When you use the Lyve mobile app, it continuously senses context from your device and sends it to our servers. This includes:
- Activity — detected motion type (e.g. walking, driving, still) and a confidence score.
- Location type — inferred place category (e.g. restaurant, park, home) and a confidence score.
- GPS coordinates — latitude and longitude used to enrich location data with venue names and categories (via Google Places). Raw GPS is retained in our database alongside each context event and in your personal place-memory record.
- Social context — inferred from ambient signals (e.g. noise level, environment type), not your contacts or social accounts.
- Emotional state — inferred from device sensors and ambient signals; a confidence score is stored. We do not access your camera for emotion detection.
- Scene label — an optional short text description of the scene, generated by AI from a camera snapshot you choose to share (see Camera below).
Raw sensor events are stored in our database. A normalized summary (context state) is derived and also retained to power your feed, AI companion, and daily recaps.
2.4 Camera Images (Optional, App Only)
If you enable the camera feature, Lyve periodically captures a still image. This image is transmitted to our server and forwarded to OpenAI for scene classification. The image itself is not stored on our servers. Only the resulting scene label text is retained. You can disable this feature in Settings.
2.5 Photos You Upload
Photos you choose to attach to posts are uploaded to Google Cloud Storage. We store a reference URL in our database. Deleting a post removes its database record but does not delete the associated photo file from cloud storage. Photo files persist in storage indefinitely. To request removal of a specific uploaded photo, email privacy@ai-smart.ca with the post details.
2.6 Generated and Social Content
- AI-generated post drafts, published posts, bios, daily recaps, and companion commentary — stored in our database.
- Direct messages you send to other users.
- Comments, reactions, reposts, and follow/connection relationships.
2.7 Settings and Preferences
Your sharing preferences (which signals you allow), posting mode, quiet hours, daily limits, and other app configuration. We also store a push notification token to send you time-sensitive approvals and reminders.
2.8 Device Identifier
A randomly generated device ID is stored on your device (in local storage) and sent with context events. This ID is not linked to any advertising network.
2.9 Server Logs
Our servers record standard access logs (IP address, request path, timestamp, HTTP status code) for security and uptime monitoring. Logs are not linked to your account for analytics purposes and are retained for a limited period.
3. How We Use Your Data
- To operate the service — sense your context, generate post drafts, power your AI companion (Liv), and build your personal feed.
- To personalize — use your place history, preferences, and past context to improve suggestion quality and companion tone.
- To send notifications — approval requests for auto-generated posts, waitlist updates, and optional recap digests.
- To improve the product — aggregate, de-identified analytics only; we do not profile individual users for advertising.
- For safety and abuse prevention — detect misuse, enforce our Terms of Service, and protect other users.
4. Third-Party Services We Use
Running Lyve requires sharing certain data with the following service providers. Each acts as a data processor on our behalf and is bound by appropriate data processing agreements.
- OpenAI (Privacy Policy) — Context events (activity, location type, social context, emotional state), optional camera scene images, and user-approved content are sent to OpenAI's API for AI content generation (posts, bios, recaps, companion replies) and scene classification. OpenAI does not use API inputs to train their models by default.
- Google Places API — GPS coordinates are sent to Google's Places API to identify nearby venues and enrich location context with venue name, category, and place ID. Google's Privacy Policy applies to this processing.
- Google Cloud Storage — Photos you upload to posts are stored in Google Cloud Storage. Google's infrastructure privacy practices apply.
- Expo (Expo Go / EAS) — Push notification tokens are registered with Expo's push notification service to deliver in-app alerts to your device. Expo's Privacy Policy applies.
- Open-Meteo — GPS coordinates are sent to Open-Meteo's free weather API to enrich posts with local weather context. Open-Meteo does not require user accounts and does not retain personal data beyond the API request.
- Clerk (Privacy Policy) — Lyve uses Clerk for user authentication and session management. Clerk processes your email address, identity-provider sign-in data (if you sign in via a social provider), and session tokens on our behalf. Authentication data flows through Clerk's infrastructure on every sign-in, sign-up, and API request.
We do not sell or share your data with advertising networks, data brokers, or analytics platforms.
5. Data Retention
- Raw context events — retained indefinitely while your account is active to power your personal history. You can request deletion.
- User places (GPS) — retained to build your place memory. No in-app control currently exists to clear place history; to request deletion of your place records, email privacy@ai-smart.ca.
- Generated content — retained until you delete the post/bio. Deleting a post removes its record from our database. Uploaded photo files in cloud storage are not automatically deleted when a post is removed; they persist indefinitely until you contact us. To request removal of a specific uploaded photo, email privacy@ai-smart.ca with the post details.
- Direct messages — retained until you or the other party requests deletion.
- Camera images — not retained on our servers; only the scene label text is stored.
- Waitlist email — retained until you unsubscribe or request deletion.
6. Your Rights
Depending on your jurisdiction you have the right to:
- Access — request a copy of the personal data we hold about you.
- Correction — update inaccurate or incomplete data (most profile data can be edited in-app).
- Deletion — request deletion of your account and associated data ("right to be forgotten"). We will delete your data within 30 days of a verified request.
- Restriction / Objection — restrict or object to certain processing (e.g. AI-powered personalization).
- Data portability — request a machine-readable export of your data.
- Withdraw consent — where processing is based on consent (e.g. location sensing), you can withdraw by disabling the relevant permission or turning off the feature in Settings.
- CCPA opt-out — we do not sell personal information. California residents may still contact us to confirm this.
To exercise any right, email privacy@ai-smart.ca. We may need to verify your identity before processing the request.
7. Legal Basis for Processing (GDPR)
For users in the EEA, UK, or Switzerland, our legal bases are:
- Contract — processing necessary to provide the Lyve service you signed up for (account, context sensing, content generation).
- Consent — camera scene capture, location access, and waitlist email. You may withdraw consent at any time.
- Legitimate interests — security, fraud prevention, and aggregate product improvement, balanced against your privacy interests.
8. Data Security
All data is transmitted over HTTPS/TLS. Our database is hosted in a private network environment not directly accessible from the internet. Access is restricted to authorised personnel. We maintain routine backups with encryption at rest. No method of transmission or storage is 100% secure; in the event of a data breach we will notify affected users as required by applicable law.
9. Children's Privacy
Lyve is not directed at children under 13. We do not knowingly collect personal data from children. If you believe a child has created an account, contact us and we will delete the data promptly.
10. International Transfers
We are based in Canada. Your data may be processed by our service providers (OpenAI, Google) in the United States and other countries. Where required, we rely on Standard Contractual Clauses or equivalent safeguards for transfers from the EEA/UK.
11. Changes to This Policy
We may update this policy. The "Last updated" date at the top reflects the latest revision. Material changes will be communicated via email or in-app notice at least 14 days before they take effect.
12. Contact
AISmart — Privacy
ai-smart.ca
privacy@ai-smart.ca