Privacy Policy

This policy explains what Levolve collects when you use the game on the web or on Android, why we collect it, who can see it, and how you can delete it. “Levolve”, “we” and “us” mean the Levolve service and the team that runs it.

The short version

• We collect what the game needs to work: your account, your profile and the quests you do.
• Your level, rank, titles and completed quests are public, like a game profile. Your email, your home city and your passport are private.
• We use your location only at city level, and only when you choose a city or have allowed location. We never keep a history of where your phone has been.
• We do not sell your data and we do not show ads.
• You can delete your account at any time from Settings. See Delete your account.

What we collect

Your account

• Email and password, if you sign up with email. Your password is handled by our sign-in provider and stored only in hashed form; we never see it.
• Your Google name and email, if you continue with Google. Your Google name stays in your private sign-in record; it is not shown on your profile. We do not store your Google profile picture.

Your profile and progress

• Your @handle and display name, which you can change. A new account starts as “Player” with a random @handle until you choose your own.
• When you confirm that you are 18 or older, the time you confirmed it, kept in your private sign-in record. We do not ask for your date of birth.
• Your XP, levels, rank, titles, streak and streak shields, season XP, the classes you follow and the date you joined.
• The quests you save to your bucket list, the daily quests picked for you, and the quests you complete, with the date and time and the XP you earned.
• The friend leagues you create or join.

Location, at city level only

• Home city. If you pick a home city, we store that city and its centre point, so we can suggest quests near you.
• “Use my current location”. If you choose this and allow location, your device sends its approximate position to our server once to find the nearest city. We store only the city, not the position.
• Passport stamps. Each card you earn stamps a city in your passport. The city is the quest’s own city if it has one. Otherwise, if you have already allowed location, the app reads your approximate position at that moment, finds the nearest city and stores only that city. If not, it uses your home city. The app never asks for location just to stamp a card. Your passport is private.

Things you send us

• Quests you submit: the title, description, class, difficulty and any city or country you add.
• Feedback and reports: your note, the screen you sent it from, the app version and the platform. When you report a player, a quest or a league, the report also names what you reported.

Notifications

• If you turn notifications on, we store the token your browser or phone gives us, so we can send you game notifications. Android notifications are delivered by Google’s Firebase Cloud Messaging; web notifications by your browser’s push service. Turning notifications off removes the token.
• The daily streak reminder is set on your device and uses your device’s time zone there only.

Settings on your device

The app keeps your sign-in session and your preferences (style, sound, effects, reminders) on your device or in your browser’s storage. These stay on your device.

Website visits

• On the website pages (this page, the home page, shared cards and public profiles, but not inside the game), we use PostHog, an analytics service hosted in the European Union, to count visits and see which pages work, only if you tap Accept on the analytics bar. These events are not linked to your Levolve account and never include screen recordings. You can change your choice at any time with “Analytics choice” at the bottom of every website page.
• Like every website, our hosting providers record technical data such as your IP address, browser and the time of each request, to run and protect the service.

What we do not collect

We do not collect your contacts, photos, payment details, precise location history or anything from other apps. There are no purchases in Levolve today.

Why we use it

• To run the game: your account, cards, XP, ranks, streaks, passport and leaderboards.
• To suggest quests that fit you and are near you.
• To send the notifications you turned on.
• To review submitted quests and feedback, and to keep the game fair and safe.
• To understand how the website is used and to fix problems.
• To meet our legal duties.

We rely on your consent (for example for location, notifications and website analytics), on what is needed to provide the game you signed up for, and on our legitimate interest in keeping the service secure and working well. You can withdraw consent at any time, for example by turning off location or notifications in your device settings.

What other people can see

Members of a friend league you join can also see the league and the quests its members completed recently. When you share a card, the link shows that card, your name and the quest’s own city if it has one, straight away. It never shows your passport.

Who we share it with

We do not sell or rent your personal data. We share it only with service providers that run Levolve for us:

• Supabase: our database and sign-in.
• Vercel: website hosting and scheduled tasks.
• Google: “Continue with Google”, and Firebase Cloud Messaging for Android notifications.
• PostHog: website analytics, hosted in the EU.
• OpenFreeMap: the map pictures in the game. Your device downloads them directly, so OpenFreeMap sees your IP address, as any website would.

We may also disclose data when the law requires it, or to protect the safety of players or the public.

Where your data is stored

Our providers may store and process data in countries other than India, including in the European Union and the United States. We choose providers that protect data with industry-standard security.

How long we keep it

• We keep your account data for as long as your account exists.
• When you delete your account, your profile, progress, cards, passport, locations, notification tokens, feedback and reports are deleted straight away. Our providers’ backups may keep copies for a short time before they are overwritten.
• Quests you submitted stay in the game without your name on them. Friend leagues you created pass to their longest-standing member.

Your rights

Wherever you live, you can:

• see your data in the app, or ask us for a summary of it;
• correct it: you can edit your handle, display name and home city in the app;
• delete it: delete your account in Settings, or follow these steps;
• withdraw consent, for example for location or notifications;
• complain to us, and we will reply.

In India, under the Digital Personal Data Protection Act, 2023, you also have the right to nominate someone to exercise your rights if you die or become unable to, and, if you are not satisfied with our answer to a complaint, to complain to the Data Protection Board of India.

In the European Union and the United Kingdom, you also have the rights to data portability, to restrict or object to processing, and to complain to your local data protection authority.

To use any of these rights, email xernaitech@gmail.com. We aim to reply within 30 days.

Age

Levolve is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you believe someone under 18 has an account, email us and we will delete it.

Security

Data travels over encrypted connections. Access to private data is limited by database rules, so each player can read only their own private rows. No system is perfectly secure, so please use a strong password and keep it to yourself.

Changes to this policy

When we change this policy we will update the date below. If a change is significant, we will make it visible in the app before it applies.

Contact and complaints

For any question or complaint about your privacy, email xernaitech@gmail.com. This address also serves as our grievance contact under Indian law.