Privacy Policy
Last updated: 24 August 2026
Contents
1. Introduction
Nirvana Nikhilum Private Limited ("LifeVela," "we," "our," or "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use the LifeVela application and website (lifevela.com).
If you have questions, contact us at privacy@lifevela.com.
2. Information We Collect
We collect the following categories of data:
Account Information: Name, email address, and profile details provided during registration or via Google OAuth.
Financial Data: Expense records (amounts, categories, dates), monthly budgets, net worth snapshots, SIP tracker entries, and festival budget plans.
Habit and Lifestyle Data: Habit names, daily completion logs, streak history, goal records, and OKR progress.
Health Data: Sleep logs (bedtime, wake time, quality rating), mood logs (level and optional note), water intake logs, and workout records. The limited on-device health preview described below is not uploaded to us, stored in your account, or collected as LifeVela data.
Usage Data: Page views and related browser, device, and network information collected through Google Analytics. The integration sends page-view events, including the page path, when a page loads or the route changes.
Communications: Emails you send to our support team and notification preferences.
We do not collect payment card details directly. Payments are processed by Razorpay, which has its own privacy policy, and we do not store card details.
3. How We Use Your Information
We use your data to:
- Provide and improve the Service, including calculating your daily Life Score. - Personalise your experience and generate AI-powered insights (Pro users only). - Send transactional emails (account confirmation, weekly digests) via Resend. - Analyse page-view patterns through Google Analytics to understand traffic and improve the Service. - Respond to support requests and communicate service updates. - Comply with legal obligations under Indian law.
We do not use your data for advertising. We do not sell, rent, or share your personal data with third parties for their marketing purposes.
Vela is powered by Google Gemini. When you message Vela we send your message text, your Life Score history, and summaries of the relevant dimensions to Google for inference. This is not used to train generalised models. Vela keeps memory about you which you can inspect, edit and delete at Settings then Vela.
If Google Gemini is unavailable, your request may instead be sent to OpenAI, which acts as a fallback provider for the same purpose. The same limits apply: it receives only what is needed to answer you, it never receives your Life Thread, and the data is not used to train models. OpenAI processes this data outside India.
4. Life Thread never enters AI
Your journal entries are not sent to any AI model, are not used to generate insights, and are not included in anything Vela reads.
5. Google user data
Where you sign in with Google or connect Google services we access only the scopes you approve. Sign-in gives us your name, email address and profile photo. Calendar, if connected, gives us the events needed to show what your day holds.
LifeVela use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell Google user data to third parties, do not use it to serve advertising of any kind, and do not use it to determine creditworthiness or for lending. We do not use Google user data to train generalised AI or machine-learning models. Human access is limited to what you explicitly authorise, what is necessary for security or to comply with law, and data that is aggregated and de-identified. You can revoke access at any time from your Google Account permissions page.
6. Health and wearable connections
Current availability — limited internal mobile testing: LifeVela may offer an explicit, user-initiated, foreground preview from Apple Health or Health Connect. It requests read-only permission only for sleep duration and stages, steps, heart rate, resting heart rate, and active energy. The preview is in memory only: LifeVela does not upload it, store it in your account, send it over the network, write it to Supabase, add it to your Life Score, show it to Vela, or create a log entry from it.
This is a preview, not an automatic sync or cloud connection. Clear preview removes the preview from the app; it does not delete anything from Apple Health or Health Connect. You manage or revoke system permissions in Apple Health or iPhone Settings, and in Health Connect or Android Settings, respectively.
Future cloud wearable connections, if we introduce them, are separate from this local preview. Before such a connection is available, we will identify the provider, the data categories, where data is processed, and the controls to disconnect it. Health data is never used for advertising or sold.
7. Data Storage and Security
Your data is stored on Supabase, hosted on Amazon Web Services (AWS) infrastructure in the Asia Pacific region.
Security measures we implement: - All traffic encrypted in transit using TLS. - Data at rest encrypted by our infrastructure providers. - Row-level security restricting every record to the account that owns it. - Two-factor authentication available. - Production data access limited to those who need it.
While we implement these security measures, no system is 100% secure. If a breach affects your personal data we will notify you within 72 hours of becoming aware, with a plain description of what happened, what data was involved and what you can do, and we will notify the Data Protection Board as required.
8. Third-Party Services
We use the following third-party services to operate LifeVela:
Google (Google LLC): Used for sign-in authentication and, where connected, Calendar access. We receive only the scopes you approve. Google Gemini powers Vela and receives your message text, Life Score history, and dimension summaries for inference.
OpenAI (OpenAI, LLC): Acts as a fallback AI provider for Vela when Google Gemini is unavailable. Receives your messages to Vela and relevant score summaries, but only when Gemini is unavailable. The same data limits apply as for Gemini: it never receives your Life Thread, and the data is not used to train models. OpenAI processes this data outside India.
Razorpay (Razorpay Software Private Limited): Payment processing for Pro subscriptions. We do not store your payment card details. Razorpay's Privacy Policy governs payment data.
Railway (Railway Corp): May host a future Open Wearables component for separately disclosed cloud wearable connections in a United States region. It is not used by the current local-only Apple Health or Health Connect preview.
Google Analytics (Google LLC): Page-view measurement. Google receives page-view events, including the page path, and may receive standard browser, device, and network information associated with those requests.
Resend (Resend, Inc.): Email delivery service for transactional emails. Receives your email address only.
Supabase (Supabase, Inc.): Database and authentication infrastructure hosted on AWS.
Each third party has their own privacy policy and data practices. We select partners who meet high standards for data protection.
10. Your Rights
Under India's Digital Personal Data Protection Act and our commitment to your privacy, you have the right to:
Access: Request a copy of the personal data covered by your request. Correction: Request correction of inaccurate or incomplete data. Erasure: Request deletion of your account and associated data, subject only to the limited retention described below. Self-service export: Download the bounded JSON product export from Settings then Privacy. It contains basic profile details and 13 named record sections, capped at 500 records per section. Each section reports the available and exported counts and whether more records exist. Sections are read independently and may reflect slightly different moments if your data changes while the export is prepared. For a broader access request, email privacy@lifevela.com. Withdrawal of Consent: Withdraw consent for data processing at any time (this may affect your ability to use the Service). Grievance Redressal: Lodge a complaint with our Grievance Officer.
To exercise these rights, go to Settings then Privacy in the app, or email privacy@lifevela.com. We will respond within 30 days.
11. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service.
Upon account deletion: - Your account and active product data are removed when the deletion workflow completes. If a temporary provider or infrastructure failure interrupts the workflow, it remains queued for automatic retry and is not reported as complete. - Restricted recovery backup copies may remain for up to 30 days before expiry from the backup cycle. - De-identified aggregate analytics that cannot reasonably be linked back to you may be retained. Current Team aggregates are recalculated without your contribution when you leave. - Minimal security, deletion-receipt, and legally required records are retained only for their stated purpose and retention period. - Google Analytics page-view data is retained according to our Google Analytics property configuration and Google's applicable retention rules.
Financial transaction logs may be retained for up to 7 years as required by Indian tax and accounting laws, in anonymised form only.
12. Where we stand on DPDP
The DPDP Rules 2025 were notified on 14 November 2025, with full obligations applying from 13 May 2027. We are building toward those obligations: consent is recorded and auditable, you can download the bounded product export and start account deletion today, and breach notification follows the 72-hour requirement. We will say we are compliant when we are, and not before.
13. Children's Privacy
LifeVela is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from minors.
If we become aware that we have collected data from a person under 18, we will delete that data immediately. If you believe a minor has provided us with personal data, please contact privacy@lifevela.com.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Notify you via email at least 14 days before the changes take effect. - Display a prominent notice in the app. - Update the "Last updated" date at the top of this page.
Continued use of the Service after the effective date constitutes acceptance of the updated policy.
15. Contact Us
For privacy-related enquiries, data requests, or complaints:
Privacy Team Email: privacy@lifevela.com
Grievance Officer: Manish Bhardwaj Email: manish@lifevela.com
Nirvana Nikhilum Private Limited CIN: U74999HR2021PTC098092 PAN: AAHCN8353M H No 944, Block C, Sushant Lok 1, Gurugram, Haryana, India – 122001 Incorporated: 30 September 2021 under the Companies Act, 2013
LifeVela is a product of Nirvana Nikhilum Private Limited.
We aim to respond to all privacy requests within 30 days. If you are not satisfied with our response, you may lodge a complaint with India's Data Protection Board.