Legal

Privacy Policy

Last updated: April 2026 · DPDPA 2023 compliant

🔒 We never sell your data. Ever.

1. Introduction

Nirvana Nikhilum Private Limited ("lifevela," "we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the lifevela application and website (lifevela.com).

We comply with India's Digital Personal Data Protection Act (DPDPA) 2023 and are committed to transparent, responsible data practices. If you have questions, contact us at privacy@lifevela.com.

2. Information We Collect

We collect the following categories of data:

Account Information: Name, email address, and profile details provided during registration or via Google OAuth.

Financial Data: Expense records (amounts, categories, dates), monthly budgets, net worth snapshots, SIP tracker entries, and festival budget plans. This data is stored encrypted.

Habit & Lifestyle Data: Habit names, daily completion logs, streak history, goal records, and OKR progress.

Health & Wellness Data: Sleep logs (bedtime, wake time, quality rating), mood logs (level and optional note), water intake logs, workout records, and nutrition logs. Health data is stored encrypted.

Usage Data: App interactions, feature usage patterns, session duration, and device information (browser type, OS). Collected via Mixpanel analytics.

Communications: Emails you send to our support team and notification preferences.

We do not collect payment card details directly — payments are processed by Stripe, which has its own privacy policy.

3. How We Use Your Information

We use your data to:

• Provide and improve the Service, including calculating your daily Life Score. • Personalise your experience and generate AI-powered insights (Pro users only). • Send transactional emails (account confirmation, weekly digests) via Resend. • Analyse usage patterns to improve features via Mixpanel analytics. • Respond to support requests and communicate service updates. • Comply with legal obligations under Indian law.

We do not use your data for advertising. We do not sell, rent, or share your personal data with third parties for their marketing purposes.

AI Coaching (Pro): The AI feature powered by Anthropic receives only aggregated, anonymised metrics (e.g., "habit completion rate: 78%") — never raw personal data, individual expense amounts, or health notes.

4. Data Storage & Security

Your data is stored on Supabase, hosted on Amazon Web Services (AWS) infrastructure in the Asia Pacific region.

Security measures we implement: • AES-256 encryption for sensitive financial and health data at rest. • TLS 1.3 encryption for all data in transit. • Row-level security (RLS) policies ensuring you can only access your own data. • Regular security audits and vulnerability assessments. • Two-factor authentication available for your account.

While we implement industry-standard security measures, no system is 100% secure. We will notify you promptly in the event of a data breach that affects your personal information, as required by DPDPA 2023.

5. Third-Party Services

We use the following third-party services to operate lifevela:

Google OAuth (Google LLC): Used for sign-in authentication. Google may collect data per their Privacy Policy. We receive only your name, email, and profile picture.

Anthropic (Anthropic, PBC): Powers the AI Life Coach feature for Pro users. Receives only anonymised, aggregated metrics. No raw personal data is shared.

Mixpanel (Mixpanel, Inc.): Analytics platform for understanding feature usage. Collects anonymised usage events. No financial or health data is sent to Mixpanel.

Resend (Resend, Inc.): Email delivery service for transactional emails (account confirmation, weekly digests). Receives your email address only.

Stripe (Stripe, Inc.): Payment processing for Pro subscriptions. We do not store your payment card details. Stripe's Privacy Policy governs payment data.

Supabase (Supabase, Inc.): Database and authentication infrastructure hosted on AWS.

Each third party has their own privacy policy and data practices. We select partners who meet high standards for data protection.

6. Cookies

We use cookies and similar technologies as described in our Cookie Policy (lifevela.com/cookies).

In summary: • Session cookies: Required for authentication and keeping you logged in. • Analytics cookies: Mixpanel cookies to understand how you use the app. • No advertising cookies: We do not use cookies for targeted advertising.

You can manage cookie preferences through your browser settings or via the cookie consent banner.

7. Your Rights

Under India's DPDPA 2023 and our commitment to your privacy, you have the right to:

Access: Request a copy of all personal data we hold about you. Correction: Request correction of inaccurate or incomplete data. Erasure: Request deletion of your account and all associated data. Deletion is processed within 7 days. Portability: Export all your data in JSON format from Settings > Privacy > Export my data. Withdrawal of Consent: Withdraw consent for data processing at any time (this may affect your ability to use the Service). Grievance Redressal: Lodge a complaint with our Data Protection Officer.

To exercise these rights, go to Settings > Privacy in the app, or email privacy@lifevela.com. We will respond within 30 days as required by DPDPA 2023.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service.

Upon account deletion: • Your data is permanently deleted within 7 days. • Anonymised, aggregated analytics data may be retained for up to 2 years. • Backup copies are purged within 30 days of deletion.

Financial transaction logs may be retained for up to 7 years as required by Indian tax and accounting laws, in anonymised form only.

9. Children's Privacy

lifevela is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.

If we become aware that we have collected data from a person under 18, we will delete that data immediately. If you believe a minor has provided us with personal data, please contact privacy@lifevela.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Notify you via email at least 14 days before the changes take effect. • Display a prominent notice in the app. • Update the "Last updated" date at the top of this page.

Continued use of the Service after the effective date constitutes acceptance of the updated policy.

11. Contact Us

For privacy-related enquiries, data requests, or complaints:

Data Protection Officer / Privacy Team Email: privacy@lifevela.com

Nirvana Nikhilum Private Limited CIN: U74999HR2021PTC098092 PAN: AAHCN8353M H No 944, Block C, Sushant Lok 1, Gurugram, Haryana, India – 122001 Incorporated: 30 September 2021 under the Companies Act, 2013

LifeVela is a product of Nirvana Nikhilum Private Limited.

We aim to respond to all privacy requests within 30 days. If you are not satisfied with our response, you may lodge a complaint with India's Data Protection Board under the DPDPA 2023.