Privacy Policy

Last updated: October 6, 2026

This Privacy Policy explains how The Heavy Apps Inc ("we", "us", or "our") collects, uses, discloses, and protects information about you when you use the Levia web service available at levia.theheavyapps.com and related pages (collectively, the "Service"). Levia is a voice AI coach for practicing conversations. Your sessions can touch on personal topics, and we have designed the Service to keep as much of that content as possible on your own device.

By using the Service, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the Service.

1. Information We Collect

1.1 Information You Provide to Us

• Account information: the email address you use to sign in to the Service;
• Session content: voice recordings you make by speaking to the coach, text transcripts of your sessions and the coach's responses, descriptions of situations you enter, screenshots and voice notes you add in Situation Coach, and the scores and feedback generated for you. See Section 2 for how this content is stored and processed;
• Communications: information you provide when you contact our support team;
• Purchase information: records of your subscription and purchases. Payment card details are collected and processed by our payment processor, Stripe, and are not stored by us.

1.2 Information Collected Automatically

• Device and browser information: browser type, operating system, language, and region settings;
• Usage information: features used, pages viewed, session timing, interactions, and error logs;
• Approximate location: general location derived from your IP address. We do not collect precise GPS location;
• Cookies and similar technologies: we use cookies and browser storage to operate the Service, keep you signed in, remember preferences, and analyze traffic.

2. Voice, Screenshots, and Session Content

• Local storage: voice recordings, transcripts, uploaded screenshots, and session results are stored locally in your browser on your device. We do not keep copies on our servers. Because of this, clearing your browser data or switching to another device or browser may remove your session history, and we will not be able to restore it;
• Processing by OpenAI: to provide the Service, the content you submit in a session (for example, your speech, text, and screenshots) is sent to OpenAI, our AI provider, for speech recognition, generating the coach's responses, scoring, and text-to-speech. This data is sent only to deliver the feature you are using. OpenAI processes it under its own terms and privacy policies, which we encourage you to review;
• No training by us: we do not use your session content to train or fine-tune AI models;
• No voice identification: we do not collect biometric identifiers, create voiceprints, or use your voice to identify you;
• Microphone access: the Service uses your microphone only when you choose to speak to the coach, and only after your browser asks for permission. You can revoke this permission in your browser settings at any time, though voice features will not work without it;
• Information about others: if you add screenshots or describe conversations that include other people, please share only what you have the right to share and avoid including unnecessary personal details of third parties.

We recommend that you do not share highly sensitive information in sessions, such as passwords, payment details, government identification numbers, or confidential information belonging to others.

3. How We Use Your Information

• To provide, operate, maintain, and improve the Service;
• To authenticate you and manage your account;
• To process transactions and manage subscriptions;
• To communicate with you, including responding to support requests and sending service-related notices;
• To monitor and analyze usage, trends, and performance of the Service, using aggregated or de-identified data where possible;
• To detect, prevent, and address technical issues, fraud, or misuse;
• To comply with legal obligations and enforce our terms and policies.

4. Legal Bases for Processing

Where the EU or UK General Data Protection Regulation (GDPR) applies, we process your personal data on the following legal bases:

• Performance of a contract — to provide the Service you request, including processing your session content through our AI provider;
• Consent — for microphone access and, where applicable, optional communications. You may withdraw consent at any time;
• Legitimate interests — to improve and secure the Service, provided such interests are not overridden by your rights;
• Legal obligation — where processing is necessary to comply with applicable law.

5. How We Share Information

We do not sell your personal information. We may share information only in the following circumstances:

• AI provider: with OpenAI, as described in Section 2, to process the content of your sessions and generate the features of the Service;
• Payment processor: with Stripe, to process payments and manage subscriptions;
• Other service providers: with vendors who perform services on our behalf, such as hosting, analytics, email delivery, and customer support, under contractual confidentiality obligations and only to the extent needed to perform their functions;
• Legal requirements: where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of our users, the public, or The Heavy Apps Inc. Because most session content is stored only on your device, we generally do not hold it and cannot disclose it;
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, in which case this Policy will continue to apply to your information;
• With your consent: in other cases where you direct us to share information.

6. Data Retention

We retain account information for as long as your account is active and as necessary to provide the Service, comply with our legal obligations (including tax and accounting requirements for payment records), resolve disputes, and enforce our agreements. Session content stored on your device remains there until you delete it or clear your browser data. When information is no longer needed, we delete or anonymize it.

7. Data Security

We use administrative, technical, and physical safeguards designed to protect your information, including encryption in transit and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Because session content is stored locally, you are also responsible for the security of your device and browser.

8. International Data Transfers

We are based in the United States, and our service providers, including OpenAI, may process information in the United States and other countries. Where required, we rely on appropriate safeguards for international transfers, such as standard contractual clauses approved by the European Commission.

9. Your Rights and Choices

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Correct inaccurate or incomplete information;
• Delete your personal information and your account;
• Object to or restrict certain processing;
• Receive a portable copy of your data;
• Withdraw consent at any time, where processing is based on consent — this will not affect processing carried out before withdrawal;
• Lodge a complaint with a supervisory authority.

Residents of California and certain other US states may have additional rights under applicable state privacy laws. We do not sell or share personal information as those terms are defined under the California Consumer Privacy Act.

To request access, correction, or deletion of your account and associated data, contact us at support@leviachat.org. We will respond within the timeframes required by applicable law and may need to verify your identity before fulfilling your request. Session content stored on your device can be removed by you at any time by clearing your browser data.

10. Children's Privacy

The Service is intended for adults and is available only to users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us and we will take steps to delete such information.

11. Third-Party Links and Services

The Service may contain links to third-party websites or services that we do not operate. This Policy does not apply to third-party services, and we encourage you to review their privacy policies.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the "Last updated" date above and, where appropriate, through additional notice within the Service. Where a change affects processing that relies on your consent, we will ask for your consent again where required by law.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us using the details below.