Levelix

Privacy policy

1. Who is responsible

Levelix is run by Andreas Papadopoulos, a sole proprietor trading as Levelix, who is the controller of the personal data described here:

2. What we collect and why

Using Levelix without signing in

Your tasks, dates, priorities, timers and preferences are kept only in your browser's local storage. They are not sent to us, and clearing your browser data deletes them.

Your account

When you sign in with Google or with a link sent to your email, we receive your email address — and, with Google, your name, profile photo and a Google account identifier. This is handled by Firebase Authentication and is used only to sign you in and keep your data yours. Legal basis: performing our contract with you (Art. 6(1)(b) GDPR).

Your planner, when you are signed in

Your tasks (titles, dates, priorities, whether they are done), timers and time tracked, your settings and your email address are stored in Google Cloud Firestore, in the EU, so they sync and stay backed up across your devices. Only your signed-in account can read them. Legal basis: contract (Art. 6(1)(b)).

Levelix Pro

Payments are processed by Stripe. From Stripe we receive your name, email address, country, the amount and whether the payment went through — never your full card details. We use your email address to send your Pro code, and we record which account redeemed a code and until when its Pro period runs. Legal bases: contract (Art. 6(1)(b)), and our legal obligation to keep tax and accounting records (Art. 6(1)(c)).

When you write to us

We use your email address and message to answer you. Legal basis: contract, or our legitimate interest in answering questions (Art. 6(1)(f)).

Technical logs

When your browser loads levelix.eu, our hosting provider processes your IP address and request details to deliver the site and keep it secure. Legal basis: legitimate interest (Art. 6(1)(f)).

3. Cookies and local storage

Levelix uses no advertising or analytics cookies and does not track you. It uses your browser's local storage to keep your tasks and preferences (for example, which page you were on), and Firebase keeps your sign-in session in the browser. These are strictly necessary for the app to work.

4. Who processes data for us

We share personal data only with these providers, acting on our instructions, or where the law requires it. We never sell or rent it.

5. Transfers outside the EU

Google and Stripe are global companies. Where they process data outside the European Economic Area, they rely on the EU–US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

6. How long we keep it

7. Your rights

You can ask to access, correct, delete or export your data, to restrict how we use it, or object to it. Signed in, open the account menu and the gear next to Sign out: Clear account deletes all your tasks at once, and Delete account deletes the account itself together with its tasks, settings and Pro time — for good. Purchase records are kept only as long as tax law requires. For anything else, write to info@levelix.eu; we answer within one month.

You also have the right to complain to the Hellenic Data Protection Authority (www.dpa.gr) or to the authority where you live.

8. Security

Levelix is served only over HTTPS. Sign-in runs through Google's Firebase — we never handle or store passwords — and database rules let each account read and write only its own data.

9. Children

Levelix is not intended for children under 15.

10. Changes

If this policy changes, we update this page and the date at the top; important changes are also announced in the app.